From 242a69d06b9280755c1a8163624fefd85039c510 Mon Sep 17 00:00:00 2001 From: Usama Sadiq Date: Tue, 7 Oct 2025 09:27:24 +0500 Subject: [PATCH] Fix upgrade job pin cryptography (#37436) * fix: pin cryptography to fix the upgrade job * fix: pin pact-python<3.0.0 --------- Co-authored-by: edX requirements bot <49161187+edx-requirements-bot@users.noreply.github.com> --- requirements/common_constraints.txt | 4 - requirements/constraints.txt | 11 ++ requirements/edx-sandbox/base.txt | 18 +-- requirements/edx/assets.txt | 2 +- requirements/edx/base.txt | 84 +++++++------ requirements/edx/coverage.txt | 6 +- requirements/edx/development.txt | 118 ++++++++--------- requirements/edx/doc.txt | 88 ++++++------- requirements/edx/semgrep.txt | 119 +++++++++++++----- requirements/edx/testing.txt | 104 +++++++-------- requirements/pip-tools.txt | 4 +- .../structures_pruning/requirements/base.txt | 2 +- .../requirements/testing.txt | 2 +- scripts/user_retirement/requirements/base.txt | 34 ++--- .../user_retirement/requirements/testing.txt | 36 +++--- scripts/xblock/requirements.txt | 2 +- 16 files changed, 357 insertions(+), 277 deletions(-) diff --git a/requirements/common_constraints.txt b/requirements/common_constraints.txt index af5c9e04c6..368f8fa811 100644 --- a/requirements/common_constraints.txt +++ b/requirements/common_constraints.txt @@ -22,7 +22,3 @@ # elastic search changelog: https://www.elastic.co/guide/en/enterprise-search/master/release-notes-7.14.0.html # See https://github.com/openedx/edx-platform/issues/35126 for more info elasticsearch<7.14.0 - -# Cause: https://github.com/openedx/edx-lint/issues/458 -# This can be unpinned once https://github.com/openedx/edx-lint/issues/459 has been resolved. - diff --git a/requirements/constraints.txt b/requirements/constraints.txt index 3c36ffafcd..f78de74731 100644 --- a/requirements/constraints.txt +++ b/requirements/constraints.txt @@ -125,3 +125,14 @@ xmlsec==1.3.14 # https://github.com/django-commons/django-debug-toolbar/issues/2172 # Pin this back to the previous version until that bug is fixed. django-debug-toolbar<6.0.0 + +# Date 2025-10-07 +# Cryptography 46.0.0 conflicts with system dependencies needed for snowflake-connector-python +# snowflake-connector-python comes as a dependency of edx-enterprise so it can not be directly pinned here. +# See issue https://github.com/openedx/edx-platform/issues/37417 for details on this. +# This can be unpinned once snowflake-connector-python==4.0.0 is available (contains the fix). +# pact-python==3.0.0 also removes cffi dependency and is causing the upgrade build to fail +# This should also be removed together with cryptography constraint. +# Issue: https://github.com/openedx/edx-platform/issues/37435 +cryptography<46.0.0 +pact-python<3.0.0 diff --git a/requirements/edx-sandbox/base.txt b/requirements/edx-sandbox/base.txt index ec9a8ff522..a2013ea748 100644 --- a/requirements/edx-sandbox/base.txt +++ b/requirements/edx-sandbox/base.txt @@ -8,17 +8,19 @@ cffi==2.0.0 # via cryptography chem==2.0.0 # via -r requirements/edx-sandbox/base.in -click==8.2.1 +click==8.3.0 # via nltk codejail-includes==2.0.0 # via -r requirements/edx-sandbox/base.in contourpy==1.3.3 # via matplotlib cryptography==45.0.7 - # via -r requirements/edx-sandbox/base.in + # via + # -c requirements/constraints.txt + # -r requirements/edx-sandbox/base.in cycler==0.12.1 # via matplotlib -fonttools==4.59.2 +fonttools==4.60.1 # via matplotlib joblib==1.5.2 # via nltk @@ -30,9 +32,9 @@ lxml[html-clean]==5.3.2 # -r requirements/edx-sandbox/base.in # lxml-html-clean # openedx-calc -lxml-html-clean==0.4.2 +lxml-html-clean==0.4.3 # via lxml -markupsafe==3.0.2 +markupsafe==3.0.3 # via # chem # openedx-calc @@ -42,7 +44,7 @@ mpmath==1.3.0 # via sympy networkx==3.5 # via -r requirements/edx-sandbox/base.in -nltk==3.9.1 +nltk==3.9.2 # via # -r requirements/edx-sandbox/base.in # chem @@ -62,7 +64,7 @@ pillow==11.3.0 # via matplotlib pycparser==2.23 # via cffi -pyparsing==3.2.4 +pyparsing==3.2.5 # via # -r requirements/edx-sandbox/base.in # chem @@ -72,7 +74,7 @@ python-dateutil==2.9.0.post0 # via matplotlib random2==1.0.2 # via -r requirements/edx-sandbox/base.in -regex==2025.9.1 +regex==2025.9.18 # via nltk scipy==1.16.2 # via diff --git a/requirements/edx/assets.txt b/requirements/edx/assets.txt index bb6693f4dc..f66289e09b 100644 --- a/requirements/edx/assets.txt +++ b/requirements/edx/assets.txt @@ -4,7 +4,7 @@ # # make upgrade # -click==8.2.1 +click==8.3.0 # via -r requirements/edx/assets.in libsass==0.10.0 # via diff --git a/requirements/edx/base.txt b/requirements/edx/base.txt index d222c2a661..7304601398 100644 --- a/requirements/edx/base.txt +++ b/requirements/edx/base.txt @@ -8,7 +8,7 @@ acid-xblock==0.4.1 # via -r requirements/edx/kernel.in aiohappyeyeballs==2.6.1 # via aiohttp -aiohttp==3.12.15 +aiohttp==3.13.0 # via # geoip2 # openai @@ -22,18 +22,18 @@ aniso8601==10.0.1 # via edx-tincan-py35 annotated-types==0.7.0 # via pydantic -anyio==4.10.0 +anyio==4.11.0 # via httpx appdirs==1.4.4 # via fs -asgiref==3.9.1 +asgiref==3.10.0 # via # django # django-cors-headers # django-countries asn1crypto==1.5.1 # via snowflake-connector-python -attrs==25.3.0 +attrs==25.4.0 # via # -r requirements/edx/kernel.in # aiohttp @@ -50,13 +50,13 @@ babel==2.17.0 # enmerkar-underscore backoff==1.10.0 # via analytics-python -bcrypt==4.3.0 +bcrypt==5.0.0 # via paramiko -beautifulsoup4==4.13.5 +beautifulsoup4==4.14.2 # via # openedx-forum # pynliner -billiard==4.2.1 +billiard==4.2.2 # via celery bleach[css]==6.2.0 # via @@ -68,14 +68,14 @@ bleach[css]==6.2.0 # xblock-poll boto==2.49.0 # via -r requirements/edx/kernel.in -boto3==1.40.31 +boto3==1.40.46 # via # -r requirements/edx/kernel.in # django-ses # fs-s3fs # ora2 # snowflake-connector-python -botocore==1.40.31 +botocore==1.40.46 # via # -r requirements/edx/kernel.in # boto3 @@ -85,7 +85,7 @@ bridgekeeper==0.9 # via -r requirements/edx/kernel.in cachecontrol==0.14.3 # via firebase-admin -cachetools==5.5.2 +cachetools==6.2.0 # via # edxval # google-auth @@ -102,7 +102,7 @@ celery==5.5.3 # enterprise-integrated-channels # event-tracking # openedx-learning -certifi==2025.8.3 +certifi==2025.10.5 # via # elasticsearch # httpcore @@ -122,7 +122,7 @@ charset-normalizer==3.4.3 # snowflake-connector-python chem==2.0.0 # via -r requirements/edx/kernel.in -click==8.2.1 +click==8.3.0 # via # celery # click-didyoumean @@ -147,6 +147,7 @@ crowdsourcehinter-xblock==0.8 # via -r requirements/edx/bundled.in cryptography==45.0.7 # via + # -c requirements/constraints.txt # -r requirements/edx/kernel.in # django-fernet-fields-v2 # edx-enterprise @@ -257,7 +258,7 @@ django-config-models==2.9.0 # edx-name-affirmation # enterprise-integrated-channels # lti-consumer-xblock -django-cors-headers==4.8.0 +django-cors-headers==4.9.0 # via -r requirements/edx/kernel.in django-countries==7.6.1 # via @@ -315,7 +316,7 @@ django-mptt==0.18.0 # openedx-django-wiki django-multi-email-field==0.8.0 # via edx-enterprise -django-mysql==4.18.0 +django-mysql==4.19.0 # via -r requirements/edx/kernel.in django-oauth-toolkit==1.7.1 # via @@ -403,7 +404,7 @@ drf-jwt==1.19.2 # via edx-drf-extensions drf-spectacular==0.28.0 # via -r requirements/edx/kernel.in -drf-yasg==1.21.10 +drf-yasg==1.21.11 # via # django-user-tasks # edx-api-doc-tools @@ -413,7 +414,7 @@ edx-api-doc-tools==2.1.0 # via # -r requirements/edx/kernel.in # edx-name-affirmation -edx-auth-backends==4.6.0 +edx-auth-backends==4.6.1 # via -r requirements/edx/kernel.in edx-bulk-grades==1.2.0 # via @@ -440,7 +441,7 @@ edx-django-release-util==1.5.0 # edxval edx-django-sites-extensions==5.1.0 # via -r requirements/edx/kernel.in -edx-django-utils==8.0.0 +edx-django-utils==8.0.1 # via # -r requirements/edx/kernel.in # django-config-models @@ -527,7 +528,7 @@ edx-search==4.3.0 # openedx-forum edx-sga==0.26.0 # via -r requirements/edx/bundled.in -edx-submissions==3.11.1 +edx-submissions==3.12.0 # via # -r requirements/edx/kernel.in # ora2 @@ -564,7 +565,7 @@ enmerkar==0.7.1 # via enmerkar-underscore enmerkar-underscore==2.4.0 # via -r requirements/edx/kernel.in -enterprise-integrated-channels==0.1.16 +enterprise-integrated-channels==0.1.18 # via -r requirements/edx/bundled.in event-tracking==3.3.0 # via @@ -578,7 +579,7 @@ filelock==3.19.1 # via snowflake-connector-python firebase-admin==7.1.0 # via edx-ace -frozenlist==1.7.0 +frozenlist==1.8.0 # via # aiohttp # aiosignal @@ -596,13 +597,13 @@ geoip2==5.1.0 # via -r requirements/edx/kernel.in glob2==0.7 # via -r requirements/edx/kernel.in -google-api-core[grpc]==2.25.1 +google-api-core[grpc]==2.25.2 # via # firebase-admin # google-cloud-core # google-cloud-firestore # google-cloud-storage -google-auth==2.40.3 +google-auth==2.41.1 # via # google-api-core # google-cloud-core @@ -626,11 +627,11 @@ googleapis-common-protos==1.70.0 # via # google-api-core # grpcio-status -grpcio==1.74.0 +grpcio==1.75.1 # via # google-api-core # grpcio-status -grpcio-status==1.74.0 +grpcio-status==1.75.1 # via google-api-core gunicorn==23.0.0 # via -r requirements/edx/kernel.in @@ -732,7 +733,7 @@ lxml[html-clean]==5.3.2 # python3-saml # xblock # xmlsec -lxml-html-clean==0.4.2 +lxml-html-clean==0.4.3 # via lxml mailsnake==1.6.4 # via -r requirements/edx/bundled.in @@ -749,7 +750,7 @@ markdown==3.9 # openedx-django-wiki # staff-graded-xblock # xblock-poll -markupsafe==3.0.2 +markupsafe==3.0.3 # via # chem # jinja2 @@ -772,7 +773,7 @@ mpmath==1.3.0 # via sympy msgpack==1.1.1 # via cachecontrol -multidict==6.6.4 +multidict==6.7.0 # via # aiohttp # yarl @@ -784,7 +785,7 @@ nh3==0.3.0 # via # -r requirements/edx/kernel.in # xblocks-contrib -nltk==3.9.1 +nltk==3.9.2 # via chem nodeenv==1.9.1 # via -r requirements/edx/kernel.in @@ -884,7 +885,7 @@ polib==1.2.0 # via edx-i18n-tools prompt-toolkit==3.0.52 # via click-repl -propcache==0.3.2 +propcache==0.4.0 # via # aiohttp # yarl @@ -899,7 +900,7 @@ protobuf==6.32.1 # googleapis-common-protos # grpcio-status # proto-plus -psutil==7.0.0 +psutil==7.1.0 # via # -r requirements/edx/kernel.in # edx-django-utils @@ -919,7 +920,7 @@ pycryptodomex==3.23.0 # -r requirements/edx/kernel.in # edx-proctoring # lti-consumer-xblock -pydantic==2.11.9 +pydantic==2.11.10 # via camel-converter pydantic-core==2.33.2 # via pydantic @@ -956,9 +957,9 @@ pynacl==1.6.0 # paramiko pynliner==0.8.0 # via -r requirements/edx/kernel.in -pyopenssl==25.2.0 +pyopenssl==25.3.0 # via snowflake-connector-python -pyparsing==3.2.4 +pyparsing==3.2.5 # via # chem # openedx-calc @@ -1010,7 +1011,7 @@ pytz==2025.2 # xblock pyuca==1.2 # via -r requirements/edx/kernel.in -pyyaml==6.0.2 +pyyaml==6.0.3 # via # -r requirements/edx/kernel.in # code-annotations @@ -1032,7 +1033,7 @@ referencing==0.36.2 # via # jsonschema # jsonschema-specifications -regex==2025.9.1 +regex==2025.9.18 # via nltk requests==2.32.5 # via @@ -1084,9 +1085,9 @@ scipy==1.16.2 # via chem semantic-version==2.10.0 # via edx-drf-extensions -shapely==2.1.1 +shapely==2.1.2 # via -r requirements/edx/kernel.in -simplejson==3.20.1 +simplejson==3.20.2 # via # -r requirements/edx/kernel.in # sailthru-client @@ -1118,7 +1119,7 @@ slumber==0.7.1 # enterprise-integrated-channels sniffio==1.3.1 # via anyio -snowflake-connector-python==3.17.3 +snowflake-connector-python==3.18.0 # via edx-enterprise social-auth-app-django==5.4.1 # via @@ -1177,6 +1178,7 @@ typing-extensions==4.15.0 # beautifulsoup4 # django-countries # edx-opaque-keys + # grpcio # jwcrypto # pydantic # pydantic-core @@ -1185,7 +1187,7 @@ typing-extensions==4.15.0 # referencing # snowflake-connector-python # typing-inspection -typing-inspection==0.4.1 +typing-inspection==0.4.2 # via pydantic tzdata==2025.2 # via @@ -1216,7 +1218,7 @@ voluptuous==0.15.2 # via ora2 walrus==0.9.5 # via edx-event-bus-redis -wcwidth==0.2.13 +wcwidth==0.2.14 # via prompt-toolkit web-fragments==3.1.0 # via @@ -1273,7 +1275,7 @@ xmlsec==1.3.14 # python3-saml xss-utils==0.8.0 # via -r requirements/edx/kernel.in -yarl==1.20.1 +yarl==1.22.0 # via aiohttp zipp==3.23.0 # via importlib-metadata diff --git a/requirements/edx/coverage.txt b/requirements/edx/coverage.txt index 57a6416926..010306d68c 100644 --- a/requirements/edx/coverage.txt +++ b/requirements/edx/coverage.txt @@ -6,13 +6,13 @@ # chardet==5.2.0 # via diff-cover -coverage==7.10.6 +coverage==7.10.7 # via -r requirements/edx/coverage.in -diff-cover==9.6.0 +diff-cover==9.7.1 # via -r requirements/edx/coverage.in jinja2==3.1.6 # via diff-cover -markupsafe==3.0.2 +markupsafe==3.0.3 # via jinja2 pluggy==1.6.0 # via diff-cover diff --git a/requirements/edx/development.txt b/requirements/edx/development.txt index 1007ceba5f..9df3845c2e 100644 --- a/requirements/edx/development.txt +++ b/requirements/edx/development.txt @@ -17,7 +17,7 @@ aiohappyeyeballs==2.6.1 # -r requirements/edx/doc.txt # -r requirements/edx/testing.txt # aiohttp -aiohttp==3.12.15 +aiohttp==3.13.0 # via # -r requirements/edx/doc.txt # -r requirements/edx/testing.txt @@ -51,7 +51,7 @@ annotated-types==0.7.0 # -r requirements/edx/doc.txt # -r requirements/edx/testing.txt # pydantic -anyio==4.10.0 +anyio==4.11.0 # via # -r requirements/edx/doc.txt # -r requirements/edx/testing.txt @@ -62,7 +62,7 @@ appdirs==1.4.4 # -r requirements/edx/doc.txt # -r requirements/edx/testing.txt # fs -asgiref==3.9.1 +asgiref==3.10.0 # via # -r requirements/edx/doc.txt # -r requirements/edx/testing.txt @@ -81,7 +81,7 @@ astroid==3.3.11 # pylint # pylint-celery # sphinx-autoapi -attrs==25.3.0 +attrs==25.4.0 # via # -r requirements/edx/doc.txt # -r requirements/edx/testing.txt @@ -105,19 +105,19 @@ backoff==1.10.0 # -r requirements/edx/doc.txt # -r requirements/edx/testing.txt # analytics-python -bcrypt==4.3.0 +bcrypt==5.0.0 # via # -r requirements/edx/doc.txt # -r requirements/edx/testing.txt # paramiko -beautifulsoup4==4.13.5 +beautifulsoup4==4.14.2 # via # -r requirements/edx/doc.txt # -r requirements/edx/testing.txt # openedx-forum # pydata-sphinx-theme # pynliner -billiard==4.2.1 +billiard==4.2.2 # via # -r requirements/edx/doc.txt # -r requirements/edx/testing.txt @@ -136,7 +136,7 @@ boto==2.49.0 # via # -r requirements/edx/doc.txt # -r requirements/edx/testing.txt -boto3==1.40.31 +boto3==1.40.46 # via # -r requirements/edx/doc.txt # -r requirements/edx/testing.txt @@ -144,7 +144,7 @@ boto3==1.40.31 # fs-s3fs # ora2 # snowflake-connector-python -botocore==1.40.31 +botocore==1.40.46 # via # -r requirements/edx/doc.txt # -r requirements/edx/testing.txt @@ -164,7 +164,7 @@ cachecontrol==0.14.3 # -r requirements/edx/doc.txt # -r requirements/edx/testing.txt # firebase-admin -cachetools==5.5.2 +cachetools==6.2.0 # via # -r requirements/edx/doc.txt # -r requirements/edx/testing.txt @@ -188,7 +188,7 @@ celery==5.5.3 # enterprise-integrated-channels # event-tracking # openedx-learning -certifi==2025.8.3 +certifi==2025.10.5 # via # -r requirements/edx/doc.txt # -r requirements/edx/testing.txt @@ -222,7 +222,7 @@ chem==2.0.0 # via # -r requirements/edx/doc.txt # -r requirements/edx/testing.txt -click==8.2.1 +click==8.3.0 # via # -r requirements/edx/assets.txt # -r requirements/edx/development.in @@ -276,7 +276,7 @@ colorama==0.4.6 # via # -r requirements/edx/testing.txt # tox -coverage[toml]==7.10.6 +coverage[toml]==7.10.7 # via # -r requirements/edx/testing.txt # pytest-cov @@ -286,6 +286,7 @@ crowdsourcehinter-xblock==0.8 # -r requirements/edx/testing.txt cryptography==45.0.7 # via + # -c requirements/constraints.txt # -r requirements/edx/doc.txt # -r requirements/edx/testing.txt # django-fernet-fields-v2 @@ -320,7 +321,7 @@ defusedxml==0.7.1 # ora2 # python3-openid # social-auth-core -diff-cover==9.6.0 +diff-cover==9.7.1 # via -r requirements/edx/testing.txt dill==0.4.0 # via @@ -439,7 +440,7 @@ django-config-models==2.9.0 # edx-name-affirmation # enterprise-integrated-channels # lti-consumer-xblock -django-cors-headers==4.8.0 +django-cors-headers==4.9.0 # via # -r requirements/edx/doc.txt # -r requirements/edx/testing.txt @@ -519,7 +520,7 @@ django-multi-email-field==0.8.0 # -r requirements/edx/doc.txt # -r requirements/edx/testing.txt # edx-enterprise -django-mysql==4.18.0 +django-mysql==4.19.0 # via # -r requirements/edx/doc.txt # -r requirements/edx/testing.txt @@ -581,12 +582,12 @@ django-storages==1.14.6 # -r requirements/edx/doc.txt # -r requirements/edx/testing.txt # edxval -django-stubs[compatible-mypy]==5.2.5 +django-stubs[compatible-mypy]==5.2.6 # via # -c requirements/constraints.txt # -r requirements/edx/development.in # djangorestframework-stubs -django-stubs-ext==5.2.5 +django-stubs-ext==5.2.6 # via django-stubs django-user-tasks==3.4.3 # via @@ -627,7 +628,7 @@ djangorestframework==3.16.1 # openedx-learning # ora2 # super-csv -djangorestframework-stubs==3.16.2 +djangorestframework-stubs==3.16.4 # via -r requirements/edx/development.in djangorestframework-xml==2.0.0 # via @@ -658,7 +659,7 @@ drf-spectacular==0.28.0 # via # -r requirements/edx/doc.txt # -r requirements/edx/testing.txt -drf-yasg==1.21.10 +drf-yasg==1.21.11 # via # -r requirements/edx/doc.txt # -r requirements/edx/testing.txt @@ -673,7 +674,7 @@ edx-api-doc-tools==2.1.0 # -r requirements/edx/doc.txt # -r requirements/edx/testing.txt # edx-name-affirmation -edx-auth-backends==4.6.0 +edx-auth-backends==4.6.1 # via # -r requirements/edx/doc.txt # -r requirements/edx/testing.txt @@ -712,7 +713,7 @@ edx-django-sites-extensions==5.1.0 # via # -r requirements/edx/doc.txt # -r requirements/edx/testing.txt -edx-django-utils==8.0.0 +edx-django-utils==8.0.1 # via # -r requirements/edx/doc.txt # -r requirements/edx/testing.txt @@ -824,7 +825,7 @@ edx-sga==0.26.0 # via # -r requirements/edx/doc.txt # -r requirements/edx/testing.txt -edx-submissions==3.11.1 +edx-submissions==3.12.0 # via # -r requirements/edx/doc.txt # -r requirements/edx/testing.txt @@ -875,7 +876,7 @@ enmerkar-underscore==2.4.0 # via # -r requirements/edx/doc.txt # -r requirements/edx/testing.txt -enterprise-integrated-channels==0.1.16 +enterprise-integrated-channels==0.1.18 # via # -r requirements/edx/doc.txt # -r requirements/edx/testing.txt @@ -896,7 +897,7 @@ faker==37.8.0 # via # -r requirements/edx/testing.txt # factory-boy -fastapi==0.116.1 +fastapi==0.118.0 # via # -r requirements/edx/testing.txt # pact-python @@ -919,7 +920,7 @@ firebase-admin==7.1.0 # edx-ace freezegun==1.5.5 # via -r requirements/edx/testing.txt -frozenlist==1.7.0 +frozenlist==1.8.0 # via # -r requirements/edx/doc.txt # -r requirements/edx/testing.txt @@ -951,7 +952,7 @@ glob2==0.7 # via # -r requirements/edx/doc.txt # -r requirements/edx/testing.txt -google-api-core[grpc]==2.25.1 +google-api-core[grpc]==2.25.2 # via # -r requirements/edx/doc.txt # -r requirements/edx/testing.txt @@ -959,7 +960,7 @@ google-api-core[grpc]==2.25.1 # google-cloud-core # google-cloud-firestore # google-cloud-storage -google-auth==2.40.3 +google-auth==2.41.1 # via # -r requirements/edx/doc.txt # -r requirements/edx/testing.txt @@ -1004,13 +1005,13 @@ grimp==3.11 # via # -r requirements/edx/testing.txt # import-linter -grpcio==1.74.0 +grpcio==1.75.1 # via # -r requirements/edx/doc.txt # -r requirements/edx/testing.txt # google-api-core # grpcio-status -grpcio-status==1.74.0 +grpcio-status==1.75.1 # via # -r requirements/edx/doc.txt # -r requirements/edx/testing.txt @@ -1109,7 +1110,7 @@ isodate==0.7.2 # -r requirements/edx/doc.txt # -r requirements/edx/testing.txt # python3-saml -isort==6.0.1 +isort==6.1.0 # via # -r requirements/edx/testing.txt # pylint @@ -1212,7 +1213,7 @@ lxml[html-clean]==5.3.2 # python3-saml # xblock # xmlsec -lxml-html-clean==0.4.2 +lxml-html-clean==0.4.3 # via # -r requirements/edx/doc.txt # -r requirements/edx/testing.txt @@ -1236,7 +1237,7 @@ markdown==3.9 # openedx-django-wiki # staff-graded-xblock # xblock-poll -markupsafe==3.0.2 +markupsafe==3.0.3 # via # -r requirements/edx/doc.txt # -r requirements/edx/testing.txt @@ -1289,13 +1290,13 @@ msgpack==1.1.1 # -r requirements/edx/doc.txt # -r requirements/edx/testing.txt # cachecontrol -multidict==6.6.4 +multidict==6.7.0 # via # -r requirements/edx/doc.txt # -r requirements/edx/testing.txt # aiohttp # yarl -mypy==1.18.1 +mypy==1.18.2 # via # -r requirements/edx/development.in # django-stubs @@ -1311,7 +1312,7 @@ nh3==0.3.0 # -r requirements/edx/doc.txt # -r requirements/edx/testing.txt # xblocks-contrib -nltk==3.9.1 +nltk==3.9.2 # via # -r requirements/edx/doc.txt # -r requirements/edx/testing.txt @@ -1423,7 +1424,9 @@ packaging==25.0 # sphinx # tox pact-python==2.3.3 - # via -r requirements/edx/testing.txt + # via + # -c requirements/constraints.txt + # -r requirements/edx/testing.txt paramiko==4.0.0 # via # -r requirements/edx/doc.txt @@ -1465,7 +1468,7 @@ pillow==11.3.0 # edx-enterprise # edx-organizations # edxval -pip-tools==7.5.0 +pip-tools==7.5.1 # via -r requirements/pip-tools.txt platformdirs==4.4.0 # via @@ -1492,7 +1495,7 @@ prompt-toolkit==3.0.52 # -r requirements/edx/doc.txt # -r requirements/edx/testing.txt # click-repl -propcache==0.3.2 +propcache==0.4.0 # via # -r requirements/edx/doc.txt # -r requirements/edx/testing.txt @@ -1513,7 +1516,7 @@ protobuf==6.32.1 # googleapis-common-protos # grpcio-status # proto-plus -psutil==7.0.0 +psutil==7.1.0 # via # -r requirements/edx/doc.txt # -r requirements/edx/testing.txt @@ -1553,7 +1556,7 @@ pycryptodomex==3.23.0 # -r requirements/edx/testing.txt # edx-proctoring # lti-consumer-xblock -pydantic==2.11.9 +pydantic==2.11.10 # via # -r requirements/edx/doc.txt # -r requirements/edx/testing.txt @@ -1596,7 +1599,7 @@ pylatexenc==2.10 # -r requirements/edx/doc.txt # -r requirements/edx/testing.txt # olxcleaner -pylint==3.3.8 +pylint==3.3.9 # via # -r requirements/edx/testing.txt # edx-lint @@ -1646,12 +1649,12 @@ pynliner==0.8.0 # via # -r requirements/edx/doc.txt # -r requirements/edx/testing.txt -pyopenssl==25.2.0 +pyopenssl==25.3.0 # via # -r requirements/edx/doc.txt # -r requirements/edx/testing.txt # snowflake-connector-python -pyparsing==3.2.4 +pyparsing==3.2.5 # via # -r requirements/edx/doc.txt # -r requirements/edx/testing.txt @@ -1766,7 +1769,7 @@ pyuca==1.2 # -r requirements/edx/testing.txt pywatchman==3.0.0 # via -r requirements/edx/development.in -pyyaml==6.0.2 +pyyaml==6.0.3 # via # -r requirements/edx/doc.txt # -r requirements/edx/testing.txt @@ -1798,7 +1801,7 @@ referencing==0.36.2 # -r requirements/edx/testing.txt # jsonschema # jsonschema-specifications -regex==2025.9.1 +regex==2025.9.18 # via # -r requirements/edx/doc.txt # -r requirements/edx/testing.txt @@ -1881,11 +1884,11 @@ semantic-version==2.10.0 # -r requirements/edx/doc.txt # -r requirements/edx/testing.txt # edx-drf-extensions -shapely==2.1.1 +shapely==2.1.2 # via # -r requirements/edx/doc.txt # -r requirements/edx/testing.txt -simplejson==3.20.1 +simplejson==3.20.2 # via # -r requirements/edx/doc.txt # -r requirements/edx/testing.txt @@ -1938,7 +1941,7 @@ snowballstemmer==3.0.1 # via # -r requirements/edx/doc.txt # sphinx -snowflake-connector-python==3.17.3 +snowflake-connector-python==3.18.0 # via # -r requirements/edx/doc.txt # -r requirements/edx/testing.txt @@ -1982,7 +1985,7 @@ sphinx==8.2.3 # sphinxcontrib-httpdomain # sphinxcontrib-openapi # sphinxext-rediraffe -sphinx-autoapi==3.6.0 +sphinx-autoapi==3.6.1 # via -r requirements/edx/doc.txt sphinx-book-theme==1.1.4 # via -r requirements/edx/doc.txt @@ -2024,7 +2027,7 @@ sphinxcontrib-serializinghtml==2.0.0 # via # -r requirements/edx/doc.txt # sphinx -sphinxext-rediraffe==0.2.7 +sphinxext-rediraffe==0.3.0 # via -r requirements/edx/doc.txt sqlparse==0.5.3 # via @@ -2036,7 +2039,7 @@ staff-graded-xblock==3.1.0 # via # -r requirements/edx/doc.txt # -r requirements/edx/testing.txt -starlette==0.47.3 +starlette==0.48.0 # via # -r requirements/edx/testing.txt # fastapi @@ -2081,7 +2084,7 @@ tomlkit==0.13.3 # openedx-learning # pylint # snowflake-connector-python -tox==4.27.0 +tox==4.30.3 # via -r requirements/edx/testing.txt tqdm==4.67.1 # via @@ -2109,6 +2112,7 @@ typing-extensions==4.15.0 # edx-opaque-keys # fastapi # grimp + # grpcio # import-linter # jwcrypto # mypy @@ -2121,7 +2125,7 @@ typing-extensions==4.15.0 # snowflake-connector-python # starlette # typing-inspection -typing-inspection==0.4.1 +typing-inspection==0.4.2 # via # -r requirements/edx/doc.txt # -r requirements/edx/testing.txt @@ -2159,7 +2163,7 @@ urllib3==2.5.0 # elasticsearch # requests # types-requests -uvicorn==0.35.0 +uvicorn==0.37.0 # via # -r requirements/edx/testing.txt # pact-python @@ -2188,7 +2192,7 @@ walrus==0.9.5 # edx-event-bus-redis watchdog==6.0.0 # via -r requirements/edx/development.in -wcwidth==0.2.13 +wcwidth==0.2.14 # via # -r requirements/edx/doc.txt # -r requirements/edx/testing.txt @@ -2274,7 +2278,7 @@ xss-utils==0.8.0 # via # -r requirements/edx/doc.txt # -r requirements/edx/testing.txt -yarl==1.20.1 +yarl==1.22.0 # via # -r requirements/edx/doc.txt # -r requirements/edx/testing.txt diff --git a/requirements/edx/doc.txt b/requirements/edx/doc.txt index 7407af9f36..faba8969f1 100644 --- a/requirements/edx/doc.txt +++ b/requirements/edx/doc.txt @@ -12,7 +12,7 @@ aiohappyeyeballs==2.6.1 # via # -r requirements/edx/base.txt # aiohttp -aiohttp==3.12.15 +aiohttp==3.13.0 # via # -r requirements/edx/base.txt # geoip2 @@ -37,7 +37,7 @@ annotated-types==0.7.0 # via # -r requirements/edx/base.txt # pydantic -anyio==4.10.0 +anyio==4.11.0 # via # -r requirements/edx/base.txt # httpx @@ -45,7 +45,7 @@ appdirs==1.4.4 # via # -r requirements/edx/base.txt # fs -asgiref==3.9.1 +asgiref==3.10.0 # via # -r requirements/edx/base.txt # django @@ -57,7 +57,7 @@ asn1crypto==1.5.1 # snowflake-connector-python astroid==3.3.11 # via sphinx-autoapi -attrs==25.3.0 +attrs==25.4.0 # via # -r requirements/edx/base.txt # aiohttp @@ -78,17 +78,17 @@ backoff==1.10.0 # via # -r requirements/edx/base.txt # analytics-python -bcrypt==4.3.0 +bcrypt==5.0.0 # via # -r requirements/edx/base.txt # paramiko -beautifulsoup4==4.13.5 +beautifulsoup4==4.14.2 # via # -r requirements/edx/base.txt # openedx-forum # pydata-sphinx-theme # pynliner -billiard==4.2.1 +billiard==4.2.2 # via # -r requirements/edx/base.txt # celery @@ -103,14 +103,14 @@ bleach[css]==6.2.0 # xblock-poll boto==2.49.0 # via -r requirements/edx/base.txt -boto3==1.40.31 +boto3==1.40.46 # via # -r requirements/edx/base.txt # django-ses # fs-s3fs # ora2 # snowflake-connector-python -botocore==1.40.31 +botocore==1.40.46 # via # -r requirements/edx/base.txt # boto3 @@ -122,7 +122,7 @@ cachecontrol==0.14.3 # via # -r requirements/edx/base.txt # firebase-admin -cachetools==5.5.2 +cachetools==6.2.0 # via # -r requirements/edx/base.txt # edxval @@ -142,7 +142,7 @@ celery==5.5.3 # enterprise-integrated-channels # event-tracking # openedx-learning -certifi==2025.8.3 +certifi==2025.10.5 # via # -r requirements/edx/base.txt # elasticsearch @@ -167,7 +167,7 @@ charset-normalizer==3.4.3 # snowflake-connector-python chem==2.0.0 # via -r requirements/edx/base.txt -click==8.2.1 +click==8.3.0 # via # -r requirements/edx/base.txt # celery @@ -201,6 +201,7 @@ crowdsourcehinter-xblock==0.8 # via -r requirements/edx/base.txt cryptography==45.0.7 # via + # -c requirements/constraints.txt # -r requirements/edx/base.txt # django-fernet-fields-v2 # edx-enterprise @@ -321,7 +322,7 @@ django-config-models==2.9.0 # edx-name-affirmation # enterprise-integrated-channels # lti-consumer-xblock -django-cors-headers==4.8.0 +django-cors-headers==4.9.0 # via -r requirements/edx/base.txt django-countries==7.6.1 # via @@ -384,7 +385,7 @@ django-multi-email-field==0.8.0 # via # -r requirements/edx/base.txt # edx-enterprise -django-mysql==4.18.0 +django-mysql==4.19.0 # via -r requirements/edx/base.txt django-oauth-toolkit==1.7.1 # via @@ -486,7 +487,7 @@ drf-jwt==1.19.2 # edx-drf-extensions drf-spectacular==0.28.0 # via -r requirements/edx/base.txt -drf-yasg==1.21.10 +drf-yasg==1.21.11 # via # -r requirements/edx/base.txt # django-user-tasks @@ -497,7 +498,7 @@ edx-api-doc-tools==2.1.0 # via # -r requirements/edx/base.txt # edx-name-affirmation -edx-auth-backends==4.6.0 +edx-auth-backends==4.6.1 # via -r requirements/edx/base.txt edx-bulk-grades==1.2.0 # via @@ -524,7 +525,7 @@ edx-django-release-util==1.5.0 # edxval edx-django-sites-extensions==5.1.0 # via -r requirements/edx/base.txt -edx-django-utils==8.0.0 +edx-django-utils==8.0.1 # via # -r requirements/edx/base.txt # django-config-models @@ -612,7 +613,7 @@ edx-search==4.3.0 # openedx-forum edx-sga==0.26.0 # via -r requirements/edx/base.txt -edx-submissions==3.11.1 +edx-submissions==3.12.0 # via # -r requirements/edx/base.txt # ora2 @@ -653,7 +654,7 @@ enmerkar==0.7.1 # enmerkar-underscore enmerkar-underscore==2.4.0 # via -r requirements/edx/base.txt -enterprise-integrated-channels==0.1.16 +enterprise-integrated-channels==0.1.18 # via -r requirements/edx/base.txt event-tracking==3.3.0 # via @@ -673,7 +674,7 @@ firebase-admin==7.1.0 # via # -r requirements/edx/base.txt # edx-ace -frozenlist==1.7.0 +frozenlist==1.8.0 # via # -r requirements/edx/base.txt # aiohttp @@ -696,14 +697,14 @@ gitpython==3.1.45 # via -r requirements/edx/doc.in glob2==0.7 # via -r requirements/edx/base.txt -google-api-core[grpc]==2.25.1 +google-api-core[grpc]==2.25.2 # via # -r requirements/edx/base.txt # firebase-admin # google-cloud-core # google-cloud-firestore # google-cloud-storage -google-auth==2.40.3 +google-auth==2.41.1 # via # -r requirements/edx/base.txt # google-api-core @@ -737,12 +738,12 @@ googleapis-common-protos==1.70.0 # -r requirements/edx/base.txt # google-api-core # grpcio-status -grpcio==1.74.0 +grpcio==1.75.1 # via # -r requirements/edx/base.txt # google-api-core # grpcio-status -grpcio-status==1.74.0 +grpcio-status==1.75.1 # via # -r requirements/edx/base.txt # google-api-core @@ -885,7 +886,7 @@ lxml[html-clean]==5.3.2 # python3-saml # xblock # xmlsec -lxml-html-clean==0.4.2 +lxml-html-clean==0.4.3 # via # -r requirements/edx/base.txt # lxml @@ -904,7 +905,7 @@ markdown==3.9 # openedx-django-wiki # staff-graded-xblock # xblock-poll -markupsafe==3.0.2 +markupsafe==3.0.3 # via # -r requirements/edx/base.txt # chem @@ -940,7 +941,7 @@ msgpack==1.1.1 # via # -r requirements/edx/base.txt # cachecontrol -multidict==6.6.4 +multidict==6.7.0 # via # -r requirements/edx/base.txt # aiohttp @@ -953,7 +954,7 @@ nh3==0.3.0 # via # -r requirements/edx/base.txt # xblocks-contrib -nltk==3.9.1 +nltk==3.9.2 # via # -r requirements/edx/base.txt # chem @@ -1074,7 +1075,7 @@ prompt-toolkit==3.0.52 # via # -r requirements/edx/base.txt # click-repl -propcache==0.3.2 +propcache==0.4.0 # via # -r requirements/edx/base.txt # aiohttp @@ -1092,7 +1093,7 @@ protobuf==6.32.1 # googleapis-common-protos # grpcio-status # proto-plus -psutil==7.0.0 +psutil==7.1.0 # via # -r requirements/edx/base.txt # edx-django-utils @@ -1117,7 +1118,7 @@ pycryptodomex==3.23.0 # -r requirements/edx/base.txt # edx-proctoring # lti-consumer-xblock -pydantic==2.11.9 +pydantic==2.11.10 # via # -r requirements/edx/base.txt # camel-converter @@ -1169,11 +1170,11 @@ pynacl==1.6.0 # paramiko pynliner==0.8.0 # via -r requirements/edx/base.txt -pyopenssl==25.2.0 +pyopenssl==25.3.0 # via # -r requirements/edx/base.txt # snowflake-connector-python -pyparsing==3.2.4 +pyparsing==3.2.5 # via # -r requirements/edx/base.txt # chem @@ -1234,7 +1235,7 @@ pytz==2025.2 # xblock pyuca==1.2 # via -r requirements/edx/base.txt -pyyaml==6.0.2 +pyyaml==6.0.3 # via # -r requirements/edx/base.txt # code-annotations @@ -1259,7 +1260,7 @@ referencing==0.36.2 # -r requirements/edx/base.txt # jsonschema # jsonschema-specifications -regex==2025.9.1 +regex==2025.9.18 # via # -r requirements/edx/base.txt # nltk @@ -1328,9 +1329,9 @@ semantic-version==2.10.0 # via # -r requirements/edx/base.txt # edx-drf-extensions -shapely==2.1.1 +shapely==2.1.2 # via -r requirements/edx/base.txt -simplejson==3.20.1 +simplejson==3.20.2 # via # -r requirements/edx/base.txt # sailthru-client @@ -1369,7 +1370,7 @@ sniffio==1.3.1 # anyio snowballstemmer==3.0.1 # via sphinx -snowflake-connector-python==3.17.3 +snowflake-connector-python==3.18.0 # via # -r requirements/edx/base.txt # edx-enterprise @@ -1407,7 +1408,7 @@ sphinx==8.2.3 # sphinxcontrib-httpdomain # sphinxcontrib-openapi # sphinxext-rediraffe -sphinx-autoapi==3.6.0 +sphinx-autoapi==3.6.1 # via -r requirements/edx/doc.in sphinx-book-theme==1.1.4 # via -r requirements/edx/doc.in @@ -1433,7 +1434,7 @@ sphinxcontrib-qthelp==2.0.0 # via sphinx sphinxcontrib-serializinghtml==2.0.0 # via sphinx -sphinxext-rediraffe==0.2.7 +sphinxext-rediraffe==0.3.0 # via -r requirements/edx/doc.in sqlparse==0.5.3 # via @@ -1487,6 +1488,7 @@ typing-extensions==4.15.0 # beautifulsoup4 # django-countries # edx-opaque-keys + # grpcio # jwcrypto # pydantic # pydantic-core @@ -1496,7 +1498,7 @@ typing-extensions==4.15.0 # referencing # snowflake-connector-python # typing-inspection -typing-inspection==0.4.1 +typing-inspection==0.4.2 # via # -r requirements/edx/base.txt # pydantic @@ -1537,7 +1539,7 @@ walrus==0.9.5 # via # -r requirements/edx/base.txt # edx-event-bus-redis -wcwidth==0.2.13 +wcwidth==0.2.14 # via # -r requirements/edx/base.txt # prompt-toolkit @@ -1601,7 +1603,7 @@ xmlsec==1.3.14 # python3-saml xss-utils==0.8.0 # via -r requirements/edx/base.txt -yarl==1.20.1 +yarl==1.22.0 # via # -r requirements/edx/base.txt # aiohttp diff --git a/requirements/edx/semgrep.txt b/requirements/edx/semgrep.txt index aec4c59acb..6adeb975ef 100644 --- a/requirements/edx/semgrep.txt +++ b/requirements/edx/semgrep.txt @@ -4,7 +4,15 @@ # # make upgrade # -attrs==25.3.0 +annotated-types==0.7.0 + # via pydantic +anyio==4.11.0 + # via + # httpx + # mcp + # sse-starlette + # starlette +attrs==25.4.0 # via # glom # jsonschema @@ -17,24 +25,24 @@ boltons==21.0.0 # semgrep bracex==2.6 # via wcmatch -certifi==2025.8.3 - # via requests +certifi==2025.10.5 + # via + # httpcore + # httpx + # requests charset-normalizer==3.4.3 # via requests click==8.1.8 # via # click-option-group # semgrep -click-option-group==0.5.7 + # uvicorn +click-option-group==0.5.8 # via semgrep colorama==0.4.6 # via semgrep defusedxml==0.7.1 # via semgrep -deprecated==1.2.18 - # via - # opentelemetry-api - # opentelemetry-exporter-otlp-proto-http exceptiongroup==1.2.2 # via semgrep face==24.0.0 @@ -43,19 +51,36 @@ glom==22.1.0 # via semgrep googleapis-common-protos==1.70.0 # via opentelemetry-exporter-otlp-proto-http +h11==0.16.0 + # via + # httpcore + # uvicorn +httpcore==1.0.9 + # via httpx +httpx==0.28.1 + # via mcp +httpx-sse==0.4.1 + # via mcp idna==3.10 - # via requests -importlib-metadata==7.1.0 + # via + # anyio + # httpx + # requests +importlib-metadata==8.7.0 # via opentelemetry-api -jsonschema==4.25.1 - # via semgrep +jsonschema==4.20.0 + # via + # mcp + # semgrep jsonschema-specifications==2025.9.1 # via jsonschema markdown-it-py==4.0.0 # via rich +mcp==1.12.2 + # via semgrep mdurl==0.1.2 # via markdown-it-py -opentelemetry-api==1.25.0 +opentelemetry-api==1.37.0 # via # opentelemetry-exporter-otlp-proto-http # opentelemetry-instrumentation @@ -63,38 +88,53 @@ opentelemetry-api==1.25.0 # opentelemetry-sdk # opentelemetry-semantic-conventions # semgrep -opentelemetry-exporter-otlp-proto-common==1.25.0 +opentelemetry-exporter-otlp-proto-common==1.37.0 # via opentelemetry-exporter-otlp-proto-http -opentelemetry-exporter-otlp-proto-http==1.25.0 +opentelemetry-exporter-otlp-proto-http==1.37.0 # via semgrep -opentelemetry-instrumentation==0.46b0 +opentelemetry-instrumentation==0.58b0 # via opentelemetry-instrumentation-requests -opentelemetry-instrumentation-requests==0.46b0 +opentelemetry-instrumentation-requests==0.58b0 # via semgrep -opentelemetry-proto==1.25.0 +opentelemetry-proto==1.37.0 # via # opentelemetry-exporter-otlp-proto-common # opentelemetry-exporter-otlp-proto-http -opentelemetry-sdk==1.25.0 +opentelemetry-sdk==1.37.0 # via # opentelemetry-exporter-otlp-proto-http # semgrep -opentelemetry-semantic-conventions==0.46b0 +opentelemetry-semantic-conventions==0.58b0 # via + # opentelemetry-instrumentation # opentelemetry-instrumentation-requests # opentelemetry-sdk -opentelemetry-util-http==0.46b0 +opentelemetry-util-http==0.58b0 # via opentelemetry-instrumentation-requests packaging==25.0 - # via semgrep + # via + # opentelemetry-instrumentation + # semgrep peewee==3.18.2 # via semgrep -protobuf==4.25.8 +protobuf==6.32.1 # via # googleapis-common-protos # opentelemetry-proto +pydantic==2.11.10 + # via + # mcp + # pydantic-settings +pydantic-core==2.33.2 + # via pydantic +pydantic-settings==2.11.0 + # via mcp pygments==2.19.2 # via rich +python-dotenv==1.1.1 + # via pydantic-settings +python-multipart==0.0.20 + # via mcp referencing==0.36.2 # via # jsonschema @@ -112,28 +152,45 @@ rpds-py==0.27.1 ruamel-yaml==0.18.15 # via semgrep ruamel-yaml-clib==0.2.12 - # via ruamel-yaml -semgrep==1.136.0 + # via + # ruamel-yaml + # semgrep +semgrep==1.139.0 # via -r requirements/edx/semgrep.in +sniffio==1.3.1 + # via anyio +sse-starlette==3.0.2 + # via mcp +starlette==0.48.0 + # via mcp tomli==2.0.2 # via semgrep typing-extensions==4.15.0 # via + # anyio + # opentelemetry-api + # opentelemetry-exporter-otlp-proto-http # opentelemetry-sdk + # opentelemetry-semantic-conventions + # pydantic + # pydantic-core # referencing # semgrep + # starlette + # typing-inspection +typing-inspection==0.4.2 + # via + # pydantic + # pydantic-settings urllib3==2.5.0 # via # requests # semgrep +uvicorn==0.37.0 + # via mcp wcmatch==8.5.2 # via semgrep wrapt==1.17.3 - # via - # deprecated - # opentelemetry-instrumentation + # via opentelemetry-instrumentation zipp==3.23.0 # via importlib-metadata - -# The following packages are considered to be unsafe in a requirements file: -# setuptools diff --git a/requirements/edx/testing.txt b/requirements/edx/testing.txt index 319d22004b..7de977c716 100644 --- a/requirements/edx/testing.txt +++ b/requirements/edx/testing.txt @@ -10,7 +10,7 @@ aiohappyeyeballs==2.6.1 # via # -r requirements/edx/base.txt # aiohttp -aiohttp==3.12.15 +aiohttp==3.13.0 # via # -r requirements/edx/base.txt # geoip2 @@ -33,7 +33,7 @@ annotated-types==0.7.0 # via # -r requirements/edx/base.txt # pydantic -anyio==4.10.0 +anyio==4.11.0 # via # -r requirements/edx/base.txt # httpx @@ -42,7 +42,7 @@ appdirs==1.4.4 # via # -r requirements/edx/base.txt # fs -asgiref==3.9.1 +asgiref==3.10.0 # via # -r requirements/edx/base.txt # django @@ -56,7 +56,7 @@ astroid==3.3.11 # via # pylint # pylint-celery -attrs==25.3.0 +attrs==25.4.0 # via # -r requirements/edx/base.txt # aiohttp @@ -75,17 +75,17 @@ backoff==1.10.0 # via # -r requirements/edx/base.txt # analytics-python -bcrypt==4.3.0 +bcrypt==5.0.0 # via # -r requirements/edx/base.txt # paramiko -beautifulsoup4==4.13.5 +beautifulsoup4==4.14.2 # via # -r requirements/edx/base.txt # -r requirements/edx/testing.in # openedx-forum # pynliner -billiard==4.2.1 +billiard==4.2.2 # via # -r requirements/edx/base.txt # celery @@ -100,14 +100,14 @@ bleach[css]==6.2.0 # xblock-poll boto==2.49.0 # via -r requirements/edx/base.txt -boto3==1.40.31 +boto3==1.40.46 # via # -r requirements/edx/base.txt # django-ses # fs-s3fs # ora2 # snowflake-connector-python -botocore==1.40.31 +botocore==1.40.46 # via # -r requirements/edx/base.txt # boto3 @@ -119,7 +119,7 @@ cachecontrol==0.14.3 # via # -r requirements/edx/base.txt # firebase-admin -cachetools==5.5.2 +cachetools==6.2.0 # via # -r requirements/edx/base.txt # edxval @@ -140,7 +140,7 @@ celery==5.5.3 # enterprise-integrated-channels # event-tracking # openedx-learning -certifi==2025.8.3 +certifi==2025.10.5 # via # -r requirements/edx/base.txt # elasticsearch @@ -169,7 +169,7 @@ charset-normalizer==3.4.3 # snowflake-connector-python chem==2.0.0 # via -r requirements/edx/base.txt -click==8.2.1 +click==8.3.0 # via # -r requirements/edx/base.txt # celery @@ -209,7 +209,7 @@ codejail-includes==2.0.0 # via -r requirements/edx/base.txt colorama==0.4.6 # via tox -coverage[toml]==7.10.6 +coverage[toml]==7.10.7 # via # -r requirements/edx/coverage.txt # pytest-cov @@ -217,6 +217,7 @@ crowdsourcehinter-xblock==0.8 # via -r requirements/edx/base.txt cryptography==45.0.7 # via + # -c requirements/constraints.txt # -r requirements/edx/base.txt # django-fernet-fields-v2 # edx-enterprise @@ -244,7 +245,7 @@ defusedxml==0.7.1 # ora2 # python3-openid # social-auth-core -diff-cover==9.6.0 +diff-cover==9.7.1 # via -r requirements/edx/coverage.txt dill==0.4.0 # via pylint @@ -347,7 +348,7 @@ django-config-models==2.9.0 # edx-name-affirmation # enterprise-integrated-channels # lti-consumer-xblock -django-cors-headers==4.8.0 +django-cors-headers==4.9.0 # via -r requirements/edx/base.txt django-countries==7.6.1 # via @@ -410,7 +411,7 @@ django-multi-email-field==0.8.0 # via # -r requirements/edx/base.txt # edx-enterprise -django-mysql==4.18.0 +django-mysql==4.19.0 # via -r requirements/edx/base.txt django-oauth-toolkit==1.7.1 # via @@ -507,7 +508,7 @@ drf-jwt==1.19.2 # edx-drf-extensions drf-spectacular==0.28.0 # via -r requirements/edx/base.txt -drf-yasg==1.21.10 +drf-yasg==1.21.11 # via # -r requirements/edx/base.txt # django-user-tasks @@ -518,7 +519,7 @@ edx-api-doc-tools==2.1.0 # via # -r requirements/edx/base.txt # edx-name-affirmation -edx-auth-backends==4.6.0 +edx-auth-backends==4.6.1 # via -r requirements/edx/base.txt edx-bulk-grades==1.2.0 # via @@ -545,7 +546,7 @@ edx-django-release-util==1.5.0 # edxval edx-django-sites-extensions==5.1.0 # via -r requirements/edx/base.txt -edx-django-utils==8.0.0 +edx-django-utils==8.0.1 # via # -r requirements/edx/base.txt # django-config-models @@ -635,7 +636,7 @@ edx-search==4.3.0 # openedx-forum edx-sga==0.26.0 # via -r requirements/edx/base.txt -edx-submissions==3.11.1 +edx-submissions==3.12.0 # via # -r requirements/edx/base.txt # ora2 @@ -676,7 +677,7 @@ enmerkar==0.7.1 # enmerkar-underscore enmerkar-underscore==2.4.0 # via -r requirements/edx/base.txt -enterprise-integrated-channels==0.1.16 +enterprise-integrated-channels==0.1.18 # via -r requirements/edx/base.txt event-tracking==3.3.0 # via @@ -690,7 +691,7 @@ factory-boy==3.3.3 # via -r requirements/edx/testing.in faker==37.8.0 # via factory-boy -fastapi==0.116.1 +fastapi==0.118.0 # via pact-python fastavro==1.12.0 # via @@ -708,7 +709,7 @@ firebase-admin==7.1.0 # edx-ace freezegun==1.5.5 # via -r requirements/edx/testing.in -frozenlist==1.7.0 +frozenlist==1.8.0 # via # -r requirements/edx/base.txt # aiohttp @@ -727,14 +728,14 @@ geoip2==5.1.0 # via -r requirements/edx/base.txt glob2==0.7 # via -r requirements/edx/base.txt -google-api-core[grpc]==2.25.1 +google-api-core[grpc]==2.25.2 # via # -r requirements/edx/base.txt # firebase-admin # google-cloud-core # google-cloud-firestore # google-cloud-storage -google-auth==2.40.3 +google-auth==2.41.1 # via # -r requirements/edx/base.txt # google-api-core @@ -770,12 +771,12 @@ googleapis-common-protos==1.70.0 # grpcio-status grimp==3.11 # via import-linter -grpcio==1.74.0 +grpcio==1.75.1 # via # -r requirements/edx/base.txt # google-api-core # grpcio-status -grpcio-status==1.74.0 +grpcio-status==1.75.1 # via # -r requirements/edx/base.txt # google-api-core @@ -846,7 +847,7 @@ isodate==0.7.2 # via # -r requirements/edx/base.txt # python3-saml -isort==6.0.1 +isort==6.1.0 # via # -r requirements/edx/testing.in # pylint @@ -927,7 +928,7 @@ lxml[html-clean]==5.3.2 # python3-saml # xblock # xmlsec -lxml-html-clean==0.4.2 +lxml-html-clean==0.4.3 # via # -r requirements/edx/base.txt # lxml @@ -946,7 +947,7 @@ markdown==3.9 # openedx-django-wiki # staff-graded-xblock # xblock-poll -markupsafe==3.0.2 +markupsafe==3.0.3 # via # -r requirements/edx/base.txt # -r requirements/edx/coverage.txt @@ -985,7 +986,7 @@ msgpack==1.1.1 # via # -r requirements/edx/base.txt # cachecontrol -multidict==6.6.4 +multidict==6.7.0 # via # -r requirements/edx/base.txt # aiohttp @@ -998,7 +999,7 @@ nh3==0.3.0 # via # -r requirements/edx/base.txt # xblocks-contrib -nltk==3.9.1 +nltk==3.9.2 # via # -r requirements/edx/base.txt # chem @@ -1079,7 +1080,9 @@ packaging==25.0 # snowflake-connector-python # tox pact-python==2.3.3 - # via -r requirements/edx/testing.in + # via + # -c requirements/constraints.txt + # -r requirements/edx/testing.in paramiko==4.0.0 # via # -r requirements/edx/base.txt @@ -1131,7 +1134,7 @@ prompt-toolkit==3.0.52 # via # -r requirements/edx/base.txt # click-repl -propcache==0.3.2 +propcache==0.4.0 # via # -r requirements/edx/base.txt # aiohttp @@ -1149,7 +1152,7 @@ protobuf==6.32.1 # googleapis-common-protos # grpcio-status # proto-plus -psutil==7.0.0 +psutil==7.1.0 # via # -r requirements/edx/base.txt # edx-django-utils @@ -1182,7 +1185,7 @@ pycryptodomex==3.23.0 # -r requirements/edx/base.txt # edx-proctoring # lti-consumer-xblock -pydantic==2.11.9 +pydantic==2.11.10 # via # -r requirements/edx/base.txt # camel-converter @@ -1212,7 +1215,7 @@ pylatexenc==2.10 # via # -r requirements/edx/base.txt # olxcleaner -pylint==3.3.8 +pylint==3.3.9 # via # edx-lint # pylint-celery @@ -1248,11 +1251,11 @@ pynacl==1.6.0 # paramiko pynliner==0.8.0 # via -r requirements/edx/base.txt -pyopenssl==25.2.0 +pyopenssl==25.3.0 # via # -r requirements/edx/base.txt # snowflake-connector-python -pyparsing==3.2.4 +pyparsing==3.2.5 # via # -r requirements/edx/base.txt # chem @@ -1345,7 +1348,7 @@ pytz==2025.2 # xblock pyuca==1.2 # via -r requirements/edx/base.txt -pyyaml==6.0.2 +pyyaml==6.0.3 # via # -r requirements/edx/base.txt # code-annotations @@ -1368,7 +1371,7 @@ referencing==0.36.2 # -r requirements/edx/base.txt # jsonschema # jsonschema-specifications -regex==2025.9.1 +regex==2025.9.18 # via # -r requirements/edx/base.txt # nltk @@ -1435,9 +1438,9 @@ semantic-version==2.10.0 # via # -r requirements/edx/base.txt # edx-drf-extensions -shapely==2.1.1 +shapely==2.1.2 # via -r requirements/edx/base.txt -simplejson==3.20.1 +simplejson==3.20.2 # via # -r requirements/edx/base.txt # sailthru-client @@ -1475,7 +1478,7 @@ sniffio==1.3.1 # via # -r requirements/edx/base.txt # anyio -snowflake-connector-python==3.17.3 +snowflake-connector-python==3.18.0 # via # -r requirements/edx/base.txt # edx-enterprise @@ -1507,7 +1510,7 @@ sqlparse==0.5.3 # django staff-graded-xblock==3.1.0 # via -r requirements/edx/base.txt -starlette==0.47.3 +starlette==0.48.0 # via fastapi stevedore==5.5.0 # via @@ -1544,7 +1547,7 @@ tomlkit==0.13.3 # openedx-learning # pylint # snowflake-connector-python -tox==4.27.0 +tox==4.30.3 # via -r requirements/edx/testing.in tqdm==4.67.1 # via @@ -1561,6 +1564,7 @@ typing-extensions==4.15.0 # edx-opaque-keys # fastapi # grimp + # grpcio # import-linter # jwcrypto # pydantic @@ -1571,7 +1575,7 @@ typing-extensions==4.15.0 # snowflake-connector-python # starlette # typing-inspection -typing-inspection==0.4.1 +typing-inspection==0.4.2 # via # -r requirements/edx/base.txt # pydantic @@ -1601,7 +1605,7 @@ urllib3==2.5.0 # botocore # elasticsearch # requests -uvicorn==0.35.0 +uvicorn==0.37.0 # via pact-python vine==5.1.0 # via @@ -1619,7 +1623,7 @@ walrus==0.9.5 # via # -r requirements/edx/base.txt # edx-event-bus-redis -wcwidth==0.2.13 +wcwidth==0.2.14 # via # -r requirements/edx/base.txt # prompt-toolkit @@ -1683,7 +1687,7 @@ xmlsec==1.3.14 # python3-saml xss-utils==0.8.0 # via -r requirements/edx/base.txt -yarl==1.20.1 +yarl==1.22.0 # via # -r requirements/edx/base.txt # aiohttp diff --git a/requirements/pip-tools.txt b/requirements/pip-tools.txt index b19a4faaa0..e97cb1b3d3 100644 --- a/requirements/pip-tools.txt +++ b/requirements/pip-tools.txt @@ -6,11 +6,11 @@ # build==1.3.0 # via pip-tools -click==8.2.1 +click==8.3.0 # via pip-tools packaging==25.0 # via build -pip-tools==7.5.0 +pip-tools==7.5.1 # via -r requirements/pip-tools.in pyproject-hooks==1.2.0 # via diff --git a/scripts/structures_pruning/requirements/base.txt b/scripts/structures_pruning/requirements/base.txt index a01b730c49..aa4a8c1576 100644 --- a/scripts/structures_pruning/requirements/base.txt +++ b/scripts/structures_pruning/requirements/base.txt @@ -4,7 +4,7 @@ # # make upgrade # -click==8.2.1 +click==8.3.0 # via # -r scripts/structures_pruning/requirements/base.in # click-log diff --git a/scripts/structures_pruning/requirements/testing.txt b/scripts/structures_pruning/requirements/testing.txt index 83d3f5746e..1b387d33c4 100644 --- a/scripts/structures_pruning/requirements/testing.txt +++ b/scripts/structures_pruning/requirements/testing.txt @@ -4,7 +4,7 @@ # # make upgrade # -click==8.2.1 +click==8.3.0 # via # -r scripts/structures_pruning/requirements/base.txt # click-log diff --git a/scripts/user_retirement/requirements/base.txt b/scripts/user_retirement/requirements/base.txt index b77e368467..fd67805f02 100644 --- a/scripts/user_retirement/requirements/base.txt +++ b/scripts/user_retirement/requirements/base.txt @@ -4,21 +4,21 @@ # # make upgrade # -asgiref==3.9.1 +asgiref==3.10.0 # via django -attrs==25.3.0 +attrs==25.4.0 # via zeep backoff==2.2.1 # via -r scripts/user_retirement/requirements/base.in -boto3==1.40.31 +boto3==1.40.46 # via -r scripts/user_retirement/requirements/base.in -botocore==1.40.31 +botocore==1.40.46 # via # boto3 # s3transfer -cachetools==5.5.2 +cachetools==6.2.0 # via google-auth -certifi==2025.8.3 +certifi==2025.10.5 # via requests cffi==2.0.0 # via @@ -26,12 +26,14 @@ cffi==2.0.0 # pynacl charset-normalizer==3.4.3 # via requests -click==8.2.1 +click==8.3.0 # via # -r scripts/user_retirement/requirements/base.in # edx-django-utils cryptography==45.0.7 - # via pyjwt + # via + # -c requirements/constraints.txt + # pyjwt django==4.2.25 # via # -c requirements/constraints.txt @@ -42,15 +44,15 @@ django-crum==0.7.9 # via edx-django-utils django-waffle==5.0.0 # via edx-django-utils -edx-django-utils==8.0.0 +edx-django-utils==8.0.1 # via edx-rest-api-client edx-rest-api-client==6.2.0 # via -r scripts/user_retirement/requirements/base.in -google-api-core==2.25.1 +google-api-core==2.25.2 # via google-api-python-client -google-api-python-client==2.181.0 +google-api-python-client==2.184.0 # via -r scripts/user_retirement/requirements/base.in -google-auth==2.40.3 +google-auth==2.41.1 # via # google-api-core # google-api-python-client @@ -88,7 +90,7 @@ protobuf==6.32.1 # google-api-core # googleapis-common-protos # proto-plus -psutil==7.0.0 +psutil==7.1.0 # via edx-django-utils pyasn1==0.6.1 # via @@ -104,7 +106,7 @@ pyjwt[crypto]==2.10.1 # simple-salesforce pynacl==1.6.0 # via edx-django-utils -pyparsing==3.2.4 +pyparsing==3.2.5 # via httplib2 python-dateutil==2.9.0.post0 # via botocore @@ -112,7 +114,7 @@ pytz==2025.2 # via # jenkinsapi # zeep -pyyaml==6.0.2 +pyyaml==6.0.3 # via -r scripts/user_retirement/requirements/base.in requests==2.32.5 # via @@ -134,7 +136,7 @@ s3transfer==0.14.0 # via boto3 simple-salesforce==1.12.9 # via -r scripts/user_retirement/requirements/base.in -simplejson==3.20.1 +simplejson==3.20.2 # via -r scripts/user_retirement/requirements/base.in six==1.17.0 # via python-dateutil diff --git a/scripts/user_retirement/requirements/testing.txt b/scripts/user_retirement/requirements/testing.txt index f0373c1817..31b20fc6d8 100644 --- a/scripts/user_retirement/requirements/testing.txt +++ b/scripts/user_retirement/requirements/testing.txt @@ -4,31 +4,31 @@ # # make upgrade # -asgiref==3.9.1 +asgiref==3.10.0 # via # -r scripts/user_retirement/requirements/base.txt # django -attrs==25.3.0 +attrs==25.4.0 # via # -r scripts/user_retirement/requirements/base.txt # zeep backoff==2.2.1 # via -r scripts/user_retirement/requirements/base.txt -boto3==1.40.31 +boto3==1.40.46 # via # -r scripts/user_retirement/requirements/base.txt # moto -botocore==1.40.31 +botocore==1.40.46 # via # -r scripts/user_retirement/requirements/base.txt # boto3 # moto # s3transfer -cachetools==5.5.2 +cachetools==6.2.0 # via # -r scripts/user_retirement/requirements/base.txt # google-auth -certifi==2025.8.3 +certifi==2025.10.5 # via # -r scripts/user_retirement/requirements/base.txt # requests @@ -41,7 +41,7 @@ charset-normalizer==3.4.3 # via # -r scripts/user_retirement/requirements/base.txt # requests -click==8.2.1 +click==8.3.0 # via # -r scripts/user_retirement/requirements/base.txt # edx-django-utils @@ -66,19 +66,19 @@ django-waffle==5.0.0 # via # -r scripts/user_retirement/requirements/base.txt # edx-django-utils -edx-django-utils==8.0.0 +edx-django-utils==8.0.1 # via # -r scripts/user_retirement/requirements/base.txt # edx-rest-api-client edx-rest-api-client==6.2.0 # via -r scripts/user_retirement/requirements/base.txt -google-api-core==2.25.1 +google-api-core==2.25.2 # via # -r scripts/user_retirement/requirements/base.txt # google-api-python-client -google-api-python-client==2.181.0 +google-api-python-client==2.184.0 # via -r scripts/user_retirement/requirements/base.txt -google-auth==2.40.3 +google-auth==2.41.1 # via # -r scripts/user_retirement/requirements/base.txt # google-api-core @@ -120,7 +120,7 @@ lxml==5.3.2 # via # -r scripts/user_retirement/requirements/base.txt # zeep -markupsafe==3.0.2 +markupsafe==3.0.3 # via # jinja2 # werkzeug @@ -130,7 +130,7 @@ more-itertools==10.8.0 # via # -r scripts/user_retirement/requirements/base.txt # simple-salesforce -moto==5.1.12 +moto==5.1.14 # via -r scripts/user_retirement/requirements/testing.in packaging==25.0 # via pytest @@ -150,7 +150,7 @@ protobuf==6.32.1 # google-api-core # googleapis-common-protos # proto-plus -psutil==7.0.0 +psutil==7.1.0 # via # -r scripts/user_retirement/requirements/base.txt # edx-django-utils @@ -178,7 +178,7 @@ pynacl==1.6.0 # via # -r scripts/user_retirement/requirements/base.txt # edx-django-utils -pyparsing==3.2.4 +pyparsing==3.2.5 # via # -r scripts/user_retirement/requirements/base.txt # httplib2 @@ -194,7 +194,7 @@ pytz==2025.2 # -r scripts/user_retirement/requirements/base.txt # jenkinsapi # zeep -pyyaml==6.0.2 +pyyaml==6.0.3 # via # -r scripts/user_retirement/requirements/base.txt # responses @@ -235,7 +235,7 @@ s3transfer==0.14.0 # boto3 simple-salesforce==1.12.9 # via -r scripts/user_retirement/requirements/base.txt -simplejson==3.20.1 +simplejson==3.20.2 # via -r scripts/user_retirement/requirements/base.txt six==1.17.0 # via @@ -268,7 +268,7 @@ urllib3==2.5.0 # responses werkzeug==3.1.3 # via moto -xmltodict==1.0.0 +xmltodict==1.0.2 # via moto zeep==4.3.2 # via diff --git a/scripts/xblock/requirements.txt b/scripts/xblock/requirements.txt index 52fb237cb8..23d2ac5b8e 100644 --- a/scripts/xblock/requirements.txt +++ b/scripts/xblock/requirements.txt @@ -4,7 +4,7 @@ # # make upgrade # -certifi==2025.8.3 +certifi==2025.10.5 # via requests charset-normalizer==3.4.3 # via requests