Commit Graph

745 Commits

Author SHA1 Message Date
edX requirements bot
761e470b30 Updating Python Requirements (#26184) 2021-01-27 12:32:20 +05:00
Ali-D-Akbar
4f2db21363 update thresholds after IM security fixes 5 2021-01-20 00:36:37 +05:00
Ali-D-Akbar
aa6da77c4e update thresholds after IM security fixes 4 2021-01-11 15:02:29 +05:00
Ali Akbar
40fdf46f81 update after IM security fixes 3 (#25983) 2021-01-05 16:12:05 +05:00
Diana Huang
f6085e5139 Bump threshold limits due to previously broken pylint. 2020-12-22 11:12:27 -05:00
edX requirements bot
73a819a40b Updating Python Requirements 2020-12-17 02:54:05 -05:00
Tim McCormack
edeabc3faf Add --summary-format=json option to XSS linter (#25851)
This will simplify updating of the linter thresholds file after XSS linter
violations are addressed.
2020-12-11 12:34:04 +00:00
Ali-D-Akbar
bd13b59254 match the defined thresholds with the current violations on master 2020-12-11 02:06:09 +05:00
David Joy
a9f1a03787 Pin requirements to temporarily fix instructor task registration (#25787)
* Pin requirements to temporarily fix instructor task registration

We ran into an issue where instructor tasks were not being registered with celery correctly, resulting in: https://openedx.atlassian.net/browse/CR-2982

The cause wasn’t clear, so we started reverting some recent, suspect PRs.  When we reverted #25746, the issue went away.

The revert PR was this one: https://github.com/edx/edx-platform/pull/25766

So that we can unpause our deployment pipelines, we’re temporarily pinning the versions of the four packages upgraded in #25746 so we can continue to investigate.

* Result of make upgrade, propagating constraints out to other requirements files
2020-12-07 12:48:23 -05:00
edX requirements bot
10b92eed17 Updating Python Requirements 2020-11-12 23:46:29 -05:00
edX requirements bot
9c22e31d0d Updating Python Requirements (#25578) 2020-11-12 11:28:14 +05:00
Kyle McCormick
151bd13666 Use full names for common.djangoapps imports; warn when using old style (#25477)
* Generate common/djangoapps import shims for LMS
* Generate common/djangoapps import shims for Studio
* Stop appending project root to sys.path
* Stop appending common/djangoapps to sys.path
* Import from common.djangoapps.course_action_state instead of course_action_state
* Import from common.djangoapps.course_modes instead of course_modes
* Import from common.djangoapps.database_fixups instead of database_fixups
* Import from common.djangoapps.edxmako instead of edxmako
* Import from common.djangoapps.entitlements instead of entitlements
* Import from common.djangoapps.pipline_mako instead of pipeline_mako
* Import from common.djangoapps.static_replace instead of static_replace
* Import from common.djangoapps.student instead of student
* Import from common.djangoapps.terrain instead of terrain
* Import from common.djangoapps.third_party_auth instead of third_party_auth
* Import from common.djangoapps.track instead of track
* Import from common.djangoapps.util instead of util
* Import from common.djangoapps.xblock_django instead of xblock_django
* Add empty common/djangoapps/__init__.py to fix pytest collection
* Fix pylint formatting violations
* Exclude import_shims/ directory tree from linting
2020-11-10 07:02:01 -05:00
edX requirements bot
5f69024bed Updating Python Requirements 2020-11-10 02:29:56 -05:00
Dillon Dumesnil
6b16fcd9b3 AA-393: Update Next Section Logic
Inside content_highlights.py, we had code to calculate due dates
for when there isn't graded content, but we could only reach that
code path if the user had an assignment with a due date at the
target date. Now we will check for all learners who could be in
range of having an update and let the code in content_highlights.py
decide if a highlight should be sent
2020-10-30 15:02:03 -04:00
Tim McCormack
644963255c Move toggle annotation invocation to a Jenkins job (#25484)
There wasn't any reason for this to be in edx-platform in particular.

See https://github.com/edx/jenkins-job-dsl-internal/pull/444 -- we can
run `make requirements; pip install -e .` in a code-annotations
virtualenv and point it at each IDA in turn to generate reports for all of them.

ARCHBOM-1583
2020-10-30 13:35:45 +00:00
Aarif
1a31236404 updated config to use mysql 5.7 container (#25362) 2020-10-29 21:51:39 +05:00
Michael Terry
a4bd5a7ec9 AA-197: Provide cert upgrade info to learning MFE
Specifically, pass the MFE the audit access expiration date and
let it know when the upgrade deadline has passed, by not passing
any verified mode information along.
2020-10-27 09:05:12 -04:00
Jeff Chaves
d25d4038fd ENT-3460: updating usage of EnterpriseCustomerBrandingConfiguration, edx-enterprise 3.8.42 (#25376)
* bumping enterprise version

* adding pillow constraint

* updating usage of EnterpriseCustomerBrandingConfiguration
2020-10-19 16:42:16 -04:00
Jeremy Bowman
d19368525b DEPR-43 Remove most of the shoppingcart app (#24692)
Removed most of the deprecated shoppingcart app, leaving just enough to allow us to cleanly remove the related database tables later. Also removed the relevant Django settings that weren't in use elsewhere.
2020-10-14 14:24:52 -04:00
Dillon Dumesnil
a96079f2d1 AA-196: Course Celebration for passing Verified Learners 2020-10-01 16:53:25 -04:00
Dillon Dumesnil
1341068d20 AA-314/AA-330: Updates to courseware due date.
This will fix a bug about if assignment type is None, we will only
show the due date.
This will also fix a bug where we would show the assignment type and
due date on non-scored units within a subsection. Now it will only
show on scored units.
This also fixes the pill that displays from stretching out if the due
date text is multi-lined.
2020-08-31 10:50:42 -04:00
Aarif
09ac7f9372 remove cyclomatic complexity calculation for python code 2020-08-04 22:10:05 +05:00
edX requirements bot
e33de26e6a Python Requirements Update (#24563)
* Updating Python Requirements

* pin maxminddb

Co-authored-by: Zulqarnain <muhammad.zulqarnain@arbisoft.com>
2020-07-22 21:55:28 +05:00
edX requirements bot
2922a4db96 Updating Python Requirements 2020-06-29 11:29:28 -04:00
edX requirements bot
2e6d561e6b Updating Python Requirements 2020-06-22 06:45:53 -04:00
David Ormsbee
0b4cf7e06c Merge pull request #23039 from open-craft/samuel/fix-unescaped-selector
SE-2176 Fix elem not selected if id contains special chars
2020-06-19 12:13:20 -04:00
Binod Pant
2c229481dc Result of running make upgrade in order to upgrade to edx-enterprise v3.3.5 (#24256)
all versions updates were minor and no visible downgrades
2020-06-18 16:59:19 -04:00
Samuel Walladge
43f0cd72af Merge remote-tracking branch 'origin/master' into samuel/fix-unescaped-selector 2020-06-16 09:52:38 +09:30
Awais Qureshi
4e84d435c1 BOM-1637
rename djang-babel to enmarker
upgrade the reqs
2020-06-09 21:52:54 +05:00
Waheed Ahmed
c7f4e16470 Fix XSS lint issues for course_cta_text
PROD-1602
2020-05-21 12:51:07 +05:00
Jeremy Bowman
47d15ff1a8 Update tested versions of Python and Django (#24006)
Cleaned up a few more things about the testing configuration now that we've deployed Django 2.2 to production:

* Go back to a single version of django-oauth-toolkit, tox doesn't need to vary it anymore
* Go back to PyPI release of django-method-override
* Remove no longer needed dependency on python-oauth2 (we already removed the package it was used by)
* Update prepare_xdist_nodes.sh with new Django requirements file options
2020-05-19 12:19:20 -04:00
Dillon Dumesnil
858154a7d6 AA-99: Adding in new date pills for the dates tab 2020-05-04 07:24:01 -07:00
Robert Raposa
0d9b2dd4ed add paver_autocomplete.sh (#23868)
This script is being moved from configuration to edx-platform.
It originally lived here:
https://github.com/edx/configuration/blob/master/playbooks/roles/local_dev/files/paver_autocomplete.sh
2020-05-04 08:36:18 -04:00
Samuel Walladge
71fcf6e725 Fix issues with xss linters
Improve accuracy of javascript-escape linter: Previously this would
match on FOOescape() and FOO.escape calls, but neither are the global
escape function we are worried about.

The regex probably isn't 100% accurate; there may be still false
positives (javascript allows a large range of characters in identifiers,
some of which may not be covered by [\w.$]). The main thing is to avoid
false negatives here though - this will definitely catch any use of
`escape()` or `window.escape()`.

Also remove javascript-interpolate lint - this was deemed unecessary.
StringUtils.interpolate is not in fact safe (it does no html escaping),
so the results of this lint are misleading.
2020-05-04 09:27:18 +09:30
Tim McCormack
5bb89d95c5 Revert "Revert "Fix Jenkins virtualenv issue that masked stale dependency" (#23828)" (#23866)
This reverts commit 70600d79d7.
2020-05-01 17:33:38 +00:00
Aarif
98af9ce418 remove useless-supression warnings 2020-05-01 19:42:15 +05:00
Robert Raposa
8ed8d1ed9f add find_order_dependent_test_failures.py script (#23851)
In the case that that are order dependent failures on Jenkins, this
script can be used to automatically find the minimal set of tests
required to continue to test the failure locally.
2020-04-30 15:58:13 -04:00
Robert Raposa
2cde81e190 fix get_worker_test_list.py (#23842)
* fix get_worker_test_list.py

The test name is not always at the same index in the line, so pull
it from the regex instead.
2020-04-30 11:04:25 -04:00
Tim McCormack
70600d79d7 Revert "Fix Jenkins virtualenv issue that masked stale dependency" (#23828)
* Revert "Use pip-sync to make sure that dep cache tarball can go safely stale"

This reverts commit d435f4cd3e.

* Revert "Extract worker setup into own shell script, as much as possible"

This reverts commit 0a079e757c.
2020-04-29 02:15:57 +00:00
Tim McCormack
d435f4cd3e Use pip-sync to make sure that dep cache tarball can go safely stale
This "fixes" egg-links in a really hacky way to compensate for the lack
of a real relocatable virtualenv.
2020-04-28 12:56:31 -04:00
Tim McCormack
0a079e757c Extract worker setup into own shell script, as much as possible
This also changes DJANGO_REQUIREMENT to be a single file arg.
2020-04-28 12:56:31 -04:00
Tim McCormack
5590879549 Unpin django-model-utils and mysqlclient (#23733)
These were pinned because they drop support for Django<2.2 (or were
planning on it, in the latter case.)

No related changes in computed requirements.
2020-04-17 12:29:35 +00:00
Jeremy Bowman
0b44434da2 Use correct Django requirements file for xdist workers 2020-04-12 15:50:29 -04:00
irfanuddinahmad
5301be1b29 ENT-2612 Fix issue with enterprise selection page redirect 2020-04-07 17:44:10 +05:00
Stu Young
9b9e2f7e67 add reserved keyword linter to CI (#23499) 2020-04-01 10:30:46 -04:00
Usama Sadiq
3c563e072d BOM-1404 Updated tox settings (#23439)
Issue: https://openedx.atlassian.net/browse/BOM-1404

* Fixed Django 2.x installation process in tox
* Updated xdist worker Django installation code
* Use correct tox environment variable name

Co-authored-by: Jeremy Bowman <jbowman@edx.org>
2020-03-24 15:06:47 -04:00
nadeemshahzad
4b7ed730fc add tags to pytest xdist worker 2020-03-11 18:11:18 +05:00
Dillon Dumesnil
a59155e83c AA-36: Link to toggle calendar sync 2020-03-10 14:45:29 -04:00
Jeremy Bowman
45644a3511 Upgrade edx-lint BOM-1298 (#23227)
The last time we tried this upgrade we encountered timeouts on the quality job, which it now appears were due to the worker running pylint common running out of memory and killing the Jenkins process. Switching to a different worker type with double the RAM (8 GB vs. 4 GB) seems to have fixed this; about 5.5 GB was used. Upstream is aware of the high memory usage on large projects, it's apparently due primarily to a cache of parsed modules: https://github.com/PyCQA/pylint/issues/1495 .

Even after disabling some of the new checks that have been added, the new version of pylint found about twice as much to complain about. Just bumping the threshold for now to unblock the Django upgrade, we can try automated utilities like pyupgrade to fix some of these later.
2020-03-02 08:27:19 -05:00
Jeremy Bowman
230bee9a06 Remove duplicate dependency version constraints (#23198)
Remove duplicate constraints in requirements/constraints.txt uncovered by the recent change in pip-compile output format. I sorted the pinned dependencies by name to try and make it more obvious if this happens again. I also upgraded to pip-tools 4.5.1, which removes the line numbers from the enhanced pip-compile output added in 4.5.0, which should reduce future diff churn and merge conflicts but means that there's a large diff this one last time.

Also unpin edx-search again after the previous change to do that was apparently broken by a merge conflict.
2020-02-26 20:42:21 -05:00