diff --git a/requirements/all.txt b/requirements/all.txt index 5226086f0..5cfaeca65 100644 --- a/requirements/all.txt +++ b/requirements/all.txt @@ -57,7 +57,7 @@ cachetools==6.2.1 # -r requirements/production.txt # google-auth # tox -certifi==2025.10.5 +certifi==2026.10.23 # via # -r requirements/dev.txt # -r requirements/production.txt @@ -128,10 +128,6 @@ defusedxml==0.7.1 # -r requirements/production.txt # python3-openid # social-auth-core -openedx-didkit==0.3.5 - # via - # -r requirements/dev.txt - # -r requirements/production.txt dill==0.4.0 # via # -r requirements/dev.txt @@ -142,6 +138,7 @@ distlib==0.4.0 # virtualenv django==5.2.7 # via + # -c requirements/common_constraints.txt # -r requirements/dev.txt # -r requirements/production.txt # django-appconf @@ -571,6 +568,10 @@ openedx-atlas==0.7.0 # via # -r requirements/dev.txt # -r requirements/production.txt +openedx-didkit==0.3.5 + # via + # -r requirements/dev.txt + # -r requirements/production.txt openedx-events==10.5.0 # via # -r requirements/dev.txt @@ -832,12 +833,14 @@ sniffio==1.3.1 # anyio social-auth-app-django==5.4.3 # via + # -c requirements/common_constraints.txt # -c requirements/constraints.txt # -r requirements/dev.txt # -r requirements/production.txt # edx-auth-backends social-auth-core==4.8.1 # via + # -c requirements/common_constraints.txt # -r requirements/dev.txt # -r requirements/production.txt # edx-auth-backends diff --git a/requirements/base.in b/requirements/base.in index 62430f821..23e8cf472 100644 --- a/requirements/base.in +++ b/requirements/base.in @@ -55,4 +55,4 @@ xss-utils # TODO Install in configuration git+https://github.com/openedx/event-bus-redis.git@v0.5.0 -git+https://github.com/openedx/credentials-themes.git@0.5.6#egg=edx_credentials_themes==0.5.6 +edx-credentials-themes @ git+https://github.com/openedx/credentials-themes.git@0.5.6 diff --git a/requirements/base.txt b/requirements/base.txt index b4696c0d3..b9d30d546 100644 --- a/requirements/base.txt +++ b/requirements/base.txt @@ -22,7 +22,7 @@ cachecontrol==0.14.3 # via firebase-admin cachetools==6.2.1 # via google-auth -certifi==2025.10.5 +certifi==2026.10.23 # via # httpcore # httpx @@ -52,10 +52,9 @@ defusedxml==0.7.1 # via # python3-openid # social-auth-core -openedx-didkit==0.3.5 - # via -r requirements/base.in django==5.2.7 # via + # -c requirements/common_constraints.txt # -r requirements/base.in # django-appconf # django-config-models @@ -272,6 +271,8 @@ openapi-codec==1.3.2 # via django-rest-swagger openedx-atlas==0.7.0 # via -r requirements/base.in +openedx-didkit==0.3.5 + # via -r requirements/base.in openedx-events==10.5.0 # via # -r requirements/base.in @@ -385,11 +386,13 @@ sniffio==1.3.1 # via anyio social-auth-app-django==5.4.3 # via + # -c requirements/common_constraints.txt # -c requirements/constraints.txt # -r requirements/base.in # edx-auth-backends social-auth-core==4.8.1 # via + # -c requirements/common_constraints.txt # edx-auth-backends # social-auth-app-django sqlparse==0.5.3 diff --git a/requirements/common_constraints.txt b/requirements/common_constraints.txt index a920d65fb..67a45d4cf 100644 --- a/requirements/common_constraints.txt +++ b/requirements/common_constraints.txt @@ -17,9 +17,32 @@ # this file from Github directly. It does not require packaging in edx-lint. # using LTS django version - +Django<6.0 # elasticsearch>=7.14.0 includes breaking changes in it which caused issues in discovery upgrade process. # elastic search changelog: https://www.elastic.co/guide/en/enterprise-search/master/release-notes-7.14.0.html # See https://github.com/openedx/edx-platform/issues/35126 for more info elasticsearch<7.14.0 + +# 2026-07-06: Constrain social-auth-* packages to the latest version compatible with +# edx-drf-extensions<=10.6.0. (Newer versions require a POST instead of a GET.) +# Tracking issue: https://github.com/openedx/edx-drf-extensions/issues/561 +social-auth-app-django<6.0.0 +social-auth-core<5.0.0 + +# 2026-08-11: pip-tools is only tested against the latest pip released at the time +# pip-tools was released; also, pip-tools package dependencies are extremely permissive +# about the pip version required, so the dependency resolver will not prevent an unwanted +# pip upgrade which would break pip-tools. The end result is that pip MUST be constrained +# by all pip-tools users in order to avoid potentially weeks-long lapses in pip <-> +# pip-tools compatibility. We've constrained pip here in common_constraints.txt in the +# past, but always removed it once the issue was "fixed". Removing this constraint was +# always a mistake. +# +# This is a semi-permanent constraint and should be manually bumped after each pip-tools +# release. +# +# Exceptional conditions for removal: +# - We stop using pip-tools, OR +# - We migrate to the proposed `pip-tools[stable]` extra: https://github.com/jazzband/pip-tools/pull/2257 +pip<=26.2.2 # Known to work with pip-tools==7.6.2 diff --git a/requirements/dev.txt b/requirements/dev.txt index 401c7c4de..7526ae570 100644 --- a/requirements/dev.txt +++ b/requirements/dev.txt @@ -40,7 +40,7 @@ cachetools==6.2.1 # -r requirements/test.txt # google-auth # tox -certifi==2025.10.5 +certifi==2026.10.23 # via # -r requirements/test.txt # httpcore @@ -102,8 +102,6 @@ defusedxml==0.7.1 # -r requirements/test.txt # python3-openid # social-auth-core -openedx-didkit==0.3.5 - # via -r requirements/test.txt dill==0.4.0 # via # -r requirements/test.txt @@ -114,6 +112,7 @@ distlib==0.4.0 # virtualenv django==5.2.7 # via + # -c requirements/common_constraints.txt # -r requirements/test.txt # django-appconf # django-config-models @@ -433,6 +432,8 @@ openapi-codec==1.3.2 # django-rest-swagger openedx-atlas==0.7.0 # via -r requirements/test.txt +openedx-didkit==0.3.5 + # via -r requirements/test.txt openedx-events==10.5.0 # via # -r requirements/test.txt @@ -650,11 +651,13 @@ sniffio==1.3.1 # anyio social-auth-app-django==5.4.3 # via + # -c requirements/common_constraints.txt # -c requirements/constraints.txt # -r requirements/test.txt # edx-auth-backends social-auth-core==4.8.1 # via + # -c requirements/common_constraints.txt # -r requirements/test.txt # edx-auth-backends # social-auth-app-django diff --git a/requirements/docs.txt b/requirements/docs.txt index 341dad0ad..d08ec053f 100644 --- a/requirements/docs.txt +++ b/requirements/docs.txt @@ -14,7 +14,7 @@ babel==2.17.0 # sphinx beautifulsoup4==4.14.2 # via pydata-sphinx-theme -certifi==2025.10.5 +certifi==2026.10.23 # via requests charset-normalizer==3.4.4 # via requests diff --git a/requirements/pip.txt b/requirements/pip.txt index 42c703428..ccdf14b7e 100644 --- a/requirements/pip.txt +++ b/requirements/pip.txt @@ -8,7 +8,9 @@ wheel==0.45.1 # via -r requirements/pip.in # The following packages are considered to be unsafe in a requirements file: -pip==25.2 - # via -r requirements/pip.in +pip==26.2.2 + # via + # -c requirements/common_constraints.txt + # -r requirements/pip.in setuptools==80.9.0 # via -r requirements/pip.in diff --git a/requirements/pip_tools.txt b/requirements/pip_tools.txt index 0dc0bf329..24ba07029 100644 --- a/requirements/pip_tools.txt +++ b/requirements/pip_tools.txt @@ -10,7 +10,7 @@ click==8.3.0 # via pip-tools packaging==25.0 # via build -pip-tools==7.5.1 +pip-tools==7.6.2 # via -r requirements/pip_tools.in pyproject-hooks==1.2.0 # via diff --git a/requirements/production.txt b/requirements/production.txt index b53c2b904..ac98f9f98 100644 --- a/requirements/production.txt +++ b/requirements/production.txt @@ -38,7 +38,7 @@ cachetools==6.2.1 # via # -r requirements/base.txt # google-auth -certifi==2025.10.5 +certifi==2026.10.23 # via # -r requirements/base.txt # httpcore @@ -80,10 +80,9 @@ defusedxml==0.7.1 # -r requirements/base.txt # python3-openid # social-auth-core -openedx-didkit==0.3.5 - # via -r requirements/base.txt django==5.2.7 # via + # -c requirements/common_constraints.txt # -r requirements/base.txt # django-appconf # django-config-models @@ -374,6 +373,8 @@ openapi-codec==1.3.2 # django-rest-swagger openedx-atlas==0.7.0 # via -r requirements/base.txt +openedx-didkit==0.3.5 + # via -r requirements/base.txt openedx-events==10.5.0 # via # -r requirements/base.txt @@ -532,11 +533,13 @@ sniffio==1.3.1 # anyio social-auth-app-django==5.4.3 # via + # -c requirements/common_constraints.txt # -c requirements/constraints.txt # -r requirements/base.txt # edx-auth-backends social-auth-core==4.8.1 # via + # -c requirements/common_constraints.txt # -r requirements/base.txt # edx-auth-backends # social-auth-app-django diff --git a/requirements/test.txt b/requirements/test.txt index 816bbb054..4eb4563b3 100644 --- a/requirements/test.txt +++ b/requirements/test.txt @@ -39,7 +39,7 @@ cachetools==6.2.1 # -r requirements/base.txt # google-auth # tox -certifi==2025.10.5 +certifi==2026.10.23 # via # -r requirements/base.txt # httpcore @@ -96,13 +96,12 @@ defusedxml==0.7.1 # -r requirements/base.txt # python3-openid # social-auth-core -openedx-didkit==0.3.5 - # via -r requirements/base.txt dill==0.4.0 # via pylint distlib==0.4.0 # via virtualenv # via + # -c requirements/common_constraints.txt # -r requirements/base.txt # django-appconf # django-config-models @@ -400,6 +399,8 @@ openapi-codec==1.3.2 # django-rest-swagger openedx-atlas==0.7.0 # via -r requirements/base.txt +openedx-didkit==0.3.5 + # via -r requirements/base.txt openedx-events==10.5.0 # via # -r requirements/base.txt @@ -600,11 +601,13 @@ sniffio==1.3.1 # anyio social-auth-app-django==5.4.3 # via + # -c requirements/common_constraints.txt # -c requirements/constraints.txt # -r requirements/base.txt # edx-auth-backends social-auth-core==4.8.1 # via + # -c requirements/common_constraints.txt # -r requirements/base.txt # edx-auth-backends # social-auth-app-django diff --git a/requirements/translations.txt b/requirements/translations.txt index 9d57833dc..bb92c20cf 100644 --- a/requirements/translations.txt +++ b/requirements/translations.txt @@ -7,7 +7,9 @@ asgiref==3.10.0 # via django django==5.2.7 - # via edx-i18n-tools + # via + # -c requirements/common_constraints.txt + # edx-i18n-tools edx-i18n-tools==1.9.0 # via -r requirements/translations.in lxml[html-clean]==6.0.2