From 8c4e31d1d65a9db116040479e6b7b6a83829bee5 Mon Sep 17 00:00:00 2001 From: edX requirements bot Date: Sun, 19 Jul 2026 20:32:24 -0400 Subject: [PATCH 1/2] chore: Upgrade Python requirements --- requirements/base.txt | 2 +- requirements/ci.txt | 6 +++--- requirements/common_constraints.txt | 4 ++-- requirements/pip-tools.txt | 4 ++-- requirements/quality.txt | 14 +++++++------- requirements/test.txt | 14 +++++++------- 6 files changed, 22 insertions(+), 22 deletions(-) diff --git a/requirements/base.txt b/requirements/base.txt index 756d2180..cd07c760 100644 --- a/requirements/base.txt +++ b/requirements/base.txt @@ -6,7 +6,7 @@ # annotated-types==0.7.0 # via pydantic -asgiref==3.11.1 +asgiref==3.12.1 # via # django # django-cors-headers diff --git a/requirements/ci.txt b/requirements/ci.txt index 1e94b7aa..35be3344 100644 --- a/requirements/ci.txt +++ b/requirements/ci.txt @@ -10,7 +10,7 @@ colorama==0.4.6 # via tox distlib==0.4.3 # via virtualenv -filelock==3.29.7 +filelock==3.31.0 # via # python-discovery # tox @@ -19,7 +19,7 @@ packaging==26.2 # via # pyproject-api # tox -platformdirs==4.10.0 +platformdirs==4.10.1 # via # python-discovery # tox @@ -34,7 +34,7 @@ python-discovery==1.4.4 # virtualenv tomli-w==1.2.0 # via tox -tox==4.56.4 +tox==4.57.0 # via -r requirements/ci.in virtualenv==21.6.1 # via tox diff --git a/requirements/common_constraints.txt b/requirements/common_constraints.txt index c84d6c06..734b7a6e 100644 --- a/requirements/common_constraints.txt +++ b/requirements/common_constraints.txt @@ -21,5 +21,5 @@ elasticsearch<7.14.0 # 2026-07-06: Constrain social-auth-* packages to the latest version compatible with # edx-drf-extensions<=10.6.0. (Newer versions require a POST instead of a GET.) # Tracking issue: https://github.com/openedx/edx-drf-extensions/issues/561 -social-auth-app-django>=5.9.0,<6.0.0 -social-auth-core>=4.9.1,<5.0.0 +social-auth-app-django<6.0.0 +social-auth-core<5.0.0 diff --git a/requirements/pip-tools.txt b/requirements/pip-tools.txt index 1c1849cc..20aa67f1 100644 --- a/requirements/pip-tools.txt +++ b/requirements/pip-tools.txt @@ -4,7 +4,7 @@ # # make upgrade # -build==1.5.1 +build==1.5.0 # via pip-tools click==8.4.2 # via pip-tools @@ -12,7 +12,7 @@ packaging==26.2 # via # build # wheel -pip-tools==7.5.3 +pip-tools==7.6.0 # via -r requirements/pip-tools.in pyproject-hooks==1.2.0 # via diff --git a/requirements/quality.txt b/requirements/quality.txt index eec8ca0d..b6107db6 100644 --- a/requirements/quality.txt +++ b/requirements/quality.txt @@ -9,7 +9,7 @@ annotated-types==0.7.0 # -r requirements/base.txt # -r requirements/test.txt # pydantic -asgiref==3.11.1 +asgiref==3.12.1 # via # -r requirements/base.txt # -r requirements/test.txt @@ -75,7 +75,7 @@ colorama==0.4.6 # via # -r requirements/test.txt # tox -coverage[toml]==7.15.1 +coverage[toml]==7.15.2 # via # -r requirements/test.txt # pytest-cov @@ -197,11 +197,11 @@ elasticsearch-dsl==7.4.1 # django-elasticsearch-dsl-drf factory-boy==3.3.3 # via -r requirements/test.txt -faker==40.28.1 +faker==40.31.0 # via # -r requirements/test.txt # factory-boy -filelock==3.29.7 +filelock==3.31.0 # via # -r requirements/test.txt # python-discovery @@ -282,7 +282,7 @@ path-py==12.5.0 # -r requirements/test.txt pep8==1.7.1 # via -r requirements/test.txt -platformdirs==4.10.0 +platformdirs==4.10.1 # via # -r requirements/test.txt # pylint @@ -442,12 +442,12 @@ tomli-w==1.2.0 # via # -r requirements/test.txt # tox -tomlkit==0.15.0 +tomlkit==0.15.1 # via # -r requirements/test.txt # edx-lint # pylint -tox==4.56.4 +tox==4.57.0 # via -r requirements/test.txt typing-extensions==4.16.0 # via diff --git a/requirements/test.txt b/requirements/test.txt index d23bb821..dd01feb0 100644 --- a/requirements/test.txt +++ b/requirements/test.txt @@ -8,7 +8,7 @@ annotated-types==0.7.0 # via # -r requirements/base.txt # pydantic -asgiref==3.11.1 +asgiref==3.12.1 # via # -r requirements/base.txt # django @@ -53,7 +53,7 @@ code-annotations==3.0.0 # via -r requirements/test.in colorama==0.4.6 # via tox -coverage[toml]==7.15.1 +coverage[toml]==7.15.2 # via # -r requirements/test.in # pytest-cov @@ -145,9 +145,9 @@ elasticsearch-dsl==7.4.1 # django-elasticsearch-dsl-drf factory-boy==3.3.3 # via -r requirements/test.in -faker==40.28.1 +faker==40.31.0 # via factory-boy -filelock==3.29.7 +filelock==3.31.0 # via # python-discovery # tox @@ -204,7 +204,7 @@ path-py==12.5.0 # via -r requirements/base.txt pep8==1.7.1 # via -r requirements/test.in -platformdirs==4.10.0 +platformdirs==4.10.1 # via # pylint # python-discovery @@ -319,9 +319,9 @@ text-unidecode==1.3 # via python-slugify tomli-w==1.2.0 # via tox -tomlkit==0.15.0 +tomlkit==0.15.1 # via pylint -tox==4.56.4 +tox==4.57.0 # via -r requirements/test.in typing-extensions==4.16.0 # via From f9742030b75942d4bababed768e17eaf304400b0 Mon Sep 17 00:00:00 2001 From: farhan Date: Mon, 20 Jul 2026 14:01:40 +0500 Subject: [PATCH 2/2] fix: align github/codeql-action versions to resolve CodeQL config mismatch All three steps (init, autobuild, analyze) now pin to the same commit hash 99df26d4f13ea111d4ec1a7dddef6063f76b97e9 (v4.37.0). Previously init was pinned to v4.35.5 while autobuild and analyze used v4.37.0, causing the "Loaded a configuration file for version '4.35.5', but running version '4.37.0'" error. Co-Authored-By: Claude Sonnet 4.6 --- .github/workflows/codeql-analysis.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index 86cf3651..d811de9f 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -25,7 +25,7 @@ jobs: # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL - uses: github/codeql-action/init@9e0d7b8d25671d64c341c19c0152d693099fb5ba # v4.35.5 + uses: github/codeql-action/init@99df26d4f13ea111d4ec1a7dddef6063f76b97e9 # v4.37.0 with: languages: ${{ matrix.language }}