Python Requirements Update

requirements/base.txt

@@ -8,7 +8,7 @@ amqp==2.6.1
     # via kombu
 analytics-python==1.4.post1
     # via -r requirements/base.in
-asgiref==3.7.2
+asgiref==3.8.1
     # via
     #   django
     #   django-cors-headers
@@ -18,7 +18,9 @@ async-timeout==4.0.3
 backoff==1.10.0
     # via analytics-python
 backports-zoneinfo==0.2.1
-    # via django
+    # via
+    #   django
+    #   djangorestframework
 billiard==3.6.4.0
     # via celery
 celery==4.4.7
@@ -96,7 +98,7 @@ django-waffle==4.1.0
     #   -r requirements/base.in
     #   edx-django-utils
     #   edx-drf-extensions
-djangorestframework==3.14.0
+djangorestframework==3.15.1
     # via
     #   -r requirements/base.in
     #   django-user-tasks
@@ -173,7 +175,6 @@ pytz==2024.1
     # via
     #   -r requirements/base.in
     #   celery
-    #   djangorestframework
     #   drf-yasg
 pyyaml==6.0.1
     # via
@@ -189,7 +190,7 @@ requests==2.31.0
     #   requests-oauthlib
     #   slumber
     #   social-auth-core
-requests-oauthlib==1.4.0
+requests-oauthlib==2.0.0
     # via social-auth-core
 semantic-version==2.10.0
     # via edx-drf-extensions

requirements/common_constraints.txt

@@ -26,3 +26,12 @@ elasticsearch<7.14.0
 
 # django-simple-history>3.0.0 adds indexing and causes a lot of migrations to be affected
 
+
+# opentelemetry requires version 6.x at the moment:
+# https://github.com/open-telemetry/opentelemetry-python/issues/3570
+# Normally this could be added as a constraint in edx-django-utils, where we're
+# adding the opentelemetry dependency. However, when we compile pip-tools.txt,
+# that uses version 7.x, and then there's no undoing that when compiling base.txt.
+# So we need to pin it globally, for now.
+# Ticket for unpinning: https://github.com/openedx/edx-lint/issues/407
+importlib-metadata<7

requirements/devstack.txt

@@ -18,7 +18,7 @@ amqp==2.6.1
     #   kombu
 analytics-python==1.4.post1
     # via -r requirements/local.txt
-asgiref==3.7.2
+asgiref==3.8.1
     # via
     #   -r requirements/local.txt
     #   django
@@ -46,6 +46,7 @@ backports-zoneinfo==0.2.1
     # via
     #   -r requirements/local.txt
     #   django
+    #   djangorestframework
 beautifulsoup4==4.12.3
     # via
     #   -r requirements/local.txt
@@ -54,12 +55,12 @@ billiard==3.6.4.0
     # via
     #   -r requirements/local.txt
     #   celery
-boto3==1.34.60
+boto3==1.34.70
     # via
     #   -c requirements/constraints.txt
     #   -r requirements/local.txt
     #   moto
-botocore==1.34.60
+botocore==1.34.70
     # via
     #   -r requirements/local.txt
     #   boto3
@@ -102,7 +103,7 @@ click-log==0.4.0
     # via
     #   -r requirements/local.txt
     #   edx-lint
-code-annotations==1.6.0
+code-annotations==1.7.0
     # via
     #   -c requirements/constraints.txt
     #   -r requirements/local.txt
@@ -115,7 +116,7 @@ configobj==5.0.8
     # via
     #   -r requirements/local.txt
     #   ruamel-yaml-cmd
-coverage[toml]==7.4.3
+coverage[toml]==7.4.4
     # via
     #   -r requirements/local.txt
     #   pytest-cov
@@ -200,7 +201,7 @@ django-waffle==4.1.0
     #   -r requirements/local.txt
     #   edx-django-utils
     #   edx-drf-extensions
-djangorestframework==3.14.0
+djangorestframework==3.15.1
     # via
     #   -r requirements/local.txt
     #   django-user-tasks
@@ -251,11 +252,11 @@ exceptiongroup==1.2.0
     #   pytest
 factory-boy==3.3.0
     # via -r requirements/local.txt
-faker==24.1.0
+faker==24.4.0
     # via
     #   -r requirements/local.txt
     #   factory-boy
-filelock==3.13.1
+filelock==3.13.3
     # via
     #   -r requirements/local.txt
     #   tox
@@ -270,8 +271,9 @@ imagesize==1.4.1
     # via
     #   -r requirements/local.txt
     #   sphinx
-importlib-metadata==7.0.2
+importlib-metadata==6.11.0
     # via
+    #   -c requirements/common_constraints.txt
     #   -r requirements/local.txt
     #   sphinx
 inflection==0.5.1
@@ -439,7 +441,7 @@ pytest==8.1.1
     #   -r requirements/local.txt
     #   pytest-cov
     #   pytest-django
-pytest-cov==4.1.0
+pytest-cov==5.0.0
     # via -r requirements/local.txt
 pytest-django==4.8.0
     # via -r requirements/local.txt
@@ -468,7 +470,6 @@ pytz==2024.1
     #   -r requirements/local.txt
     #   babel
     #   celery
-    #   djangorestframework
     #   drf-yasg
 pywatchman==2.0.0
     # via -r requirements/local.txt
@@ -494,7 +495,7 @@ requests==2.31.0
     #   slumber
     #   social-auth-core
     #   sphinx
-requests-oauthlib==1.4.0
+requests-oauthlib==2.0.0
     # via
     #   -r requirements/local.txt
     #   social-auth-core
@@ -523,7 +524,7 @@ ruamel-yaml-convert==0.3.2
     # via
     #   -r requirements/local.txt
     #   ruamel-yaml-cmd
-s3transfer==0.10.0
+s3transfer==0.10.1
     # via
     #   -r requirements/local.txt
     #   boto3
@@ -620,7 +621,7 @@ tomlkit==0.12.4
     # via
     #   -r requirements/local.txt
     #   pylint
-tox==4.14.1
+tox==4.14.2
     # via -r requirements/local.txt
 typing-extensions==4.10.0
     # via
@@ -661,7 +662,7 @@ xmltodict==0.13.0
     #   moto
 yamllint==1.35.1
     # via -r requirements/local.txt
-zipp==3.17.0
+zipp==3.18.1
     # via
     #   -r requirements/local.txt
     #   importlib-metadata

requirements/docs.txt

@@ -26,8 +26,10 @@ idna==3.6
     # via requests
 imagesize==1.4.1
     # via sphinx
-importlib-metadata==7.0.2
-    # via sphinx
+importlib-metadata==6.11.0
+    # via
+    #   -c requirements/common_constraints.txt
+    #   sphinx
 jinja2==3.1.3
     # via sphinx
 markupsafe==2.1.5
@@ -76,5 +78,5 @@ urllib3==1.26.18
     # via
     #   -c requirements/constraints.txt
     #   requests
-zipp==3.17.0
+zipp==3.18.1
     # via importlib-metadata

requirements/local.txt

@@ -18,7 +18,7 @@ amqp==2.6.1
     #   kombu
 analytics-python==1.4.post1
     # via -r requirements/test.txt
-asgiref==3.7.2
+asgiref==3.8.1
     # via
     #   -r requirements/test.txt
     #   django
@@ -46,6 +46,7 @@ backports-zoneinfo==0.2.1
     # via
     #   -r requirements/test.txt
     #   django
+    #   djangorestframework
 beautifulsoup4==4.12.3
     # via
     #   -r requirements/docs.txt
@@ -54,12 +55,12 @@ billiard==3.6.4.0
     # via
     #   -r requirements/test.txt
     #   celery
-boto3==1.34.60
+boto3==1.34.70
     # via
     #   -c requirements/constraints.txt
     #   -r requirements/test.txt
     #   moto
-botocore==1.34.60
+botocore==1.34.70
     # via
     #   -r requirements/test.txt
     #   boto3
@@ -104,7 +105,7 @@ click-log==0.4.0
     # via
     #   -r requirements/test.txt
     #   edx-lint
-code-annotations==1.6.0
+code-annotations==1.7.0
     # via
     #   -c requirements/constraints.txt
     #   -r requirements/test.txt
@@ -115,7 +116,7 @@ colorama==0.4.6
     #   tox
 configobj==5.0.8
     # via ruamel-yaml-cmd
-coverage[toml]==7.4.3
+coverage[toml]==7.4.4
     # via
     #   -r requirements/test.txt
     #   pytest-cov
@@ -200,7 +201,7 @@ django-waffle==4.1.0
     #   -r requirements/test.txt
     #   edx-django-utils
     #   edx-drf-extensions
-djangorestframework==3.14.0
+djangorestframework==3.15.1
     # via
     #   -r requirements/test.txt
     #   django-user-tasks
@@ -251,11 +252,11 @@ exceptiongroup==1.2.0
     #   pytest
 factory-boy==3.3.0
     # via -r requirements/test.txt
-faker==24.1.0
+faker==24.4.0
     # via
     #   -r requirements/test.txt
     #   factory-boy
-filelock==3.13.1
+filelock==3.13.3
     # via
     #   -r requirements/test.txt
     #   tox
@@ -271,8 +272,9 @@ imagesize==1.4.1
     # via
     #   -r requirements/docs.txt
     #   sphinx
-importlib-metadata==7.0.2
+importlib-metadata==6.11.0
     # via
+    #   -c requirements/common_constraints.txt
     #   -r requirements/docs.txt
     #   sphinx
 inflection==0.5.1
@@ -431,7 +433,7 @@ pytest==8.1.1
     #   -r requirements/test.txt
     #   pytest-cov
     #   pytest-django
-pytest-cov==4.1.0
+pytest-cov==5.0.0
     # via -r requirements/test.txt
 pytest-django==4.8.0
     # via -r requirements/test.txt
@@ -459,7 +461,6 @@ pytz==2024.1
     #   -r requirements/test.txt
     #   babel
     #   celery
-    #   djangorestframework
     #   drf-yasg
 pywatchman==2.0.0
     # via -r requirements/local.in
@@ -486,7 +487,7 @@ requests==2.31.0
     #   slumber
     #   social-auth-core
     #   sphinx
-requests-oauthlib==1.4.0
+requests-oauthlib==2.0.0
     # via
     #   -r requirements/test.txt
     #   social-auth-core
@@ -508,7 +509,7 @@ ruamel-yaml-cmd==0.6.5
     # via -r requirements/local.in
 ruamel-yaml-convert==0.3.2
     # via ruamel-yaml-cmd
-s3transfer==0.10.0
+s3transfer==0.10.1
     # via
     #   -r requirements/test.txt
     #   boto3
@@ -605,7 +606,7 @@ tomlkit==0.12.4
     # via
     #   -r requirements/test.txt
     #   pylint
-tox==4.14.1
+tox==4.14.2
     # via -r requirements/test.txt
 typing-extensions==4.10.0
     # via
@@ -648,7 +649,7 @@ xmltodict==0.13.0
     #   moto
 yamllint==1.35.1
     # via -r requirements/test.txt
-zipp==3.17.0
+zipp==3.18.1
     # via
     #   -r requirements/docs.txt
     #   importlib-metadata