Merge pull request #36690 from openedx/feanil/add_constraints

feanil/add constraints

Author: feanil

requirements/constraints.txt

@@ -144,9 +144,22 @@ social-auth-app-django<=5.4.1
 elasticsearch==7.9.1
 
 # Date 2025-03-21
-# xmlsec==1.3.15 breaks the test due to incompatible lxml binary version
 # social-auth-core>4.5.4 breaks tests with authorization on LinkedIn API
 # Both of these constraints will be updated in a follow up PR under the following issue:
 # https://github.com/openedx/edx-platform/issues/36425
-xmlsec==1.3.14
 social-auth-core==4.5.4
+
+# Date 2025-05-09
+# lxml and xmlsec need to be constrained because the latest version builds against a newer
+# version of libxml2 than what we're running with.  This leads to a version mismatch error
+# at runtime.  You can re-produce it by running any test.
+# If lxml is pinned in the future and you see this error, it may be that the system libxml2
+# is now shipping the correct version and we can un-pin this.
+# Issue: https://github.com/openedx/edx-platform/issues/36695
+lxml==5.3.2
+xmlsec==1.3.14
+
+# Date 2025-05-09
+# Pin django-user-tasks because the newest version is not compatible with Django 4.2
+# Issue: https://github.com/openedx/edx-platform/issues/36696
+django-user-tasks==3.3.0

requirements/edx-sandbox/base.txt

@@ -6,7 +6,7 @@
 #
 cffi==1.17.1
     # via cryptography
-chem==1.3.0
+chem==2.0.0
     # via -r requirements/edx-sandbox/base.in
 click==8.1.8
     # via nltk
@@ -26,6 +26,7 @@ kiwisolver==1.4.8
     # via matplotlib
 lxml[html-clean,html_clean]==5.3.2
     # via
+    #   -c requirements/edx-sandbox/../constraints.txt
     #   -r requirements/edx-sandbox/base.in
     #   lxml-html-clean
     #   openedx-calc
@@ -35,7 +36,7 @@ markupsafe==3.0.2
     # via
     #   chem
     #   openedx-calc
-matplotlib==3.10.1
+matplotlib==3.10.3
     # via -r requirements/edx-sandbox/base.in
 mpmath==1.3.0
     # via sympy
@@ -73,7 +74,7 @@ random2==1.0.2
     # via -r requirements/edx-sandbox/base.in
 regex==2024.11.6
     # via nltk
-scipy==1.15.2
+scipy==1.15.3
     # via
     #   -r requirements/edx-sandbox/base.in
     #   chem

requirements/edx/base.txt

@@ -68,14 +68,14 @@ bleach[css]==6.2.0
     #   xblock-poll
 boto==2.49.0
     # via -r requirements/edx/kernel.in
-boto3==1.37.38
+boto3==1.38.12
     # via
     #   -r requirements/edx/kernel.in
     #   django-ses
     #   fs-s3fs
     #   ora2
     #   snowflake-connector-python
-botocore==1.37.38
+botocore==1.38.12
     # via
     #   -r requirements/edx/kernel.in
     #   boto3
@@ -113,11 +113,11 @@ cffi==1.17.1
     #   snowflake-connector-python
 chardet==5.2.0
     # via pysrt
-charset-normalizer==3.4.1
+charset-normalizer==3.4.2
     # via
     #   requests
     #   snowflake-connector-python
-chem==1.3.0
+chem==2.0.0
     # via -r requirements/edx/kernel.in
 click==8.1.8
     # via
@@ -164,7 +164,7 @@ defusedxml==0.7.1
     #   ora2
     #   python3-openid
     #   social-auth-core
-django==4.2.20
+django==4.2.21
     # via
     #   -c requirements/edx/../common_constraints.txt
     #   -c requirements/edx/../constraints.txt
@@ -348,7 +348,9 @@ django-storages==1.14.3
     #   -r requirements/edx/kernel.in
     #   edxval
 django-user-tasks==3.3.0
-    # via -r requirements/edx/kernel.in
+    # via
+    #   -c requirements/edx/../constraints.txt
+    #   -r requirements/edx/kernel.in
 django-waffle==4.2.0
     # via
     #   -r requirements/edx/kernel.in
@@ -421,9 +423,9 @@ edx-celeryutils==1.4.0
     #   super-csv
 edx-codejail==3.5.2
     # via -r requirements/edx/kernel.in
-edx-completion==4.7.11
+edx-completion==4.9
     # via -r requirements/edx/kernel.in
-edx-django-release-util==1.4.0
+edx-django-release-util==1.5.0
     # via
     #   -r requirements/edx/kernel.in
     #   edx-submissions
@@ -472,7 +474,7 @@ edx-i18n-tools==1.9.0
     #   -r requirements/edx/bundled.in
     #   ora2
     #   xblocks-contrib
-edx-milestones==0.6.0
+edx-milestones==1.1.0
     # via -r requirements/edx/kernel.in
 edx-name-affirmation==3.0.1
     # via -r requirements/edx/kernel.in
@@ -498,7 +500,7 @@ edx-proctoring==5.2.0
     # via
     #   -r requirements/edx/kernel.in
     #   edx-proctoring-proctortrack
-edx-rbac==1.10.0
+edx-rbac==2.1.0
     # via edx-enterprise
 edx-rest-api-client==6.2.0
     # via
@@ -511,7 +513,7 @@ edx-search==4.1.3
     #   openedx-forum
 edx-sga==0.25.3
     # via -r requirements/edx/bundled.in
-edx-submissions==3.10.0
+edx-submissions==3.10.1
     # via
     #   -r requirements/edx/kernel.in
     #   ora2
@@ -543,7 +545,7 @@ elasticsearch==7.9.1
     #   openedx-forum
 enmerkar==0.7.1
     # via enmerkar-underscore
-enmerkar-underscore==2.3.1
+enmerkar-underscore==2.4.0
     # via -r requirements/edx/kernel.in
 event-tracking==3.0.0
     # via
@@ -574,7 +576,7 @@ fs-s3fs==0.1.8
     #   openedx-django-pyfs
 future==1.0.0
     # via pyjwkest
-geoip2==5.0.1
+geoip2==5.1.0
     # via -r requirements/edx/kernel.in
 glob2==0.7
     # via -r requirements/edx/kernel.in
@@ -633,7 +635,7 @@ httplib2==0.22.0
     # via
     #   google-api-python-client
     #   google-auth-httplib2
-icalendar==6.1.3
+icalendar==6.2.0
     # via -r requirements/edx/kernel.in
 idna==3.10
     # via
@@ -674,7 +676,7 @@ jsonschema==4.23.0
     # via
     #   drf-spectacular
     #   optimizely-sdk
-jsonschema-specifications==2024.10.1
+jsonschema-specifications==2025.4.1
     # via jsonschema
 jwcrypto==1.5.6
     # via
@@ -696,6 +698,7 @@ lti-consumer-xblock==9.14.0
     # via -r requirements/edx/kernel.in
 lxml[html-clean,html_clean]==5.3.2
     # via
+    #   -c requirements/edx/../constraints.txt
     #   -r requirements/edx/kernel.in
     #   edx-i18n-tools
     #   edxval
@@ -790,14 +793,14 @@ openedx-atlas==0.7.0
     #   openedx-forum
 openedx-calc==4.0.2
     # via -r requirements/edx/kernel.in
-openedx-django-pyfs==3.7.0
+openedx-django-pyfs==3.8.0
     # via
     #   lti-consumer-xblock
     #   xblock
     #   xblocks-contrib
 openedx-django-require==2.1.0
     # via -r requirements/edx/kernel.in
-openedx-django-wiki==2.1.0
+openedx-django-wiki==3.1.0
     # via -r requirements/edx/kernel.in
 openedx-events==10.2.0
     # via
@@ -813,7 +816,7 @@ openedx-filters==2.1.0
     #   -r requirements/edx/kernel.in
     #   lti-consumer-xblock
     #   ora2
-openedx-forum==0.2.0
+openedx-forum==0.3.0
     # via -r requirements/edx/kernel.in
 openedx-learning==0.26.0
     # via
@@ -823,7 +826,7 @@ openedx-mongodbproxy==0.2.2
     # via -r requirements/edx/kernel.in
 optimizely-sdk==5.2.0
     # via -r requirements/edx/bundled.in
-ora2==6.16.2
+ora2==6.16.3
     # via -r requirements/edx/bundled.in
 packaging==25.0
     # via
@@ -855,7 +858,7 @@ pillow==11.2.1
     #   edx-enterprise
     #   edx-organizations
     #   edxval
-platformdirs==4.3.7
+platformdirs==4.3.8
     # via snowflake-connector-python
 polib==1.2.0
     # via edx-i18n-tools
@@ -1009,7 +1012,7 @@ random2==1.0.2
     # via -r requirements/edx/kernel.in
 recommender-xblock==3.0.0
     # via -r requirements/edx/bundled.in
-redis==5.2.1
+redis==6.0.0
     # via
     #   -r requirements/edx/kernel.in
     #   walrus
@@ -1061,11 +1064,11 @@ rules==3.5
     #   edx-enterprise
     #   edx-proctoring
     #   openedx-learning
-s3transfer==0.11.5
+s3transfer==0.12.0
     # via boto3
 sailthru-client==2.2.3
     # via edx-ace
-scipy==1.15.2
+scipy==1.15.3
     # via chem
 semantic-version==2.10.0
     # via edx-drf-extensions
@@ -1202,7 +1205,7 @@ walrus==0.9.4
     # via edx-event-bus-redis
 wcwidth==0.2.13
     # via prompt-toolkit
-web-fragments==3.0.0
+web-fragments==3.1.0
     # via
     #   -r requirements/edx/kernel.in
     #   crowdsourcehinter-xblock