chore: Upgrade Python requirements

requirements/common_constraints.txt

@@ -28,3 +28,20 @@ elasticsearch<7.14.0
 # Tracking issue: https://github.com/openedx/edx-drf-extensions/issues/561
 social-auth-app-django<6.0.0
 social-auth-core<5.0.0
+
+# 2026-08-11: pip-tools is only tested against the latest pip released at the time
+# pip-tools was released; also, pip-tools package dependencies are extremely permissive
+# about the pip version required, so the dependency resolver will not prevent an unwanted
+# pip upgrade which would break pip-tools. The end result is that pip MUST be constrained
+# by all pip-tools users in order to avoid potentially weeks-long lapses in pip <->
+# pip-tools compatibility.  We've constrained pip here in common_constraints.txt in the
+# past, but always removed it once the issue was "fixed". Removing this constraint was
+# always a mistake.
+#
+# This is a semi-permanent constraint and should be manually bumped after each pip-tools
+# release.
+#
+# Exceptional conditions for removal:
+# - We stop using pip-tools, OR
+# - We migrate to the proposed `pip-tools[stable]` extra: https://github.com/jazzband/pip-tools/pull/2257
+pip<26.2.1  # Known to work with pip-tools==7.6.1

requirements/edx-sandbox/base.txt

@@ -4,7 +4,7 @@
 #
 #    make upgrade
 #
-cffi==2.1.0
+cffi==2.1.1
     # via cryptography
 chem==2.0.0
     # via -r requirements/edx-sandbox/base.in
@@ -14,7 +14,7 @@ codejail-includes==2.0.0
     # via -r requirements/edx-sandbox/base.in
 contourpy==1.3.3
     # via matplotlib
-cryptography==49.0.0
+cryptography==50.0.0
     # via -r requirements/edx-sandbox/base.in
 cycler==0.12.1
     # via matplotlib
@@ -44,7 +44,7 @@ mpmath==1.3.0
     # via sympy
 networkx==3.6.1
     # via -r requirements/edx-sandbox/base.in
-nltk==3.10.0
+nltk==3.10.3
     # via
     #   -r requirements/edx-sandbox/base.in
     #   chem
@@ -58,7 +58,7 @@ numpy==1.26.4
     #   scipy
 openedx-calc==5.0.0
     # via -r requirements/edx-sandbox/base.in
-packaging==26.2
+packaging==26.3
     # via matplotlib
 pillow==12.3.0
     # via matplotlib

requirements/edx/base.txt

@@ -47,7 +47,6 @@ attrs==26.1.0
 babel==2.18.0
     # via
     #   -r requirements/edx/kernel.in
-    #   enmerkar
     #   enmerkar-underscore
 backoff==1.10.0
     # via analytics-python
@@ -68,14 +67,14 @@ bleach[css]==6.4.0
     #   ora2
     #   xblock-drag-and-drop-v2
     #   xblock-poll
-boto3==1.43.57
+boto3==1.43.73
     # via
     #   -r requirements/edx/kernel.in
     #   django-ses
     #   fs-s3fs
     #   ora2
     #   snowflake-connector-python
-botocore==1.43.57
+botocore==1.43.73
     # via
     #   -r requirements/edx/kernel.in
     #   boto3
@@ -87,7 +86,7 @@ bridgekeeper==0.9
     # via -r requirements/edx/kernel.in
 cachecontrol==0.14.4
     # via firebase-admin
-cachetools==7.1.6
+cachetools==7.1.7
     # via edxval
 camel-converter[pydantic]==5.1.0
     # via meilisearch
@@ -111,15 +110,15 @@ certifi==2026.7.22
     #   httpx
     #   requests
     #   snowflake-connector-python
-cffi==2.1.0
+cffi==2.1.1
     # via
     #   cryptography
     #   pynacl
-chardet==7.4.3
+chardet==7.6.0
     # via
     #   encutils
     #   pysrt
-charset-normalizer==3.4.9
+charset-normalizer==3.5.1
     # via
     #   requests
     #   snowflake-connector-python
@@ -150,7 +149,7 @@ codejail-includes==2.0.0
     # via -r requirements/edx/kernel.in
 crowdsourcehinter-xblock==1.0.1
     # via -r requirements/edx/bundled.in
-cryptography==49.0.0
+cryptography==50.0.0
     # via
     #   -r requirements/edx/kernel.in
     #   django-fernet-fields-v2
@@ -174,7 +173,7 @@ defusedxml==0.7.1
     #   python3-openid
     #   social-auth-core
     #   xblocks-contrib
-django==5.2.16
+django==5.2.17
     # via
     #   -c requirements/common_constraints.txt
     #   -c requirements/constraints.txt
@@ -231,7 +230,6 @@ django==5.2.16
     #   edx-toggles
     #   edx-when
     #   edxval
-    #   enmerkar
     #   enmerkar-underscore
     #   enterprise-integrated-channels
     #   event-tracking
@@ -349,7 +347,7 @@ django-sekizai==4.1.0
     #   openedx-django-wiki
 django-ses==4.7.2
     # via -r requirements/edx/bundled.in
-django-simple-history==3.13.0
+django-simple-history==3.12.0
     # via
     #   -r requirements/edx/kernel.in
     #   edx-enterprise
@@ -382,7 +380,7 @@ django-webpack-loader==3.2.4
     # via
     #   -r requirements/edx/kernel.in
     #   edx-proctoring
-djangorestframework==3.17.1
+djangorestframework==3.18.0
     # via
     #   -r requirements/edx/kernel.in
     #   django-config-models
@@ -518,7 +516,7 @@ edx-opaque-keys[django]==4.0.0
     #   ora2
     #   xblock
     #   xblocks-contrib
-edx-organizations==8.0.0
+edx-organizations==9.0.0
     # via
     #   -r requirements/edx/kernel.in
     #   openedx-authz
@@ -577,11 +575,9 @@ elasticsearch==7.9.1
     #   openedx-forum
 encutils==1.0.0
     # via cssutils
-enmerkar==0.7.1
-    # via enmerkar-underscore
-enmerkar-underscore==2.4.0
+enmerkar-underscore==2.4.1
     # via -r requirements/edx/kernel.in
-enterprise-integrated-channels==0.1.65
+enterprise-integrated-channels==0.1.66
     # via -r requirements/edx/bundled.in
 event-tracking==4.0.2
     # via
@@ -591,7 +587,7 @@ event-tracking==4.0.2
     #   edx-search
 fastavro==1.12.2
     # via openedx-events
-filelock==3.32.0
+filelock==3.32.3
     # via snowflake-connector-python
 firebase-admin==7.5.0
     # via edx-ace
@@ -614,33 +610,33 @@ geoip2==5.3.0
     # via -r requirements/edx/kernel.in
 glob2==0.7
     # via -r requirements/edx/kernel.in
-google-api-core[grpc]==2.33.0
+google-api-core[grpc]==2.34.0
     # via
     #   firebase-admin
     #   google-cloud-core
     #   google-cloud-firestore
     #   google-cloud-storage
-google-auth==2.56.2
+google-auth==2.56.3
     # via
     #   google-api-core
     #   google-cloud-core
     #   google-cloud-firestore
     #   google-cloud-storage
-google-cloud-core==2.6.0
+google-cloud-core==2.6.1
     # via
     #   google-cloud-firestore
     #   google-cloud-storage
-google-cloud-firestore==2.28.0
+google-cloud-firestore==2.28.1
     # via firebase-admin
-google-cloud-storage==3.13.0
+google-cloud-storage==3.13.1
     # via firebase-admin
 google-crc32c==1.8.0
     # via
     #   google-cloud-storage
     #   google-resumable-media
-google-resumable-media==2.10.0
+google-resumable-media==2.10.1
     # via google-cloud-storage
-googleapis-common-protos==1.75.0
+googleapis-common-protos==1.75.1
     # via
     #   google-api-core
     #   grpcio-status
@@ -655,7 +651,7 @@ gunicorn==26.0.0
     # via -r requirements/edx/kernel.in
 h11==0.16.0
     # via httpcore
-h2==4.4.0
+h2==4.4.1
     # via httpx
 help-tokens==4.0.0
     # via -r requirements/edx/kernel.in
@@ -758,13 +754,13 @@ lxml-html-clean==0.4.4
     # via lxml
 mailsnake==1.6.4
     # via -r requirements/edx/bundled.in
-mako==1.3.12
+mako==1.4.1
     # via
     #   -r requirements/edx/kernel.in
     #   acid-xblock
     #   lti-consumer-xblock
     #   xblock
-markdown==3.10.2
+markdown==3.10.3
     # via
     #   -r requirements/edx/kernel.in
     #   openedx-django-wiki
@@ -806,7 +802,7 @@ nh3==0.3.6
     # via
     #   -r requirements/edx/kernel.in
     #   xblocks-contrib
-nltk==3.10.0
+nltk==3.10.3
     # via chem
 nodeenv==1.10.0
     # via -r requirements/edx/kernel.in
@@ -835,7 +831,7 @@ openedx-atlas==0.7.0
     #   enterprise-integrated-channels
     #   openedx-authz
     #   openedx-forum
-openedx-authz==1.21.1
+openedx-authz==1.22.0
     # via -r requirements/edx/kernel.in
 openedx-calc==5.0.0
     # via
@@ -874,7 +870,7 @@ optimizely-sdk==5.6.0
     # via -r requirements/edx/bundled.in
 ora2==7.1.0
     # via -r requirements/edx/bundled.in
-packaging==26.2
+packaging==26.3
     # via
     #   drf-yasg
     #   gunicorn
@@ -905,7 +901,7 @@ pillow==12.3.0
     #   edx-enterprise
     #   edx-organizations
     #   edxval
-platformdirs==4.11.0
+platformdirs==4.11.3
     # via snowflake-connector-python
 polib==1.2.0
     # via edx-i18n-tools
@@ -915,7 +911,7 @@ propcache==0.5.2
     # via
     #   aiohttp
     #   yarl
-proto-plus==1.28.2
+proto-plus==1.28.3
     # via
     #   google-api-core
     #   google-cloud-firestore
@@ -988,7 +984,7 @@ pynacl==1.6.2
     #   paramiko
 pynliner==0.8.0
     # via -r requirements/edx/kernel.in
-pyopenssl==26.3.0
+pyopenssl==26.4.0
     # via snowflake-connector-python
 pyparsing==3.3.2
     # via
@@ -1063,7 +1059,7 @@ random2==1.0.2
     #   xblocks-contrib
 recommender-xblock==5.1.0
     # via -r requirements/edx/bundled.in
-redis==8.0.1
+redis==8.1.0
     # via
     #   -r requirements/edx/kernel.in
     #   walrus
@@ -1157,7 +1153,7 @@ slumber==0.7.1
     #   edx-bulk-grades
     #   edx-enterprise
     #   enterprise-integrated-channels
-snowflake-connector-python==4.7.1
+snowflake-connector-python==4.7.2
     # via enterprise-integrated-channels
 social-auth-app-django==5.4.1
     # via
@@ -1180,9 +1176,9 @@ sortedcontainers==2.4.0
     # via
     #   -r requirements/edx/kernel.in
     #   snowflake-connector-python
-soupsieve==2.9.1
+soupsieve==2.9.2
     # via beautifulsoup4
-sqlparse==0.5.5
+sqlparse==0.6.0
     # via django
 staff-graded-xblock==4.0.1
     # via -r requirements/edx/bundled.in
@@ -1236,7 +1232,7 @@ typing-extensions==4.16.0
     #   testfixtures
     #   typesense
     #   typing-inspection
-typing-inspection==0.4.2
+typing-inspection==0.4.4
     # via pydantic
 tzdata==2026.3
     # via
@@ -1269,23 +1265,23 @@ voluptuous==0.16.0
     # via ora2
 walrus==0.9.8
     # via edx-event-bus-redis
-wcmatch==11.0
+wcmatch==11.0.1
     # via pycasbin
 wcwidth==0.8.2
     # via prompt-toolkit
-webencodings==0.5.1
+webencodings==0.6.1
     # via
     #   bleach
     #   html5lib
     #   tinycss2
-webob==1.8.10
+webob==1.8.11
     # via
     #   -r requirements/edx/kernel.in
     #   xblock
     #   xblocks-contrib
-wheel==0.47.0
+wheel==0.48.0
     # via django-pipeline
-wrapt==2.2.2
+wrapt==2.3.0
     # via
     #   -r requirements/edx/kernel.in
     #   xblocks-contrib

requirements/edx/coverage.txt

@@ -4,17 +4,17 @@
 #
 #    make upgrade
 #
-chardet==7.4.3
+chardet==7.6.0
     # via diff-cover
-coverage==7.15.2
+coverage==7.15.4
     # via -r requirements/edx/coverage.in
-diff-cover==10.4.1
+diff-cover==10.5.1
     # via -r requirements/edx/coverage.in
 jinja2==3.1.6
     # via diff-cover
 markupsafe==3.0.3
     # via jinja2
 pluggy==1.6.0
     # via diff-cover
-pygments==2.20.0
+pygments==2.21.0
     # via diff-cover