chore: python requirements update (#4407)

requirements/common_constraints.txt

@@ -23,15 +23,6 @@ elasticsearch<7.14.0
 # django-simple-history>3.0.0 adds indexing and causes a lot of migrations to be affected
 
 
-# opentelemetry requires version 6.x at the moment:
-# https://github.com/open-telemetry/opentelemetry-python/issues/3570
-# Normally this could be added as a constraint in edx-django-utils, where we're
-# adding the opentelemetry dependency. However, when we compile pip-tools.txt,
-# that uses version 7.x, and then there's no undoing that when compiling base.txt.
-# So we need to pin it globally, for now.
-# Ticket for unpinning: https://github.com/openedx/edx-lint/issues/407
-importlib-metadata<7
-
 # Cause: https://github.com/openedx/event-tracking/pull/290
 # event-tracking 2.4.1 upgrades to pymongo 4.4.0 which is not supported on edx-platform.
 # We will pin event-tracking to do not break existing installations

requirements/django.txt

@@ -1 +1 @@
-django==4.2.14
+django==4.2.15

requirements/docs.txt

@@ -8,7 +8,7 @@ accessible-pygments==0.0.4
     # via pydata-sphinx-theme
 alabaster==0.7.13
     # via sphinx
-babel==2.15.0
+babel==2.16.0
     # via
     #   pydata-sphinx-theme
     #   sphinx
@@ -39,10 +39,8 @@ idna==3.7
     # via requests
 imagesize==1.4.1
     # via sphinx
-importlib-metadata==6.11.0
-    # via
-    #   -c requirements/common_constraints.txt
-    #   sphinx
+importlib-metadata==8.2.0
+    # via sphinx
 jinja2==3.1.4
     # via sphinx
 markupsafe==2.1.5
@@ -99,5 +97,5 @@ urllib3==1.26.19
     # via
     #   elasticsearch
     #   requests
-zipp==3.19.2
+zipp==3.20.0
     # via importlib-metadata

requirements/local.txt

@@ -6,9 +6,9 @@
 #
 accessible-pygments==0.0.4
     # via pydata-sphinx-theme
-aiohappyeyeballs==2.3.2
+aiohappyeyeballs==2.3.5
     # via aiohttp
-aiohttp==3.10.0
+aiohttp==3.10.3
     # via openai
 aiosignal==1.3.1
     # via aiohttp
@@ -50,7 +50,7 @@ attrs==21.4.0
     #   semgrep
     #   trio
     #   zeep
-babel==2.15.0
+babel==2.16.0
     # via
     #   pydata-sphinx-theme
     #   sphinx
@@ -75,13 +75,13 @@ boltons==21.0.0
     #   face
     #   glom
     #   semgrep
-boto3==1.34.151
+boto3==1.34.158
     # via django-ses
-botocore==1.34.151
+botocore==1.34.158
     # via
     #   boto3
     #   s3transfer
-bracex==2.4
+bracex==2.5
     # via wcmatch
 cachetools==5.4.0
     # via
@@ -103,7 +103,7 @@ certifi==2024.7.4
     #   requests
     #   selenium
     #   snowflake-connector-python
-cffi==1.16.0
+cffi==1.17.0
     # via
     #   cairocffi
     #   cryptography
@@ -147,7 +147,7 @@ colorama==0.4.6
     #   tox
 contentful==2.2.0
     # via -r requirements/base.in
-coverage[toml]==7.6.0
+coverage[toml]==7.6.1
     # via
     #   -r requirements/test.in
     #   pytest-cov
@@ -222,7 +222,7 @@ distlib==0.3.8
     #   social-auth-app-django
     #   taxonomy-connector
     #   xss-utils
-django-admin-sortable2==2.2.1
+django-admin-sortable2==2.2.2
     # via -r requirements/base.in
 django-appconf==1.0.6
     # via django-compressor
@@ -267,7 +267,7 @@ django-elasticsearch-dsl-drf==0.22.5
     # via -r requirements/base.in
 django-extensions==3.2.3
     # via -r requirements/base.in
-django-filter==24.2
+django-filter==24.3
     # via
     #   -r requirements/base.in
     #   taxonomy-connector
@@ -303,7 +303,7 @@ django-solo==2.3.0
     # via
     #   -r requirements/base.in
     #   taxonomy-connector
-django-sortedm2m==3.1.1
+django-sortedm2m==4.0.0
     # via -r requirements/base.in
 django-stdimage==5.3.0
     # via
@@ -385,7 +385,7 @@ edx-django-utils==5.15.0
     #   taxonomy-connector
 edx-drf-extensions==10.3.0
     # via -r requirements/base.in
-edx-event-bus-kafka==5.7.0
+edx-event-bus-kafka==5.8.1
     # via -r requirements/base.in
 edx-event-bus-redis==0.5.0
     # via -r requirements/base.in
@@ -432,7 +432,7 @@ face==22.0.0
     # via glom
 factory-boy==3.3.0
     # via -r requirements/test.in
-faker==26.0.0
+faker==26.3.0
     # via factory-boy
 fastavro==1.9.5
     # via openedx-events
@@ -453,9 +453,9 @@ glom==22.1.0
     # via semgrep
 google-api-core==2.19.1
     # via google-api-python-client
-google-api-python-client==2.139.0
+google-api-python-client==2.140.0
     # via -r requirements/base.in
-google-auth==2.32.0
+google-auth==2.33.0
     # via
     #   google-api-core
     #   google-api-python-client
@@ -488,9 +488,8 @@ idna==3.7
     #   yarl
 imagesize==1.4.1
     # via sphinx
-importlib-metadata==6.11.0
+importlib-metadata==8.2.0
     # via
-    #   -c requirements/common_constraints.txt
     #   -r requirements/base.in
     #   markdown
     #   sphinx
@@ -518,11 +517,11 @@ jsonfield==3.1.0
     # via -r requirements/base.in
 jsonschema==3.2.0
     # via semgrep
-kombu==5.3.7
+kombu==5.4.0
     # via celery
 libsass==0.23.0
     # via django-libsass
-lxml[html-clean,html_clean]==5.2.2
+lxml[html-clean,html_clean]==5.3.0
     # via
     #   -r requirements/base.in
     #   edx-i18n-tools
@@ -538,15 +537,15 @@ mccabe==0.7.0
     # via pylint
 mock==5.1.0
     # via -r requirements/test.in
-more-itertools==10.3.0
+more-itertools==10.4.0
     # via simple-salesforce
 multidict==6.0.5
     # via
     #   aiohttp
     #   yarl
 mysqlclient==2.2.4
     # via -r requirements/test.in
-newrelic==9.12.0
+newrelic==9.13.0
     # via edx-django-utils
 oauthlib==3.2.2
     # via
@@ -606,7 +605,7 @@ prompt-toolkit==3.0.47
     # via click-repl
 proto-plus==1.24.0
     # via google-api-core
-protobuf==5.27.2
+protobuf==5.27.3
     # via
     #   google-api-core
     #   googleapis-common-protos
@@ -619,7 +618,7 @@ pyasn1==0.6.0
     #   rsa
 pyasn1-modules==0.4.0
     # via google-auth
-pycodestyle==2.12.0
+pycodestyle==2.12.1
     # via -r requirements/test.in
 pycountry==24.6.1
     # via -r requirements/base.in
@@ -632,7 +631,7 @@ pygments==2.18.0
     #   accessible-pygments
     #   pydata-sphinx-theme
     #   sphinx
-pyjwt[crypto]==2.8.0
+pyjwt[crypto]==2.9.0
     # via
     #   drf-jwt
     #   edx-auth-backends
@@ -730,7 +729,7 @@ pytz==2024.1
     #   zeep
 pywatchman==2.0.0
     # via -r requirements/local.in
-pyyaml==6.0.1
+pyyaml==6.0.2
     # via
     #   code-annotations
     #   drf-yasg
@@ -887,7 +886,7 @@ tomlkit==0.13.0
     #   snowflake-connector-python
 tox==4.0.0
     # via -r requirements/test.in
-tqdm==4.66.4
+tqdm==4.66.5
     # via
     #   openai
     #   semgrep
@@ -956,7 +955,7 @@ yarl==1.9.4
     # via aiohttp
 zeep==4.2.1
     # via simple-salesforce
-zipp==3.19.2
+zipp==3.20.0
     # via
     #   importlib-metadata
     #   importlib-resources

requirements/pip.txt

@@ -4,7 +4,7 @@
 #
 #    pip-compile --allow-unsafe --output-file=requirements/pip.txt requirements/pip.in
 #
-wheel==0.43.0
+wheel==0.44.0
     # via -r requirements/pip.in
 
 # The following packages are considered to be unsafe in a requirements file:

requirements/pip_tools.txt

@@ -8,10 +8,8 @@ build==1.2.1
     # via pip-tools
 click==8.1.7
     # via pip-tools
-importlib-metadata==6.11.0
-    # via
-    #   -c requirements/common_constraints.txt
-    #   build
+importlib-metadata==8.2.0
+    # via build
 packaging==24.1
     # via build
 pip-tools==7.4.1
@@ -24,9 +22,9 @@ tomli==2.0.1
     # via
     #   build
     #   pip-tools
-wheel==0.43.0
+wheel==0.44.0
     # via pip-tools
-zipp==3.19.2
+zipp==3.20.0
     # via importlib-metadata
 
 # The following packages are considered to be unsafe in a requirements file: