Skip to content

chore: Upgrade Python requirements - #705

Merged
brobro10000 merged 3 commits into
masterfrom
repo-tools/upgrade-python-requirements-e15e20d
Aug 21, 2026
Merged

chore: Upgrade Python requirements#705
brobro10000 merged 3 commits into
masterfrom
repo-tools/upgrade-python-requirements-e15e20d

Conversation

@edx-requirements-bot

Copy link
Copy Markdown
Contributor

Python requirements update. Please review the changelogs for the upgraded packages.

@edx-requirements-bot

Copy link
Copy Markdown
Contributor Author

List of packages in the PR without any issue.

  • awscli changes from 1.45.60 to 1.46.0
  • boto3 changes from 1.43.60 to 1.43.66
  • botocore changes from 1.43.60 to 1.43.66
  • cachetools changes from 7.1.6 to 7.1.7
  • cffi changes from 2.1.0 to 2.1.1
  • chardet changes from 7.4.3 to 7.5.1
  • coverage changes from 7.15.2 to 7.15.4
  • coverage[toml] changes from 7.15.2 to 7.15.4
  • diff-cover changes from 10.4.1 to 10.4.2
  • djangorestframework changes from 3.17.1 to 3.17.2
  • packaging changes from 26.2 to 26.3
  • pip changes from 26.2 to 26.2.1
  • pyopenssl changes from 26.3.0 to 26.4.0
  • pytest-django changes from 4.12.0 to 4.13.0
  • python-discovery changes from 1.5.0 to 1.5.1

@edx-requirements-bot

Copy link
Copy Markdown
Contributor Author

These Packages need manual review..

  • [MAJOR] cryptography changes from 49.0.0 to 50.0.0

@brobro10000

Copy link
Copy Markdown
Member

🤖 Automated Requirements Analysis — 2026-08-20

CI Status: Pending/Incomplete
Recommendation: ⚠️ NEEDS CLOSER LOOK

Dependency Changes

Package From To Bump Env Risk Release Notes
cryptography 49.0.0 50.0.0 MAJOR prod High release notes
awscli 1.45.60 1.46.0 MINOR prod Moderate release notes
pyopenssl 26.3.0 26.4.0 MINOR prod Moderate release notes
boto3 1.43.60 1.43.66 PATCH prod Low release notes
botocore 1.43.60 1.43.66 PATCH prod Low release notes
cffi 2.1.0 2.1.1 PATCH prod Low release notes
djangorestframework 3.17.1 3.17.2 PATCH prod Low release notes
packaging 26.2 26.3 PATCH prod Low release notes

Findings

  • STALE: Open for 13 days — investigate why it has not yet merged. This may indicate failing CI, an unresolved conflict, a dependency issue, or missed assignment.
  • 🔴 MAJOR Upgrade: cryptography is upgraded from 49.0.0 to 50.0.0. This is a critical runtime dependency and a major version bump, which carries high risk of breaking changes or compatibility issues.
  • ⚠️ MINOR Upgrades: awscli and pyopenssl are upgraded to new minor versions.

Recommended Validation

  • Deploy to staging and validate cryptography-related behaviors (e.g., token generation, encryption/decryption, secure communications).
  • Review breaking changes introduced in cryptography v50.0.0.

Additional Context

  • ⏰ Open for 13 days — investigate why it has not yet merged. This may indicate failing CI, an unresolved conflict, a dependency issue, or missed assignment.

brobro10000 and others added 2 commits August 20, 2026 11:12
pytest-django 4.13.0 dropped Django 4.2 support and now unconditionally
reads TestCase._pre_setup_ran_eagerly, an attribute Django only sets
starting in 5.x. This broke every django_db test under the
data-django42 tox/CI env with AttributeError at test setup.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
@brobro10000
brobro10000 merged commit aa6f49e into master Aug 21, 2026
6 checks passed
@brobro10000
brobro10000 deleted the repo-tools/upgrade-python-requirements-e15e20d branch August 21, 2026 14:46
irfanuddinahmad pushed a commit that referenced this pull request Aug 24, 2026
Ported over from master's routine dependency-bump PR #705: 4.13.0
unconditionally reads TestCase._pre_setup_ran_eagerly, an attribute
Django only sets starting in 5.x, breaking every django_db test under
this repo's django42 tox env. Same rationale, added to
[tool.edx_lint].uv_constraints so it persists across future relocks.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants