chore: python requirements update

requirements/common_constraints.txt

@@ -21,3 +21,12 @@ elasticsearch<7.14.0
 
 # django-simple-history>3.0.0 adds indexing and causes a lot of migrations to be affected
 
+
+# opentelemetry requires version 6.x at the moment:
+# https://github.com/open-telemetry/opentelemetry-python/issues/3570
+# Normally this could be added as a constraint in edx-django-utils, where we're
+# adding the opentelemetry dependency. However, when we compile pip-tools.txt,
+# that uses version 7.x, and then there's no undoing that when compiling base.txt.
+# So we need to pin it globally, for now.
+# Ticket for unpinning: https://github.com/openedx/edx-lint/issues/407
+importlib-metadata<7

requirements/docs.txt

@@ -39,8 +39,10 @@ idna==3.6
     # via requests
 imagesize==1.4.1
     # via sphinx
-importlib-metadata==7.0.2
-    # via sphinx
+importlib-metadata==6.11.0
+    # via
+    #   -c requirements/common_constraints.txt
+    #   sphinx
 jinja2==3.1.3
     # via sphinx
 markupsafe==2.1.5
@@ -97,5 +99,5 @@ urllib3==1.26.18
     # via
     #   elasticsearch
     #   requests
-zipp==3.17.0
+zipp==3.18.1
     # via importlib-metadata

requirements/local.txt

@@ -23,7 +23,7 @@ algoliasearch-django==1.7.3
     #   -r requirements/base.in
 amqp==5.2.0
     # via kombu
-asgiref==3.7.2
+asgiref==3.8.1
     # via
     #   django
     #   django-cors-headers
@@ -60,6 +60,7 @@ backports-zoneinfo[tzdata]==0.2.1 ; python_version < "3.9"
     #   -c requirements/constraints.txt
     #   celery
     #   django
+    #   djangorestframework
     #   kombu
     #   pendulum
 bcrypt==4.1.2
@@ -76,9 +77,9 @@ boltons==21.0.0
     #   face
     #   glom
     #   semgrep
-boto3==1.34.59
+boto3==1.34.69
     # via django-ses
-botocore==1.34.59
+botocore==1.34.69
     # via
     #   boto3
     #   s3transfer
@@ -128,7 +129,7 @@ click==8.1.7
     #   edx-django-utils
     #   edx-lint
     #   semgrep
-click-didyoumean==0.3.0
+click-didyoumean==0.3.1
     # via celery
 click-log==0.4.0
     # via edx-lint
@@ -138,7 +139,7 @@ click-plugins==1.1.1
     # via celery
 click-repl==0.3.0
     # via celery
-code-annotations==1.6.0
+code-annotations==1.7.0
     # via
     #   edx-lint
     #   edx-toggles
@@ -148,7 +149,7 @@ colorama==0.4.6
     #   tox
 contentful==2.1.1
     # via -r requirements/base.in
-coverage[toml]==7.4.3
+coverage[toml]==7.4.4
     # via
     #   -r requirements/test.in
     #   pytest-cov
@@ -328,7 +329,7 @@ django-waffle==4.1.0
     #   edx-toggles
 django-webpack-loader==3.0.1
     # via -r requirements/base.in
-djangorestframework==3.14.0
+djangorestframework==3.15.1
     # via
     #   -r requirements/base.in
     #   django-config-models
@@ -394,7 +395,7 @@ edx-drf-extensions==10.2.0
     # via -r requirements/base.in
 edx-event-bus-kafka==5.6.0
     # via -r requirements/base.in
-edx-event-bus-redis==0.3.3
+edx-event-bus-redis==0.4.0
     # via -r requirements/base.in
 edx-i18n-tools==1.3.0
     # via -r requirements/local.in
@@ -439,7 +440,7 @@ face==22.0.0
     # via glom
 factory-boy==3.3.0
     # via -r requirements/test.in
-faker==24.1.0
+faker==24.3.0
     # via factory-boy
 fastavro==1.9.4
     # via openedx-events
@@ -458,11 +459,11 @@ getsmarter-api-clients==0.6.1
     # via -r requirements/base.in
 glom==22.1.0
     # via semgrep
-google-api-core==2.17.1
+google-api-core==2.18.0
     # via google-api-python-client
-google-api-python-client==2.121.0
+google-api-python-client==2.123.0
     # via -r requirements/base.in
-google-auth==2.28.2
+google-auth==2.29.0
     # via
     #   google-api-core
     #   google-api-python-client
@@ -475,7 +476,7 @@ google-auth-httplib2==0.2.0
     #   google-api-python-client
 google-auth-oauthlib==1.2.0
     # via gspread
-googleapis-common-protos==1.62.0
+googleapis-common-protos==1.63.0
     # via google-api-core
 gspread==6.0.2
     # via -r requirements/base.in
@@ -495,8 +496,9 @@ idna==3.6
     #   yarl
 imagesize==1.4.1
     # via sphinx
-importlib-metadata==7.0.2
+importlib-metadata==6.11.0
     # via
+    #   -c requirements/common_constraints.txt
     #   -r requirements/base.in
     #   markdown
     #   sphinx
@@ -537,7 +539,7 @@ lxml==5.1.0
     #   -r requirements/base.in
     #   edx-i18n-tools
     #   zeep
-markdown==3.5.2
+markdown==3.6
     # via -r requirements/base.in
 markupsafe==2.1.5
     # via jinja2
@@ -553,7 +555,7 @@ multidict==6.0.5
     #   yarl
 mysqlclient==2.2.4
     # via -r requirements/test.in
-newrelic==9.7.0
+newrelic==9.7.1
     # via edx-django-utils
 oauthlib==3.2.2
     # via
@@ -616,10 +618,13 @@ polib==1.2.0
     # via edx-i18n-tools
 prompt-toolkit==3.0.43
     # via click-repl
+proto-plus==1.23.0
+    # via google-api-core
 protobuf==4.25.3
     # via
     #   google-api-core
     #   googleapis-common-protos
+    #   proto-plus
 psutil==5.9.8
     # via edx-django-utils
 pyasn1==0.5.1
@@ -694,7 +699,7 @@ pytest==8.1.1
     #   pytest-responses
     #   pytest-split
     #   pytest-xdist
-pytest-cov==4.1.0
+pytest-cov==5.0.0
     # via -r requirements/test.in
 pytest-django==4.8.0
     # via -r requirements/test.in
@@ -729,7 +734,7 @@ python-slugify==8.0.4
     # via
     #   -r requirements/base.in
     #   code-annotations
-python-stdnum==1.19
+python-stdnum==1.20
     # via django-localflavor
 python3-openid==3.2.0
     # via social-auth-core
@@ -738,7 +743,6 @@ pytz==2024.1
     #   -r requirements/base.in
     #   babel
     #   django-ses
-    #   djangorestframework
     #   drf-yasg
     #   getsmarter-api-clients
     #   snowflake-connector-python
@@ -785,7 +789,7 @@ requests==2.31.0
     #   zeep
 requests-file==2.0.0
     # via zeep
-requests-oauthlib==1.4.0
+requests-oauthlib==2.0.0
     # via
     #   getsmarter-api-clients
     #   google-auth-oauthlib
@@ -806,7 +810,7 @@ ruamel-yaml==0.17.40
     # via semgrep
 ruamel-yaml-clib==0.2.8
     # via ruamel-yaml
-s3transfer==0.10.0
+s3transfer==0.10.1
     # via boto3
 selenium==4.12.0
     # via
@@ -896,7 +900,7 @@ text-unidecode==1.3
     # via python-slugify
 texttable==1.7.0
     # via docker-compose
-time-machine==2.14.0
+time-machine==2.14.1
     # via pendulum
 tinycss2==1.2.1
     # via
@@ -987,7 +991,7 @@ yarl==1.9.4
     # via aiohttp
 zeep==4.2.1
     # via simple-salesforce
-zipp==3.17.0
+zipp==3.18.1
     # via
     #   importlib-metadata
     #   importlib-resources

requirements/pip.txt

@@ -4,11 +4,11 @@
 #
 #    pip-compile --allow-unsafe --output-file=requirements/pip.txt requirements/pip.in
 #
-wheel==0.42.0
+wheel==0.43.0
     # via -r requirements/pip.in
 
 # The following packages are considered to be unsafe in a requirements file:
 pip==24.0
     # via -r requirements/pip.in
-setuptools==69.1.1
+setuptools==69.2.0
     # via -r requirements/pip.in

requirements/pip_tools.txt

@@ -8,8 +8,10 @@ build==1.1.1
     # via pip-tools
 click==8.1.7
     # via pip-tools
-importlib-metadata==7.0.2
-    # via build
+importlib-metadata==6.11.0
+    # via
+    #   -c requirements/common_constraints.txt
+    #   build
 packaging==24.0
     # via build
 pip-tools==7.4.1
@@ -23,9 +25,9 @@ tomli==2.0.1
     #   build
     #   pip-tools
     #   pyproject-hooks
-wheel==0.42.0
+wheel==0.43.0
     # via pip-tools
-zipp==3.17.0
+zipp==3.18.1
     # via importlib-metadata
 
 # The following packages are considered to be unsafe in a requirements file: