Python Requirements Update

[edx-requirements-bot]

Python requirements update.Please review the changelogs for the upgraded packages.

Deleted obsolete pull_requests:
#266

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 87.64%. Comparing base (54d4349) to head (31fc71f).

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #273   +/-   ##
=======================================
  Coverage   87.64%   87.64%           
=======================================
  Files         157      157           
  Lines       13450    13450           
  Branches     1303     1303           
=======================================
  Hits        11788    11788           
  Misses       1359     1359           
  Partials      303      303           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[brobro10000]

🤖 Automated Requirements Analysis — 2026-08-24

CI Status: Success (Codecov report generated, mergeable)
Recommendation: ⚠️ NEEDS CLOSER LOOK

Dependency Changes

Package / Action	From	To	Bump	Env	Risk	Release Notes
djangorestframework	3.17.2	3.18.0	MINOR	prod	High	Release Notes
edx-drf-extensions	10.6.0	10.7.0	MINOR	prod	High	Release Notes
edx-lint	6.1.0	6.2.0	MINOR	test	Moderate	Release Notes
sqlparse	0.5.5	0.6.0	MINOR	prod	Moderate	N/A
stripe	15.4.0	15.5.1	MINOR	prod	Moderate	N/A
pip	<26.2.1	Introduced constraint	N/A	tooling	Low	N/A
avro	1.12.1	1.12.2	PATCH	prod	Low	N/A
boto3	1.43.66	1.43.76	PATCH	prod	Low	N/A
botocore	1.43.66	1.43.76	PATCH	prod	Low	N/A
charset-normalizer	3.4.9	3.5.1	PATCH	prod	Low	N/A
filelock	3.32.2	3.32.3	PATCH	prod	Low	N/A
idna	3.18	3.19	PATCH	prod	Low	N/A
platformdirs	4.11.0	4.11.3	PATCH	prod	Low	N/A
pygments	2.20.0	2.21.0	PATCH	prod	Low	N/A
snowflake-connector-python	4.7.1	4.7.2	PATCH	prod	Low	N/A
stevedore	5.9.0	5.9.1	PATCH	prod	Low	N/A
gevent	26.7.0	26.8.0	MINOR	prod	Moderate	N/A
greenlet	3.5.4	3.5.5	PATCH	prod	Low	N/A
gunicorn	26.0.0	26.1.0	MINOR	prod	Moderate	N/A
zope-interface	8.5	8.6	MINOR	prod	Low	N/A

Findings

• ⚠️ Critical Runtime Upgrades: Upgrades djangorestframework to 3.18.0 and edx-drf-extensions to 10.7.0. Historically, DRF and DRF extension upgrades have introduced breaking changes in serializer validation (e.g., model-level constraints in DRF 3.15+) and authentication handlers.
• ⚠️ Linting Stack Changes: Upgrades edx-lint to 6.2.0 and pylint to 4.0.7. This PR includes a regenerated pylintrc file adding the [PII] section and enabling pii-invalid-no-pii-annotation to resolve pylint errors.
• ⚠️ Pip Constraint: Introduces a semi-permanent constraint pip<26.2.1 in common_constraints.txt to prevent pip-tools compatibility issues.

Recommended Validation

• ⚠️ DEPLOY TO STAGING FIRST
• Validate core API endpoints, serializer validation, and authentication flows due to the djangorestframework and edx-drf-extensions upgrades.
• Verify that the pylint checks pass successfully in CI.