From c832921c7ad3e9b49f077526731c2802133b5e97 Mon Sep 17 00:00:00 2001 From: Kyle D McCormick Date: Thu, 22 Oct 2026 14:57:54 -0400 Subject: [PATCH] build: Upgrade certifi, pip, and pip-tools [ulmo] Upgrades certifi from 2025.10.5 to 2026.10.19, pip from 25.2 to 26.2.2, and pip-tools from 7.5.1 to 7.6.2. pip-tools is upgraded because older versions don't work with pip 26.2+. certifi older than 2026.10.19 and pip older than 26.2.2 trust the compromised emSign intermediate CAs. Generated with `make upgrade` limited to --upgrade-package for those packages. Part of: https://github.com/openedx/public-engineering/issues/574 Co-authored-by: Claude Opus 5.5 --- requirements/base.txt | 2 +- requirements/dev.txt | 4 ++-- requirements/doc.txt | 2 +- requirements/pip-tools.txt | 2 +- requirements/pip.txt | 6 ++++-- requirements/quality.txt | 2 +- requirements/test.txt | 2 +- 7 files changed, 11 insertions(+), 9 deletions(-) diff --git a/requirements/base.txt b/requirements/base.txt index 60afc2d7..03661172 100644 --- a/requirements/base.txt +++ b/requirements/base.txt @@ -14,7 +14,7 @@ billiard==4.2.2 # via celery celery==5.5.3 # via -r requirements/base.in -certifi==2025.10.5 +certifi==2026.10.19 # via requests cffi==2.0.0 # via pynacl diff --git a/requirements/dev.txt b/requirements/dev.txt index 01e77252..66dbe5e2 100644 --- a/requirements/dev.txt +++ b/requirements/dev.txt @@ -39,7 +39,7 @@ cachetools==6.2.1 # tox celery==5.5.3 # via -r requirements/quality.txt -certifi==2025.10.5 +certifi==2026.10.19 # via # -r requirements/quality.txt # requests @@ -243,7 +243,7 @@ pathspec==0.12.1 # via # -r requirements/quality.txt # black -pip-tools==7.5.1 +pip-tools==7.6.2 # via -r requirements/pip-tools.txt platformdirs==4.5.0 # via diff --git a/requirements/doc.txt b/requirements/doc.txt index d8a77d6c..c76761f0 100644 --- a/requirements/doc.txt +++ b/requirements/doc.txt @@ -36,7 +36,7 @@ build==1.3.0 # via -r requirements/doc.in celery==5.5.3 # via -r requirements/test.txt -certifi==2025.10.5 +certifi==2026.10.19 # via # -r requirements/test.txt # requests diff --git a/requirements/pip-tools.txt b/requirements/pip-tools.txt index e97cb1b3..173c2952 100644 --- a/requirements/pip-tools.txt +++ b/requirements/pip-tools.txt @@ -10,7 +10,7 @@ click==8.3.0 # via pip-tools packaging==25.0 # via build -pip-tools==7.5.1 +pip-tools==7.6.2 # via -r requirements/pip-tools.in pyproject-hooks==1.2.0 # via diff --git a/requirements/pip.txt b/requirements/pip.txt index dec15874..f50eaa48 100644 --- a/requirements/pip.txt +++ b/requirements/pip.txt @@ -8,7 +8,9 @@ wheel==0.45.1 # via -r requirements/pip.in # The following packages are considered to be unsafe in a requirements file: -pip==25.2 - # via -r requirements/pip.in +pip==26.2.2 + # via + # -c https://raw.githubusercontent.com/edx/edx-lint/master/edx_lint/files/common_constraints.txt + # -r requirements/pip.in setuptools==80.9.0 # via -r requirements/pip.in diff --git a/requirements/quality.txt b/requirements/quality.txt index 74a164ba..fb547c8a 100644 --- a/requirements/quality.txt +++ b/requirements/quality.txt @@ -28,7 +28,7 @@ black==25.9.0 # via -r requirements/quality.in celery==5.5.3 # via -r requirements/test.txt -certifi==2025.10.5 +certifi==2026.10.19 # via # -r requirements/test.txt # requests diff --git a/requirements/test.txt b/requirements/test.txt index 16f15e5e..17d18f1a 100644 --- a/requirements/test.txt +++ b/requirements/test.txt @@ -22,7 +22,7 @@ billiard==4.2.2 # celery celery==5.5.3 # via -r requirements/base.txt -certifi==2025.10.5 +certifi==2026.10.19 # via # -r requirements/base.txt # requests