From d36117c00ec732f26df820e28cd3fa915e57418d Mon Sep 17 00:00:00 2001 From: Kyle D McCormick Date: Thu, 22 Oct 2026 14:58:17 -0400 Subject: [PATCH] build: Upgrade certifi, pip, and pip-tools [verawood] Upgrades certifi from 2026.4.22 to 2026.10.19, pip from 26.1 to 26.2.2, and pip-tools from 7.5.3 to 7.6.2. pip-tools is upgraded because older versions don't work with pip 26.2+. certifi older than 2026.10.19 and pip older than 26.2.2 trust the compromised emSign intermediate CAs. Generated with `make upgrade` limited to --upgrade-package for those packages. Part of: https://github.com/openedx/public-engineering/issues/574 Co-authored-by: Claude Opus 5.5 --- requirements/base.txt | 2 +- requirements/dev.txt | 4 ++-- requirements/doc.txt | 2 +- requirements/pip-tools.txt | 2 +- requirements/pip.txt | 6 ++++-- requirements/quality.txt | 2 +- requirements/test.txt | 2 +- 7 files changed, 11 insertions(+), 9 deletions(-) diff --git a/requirements/base.txt b/requirements/base.txt index 4445ea76..91842e1d 100644 --- a/requirements/base.txt +++ b/requirements/base.txt @@ -14,7 +14,7 @@ billiard==4.2.4 # via celery celery==5.6.3 # via -r requirements/base.in -certifi==2026.4.22 +certifi==2026.10.19 # via requests cffi==2.0.0 # via pynacl diff --git a/requirements/dev.txt b/requirements/dev.txt index e2123e17..d41dfff4 100644 --- a/requirements/dev.txt +++ b/requirements/dev.txt @@ -39,7 +39,7 @@ cachetools==7.0.6 # tox celery==5.6.3 # via -r requirements/quality.txt -certifi==2026.4.22 +certifi==2026.10.19 # via # -r requirements/quality.txt # requests @@ -242,7 +242,7 @@ pathspec==1.1.0 # via # -r requirements/quality.txt # black -pip-tools==7.5.3 +pip-tools==7.6.2 # via -r requirements/pip-tools.txt platformdirs==4.9.6 # via diff --git a/requirements/doc.txt b/requirements/doc.txt index 9cda04ea..b8c507fe 100644 --- a/requirements/doc.txt +++ b/requirements/doc.txt @@ -34,7 +34,7 @@ build==1.4.4 # via -r requirements/doc.in celery==5.6.3 # via -r requirements/test.txt -certifi==2026.4.22 +certifi==2026.10.19 # via # -r requirements/test.txt # requests diff --git a/requirements/pip-tools.txt b/requirements/pip-tools.txt index 894e0ebe..336e63ef 100644 --- a/requirements/pip-tools.txt +++ b/requirements/pip-tools.txt @@ -12,7 +12,7 @@ packaging==26.2 # via # build # wheel -pip-tools==7.5.3 +pip-tools==7.6.2 # via -r requirements/pip-tools.in pyproject-hooks==1.2.0 # via diff --git a/requirements/pip.txt b/requirements/pip.txt index 2f205539..b2241afa 100644 --- a/requirements/pip.txt +++ b/requirements/pip.txt @@ -10,7 +10,9 @@ wheel==0.47.0 # via -r requirements/pip.in # The following packages are considered to be unsafe in a requirements file: -pip==26.1 - # via -r requirements/pip.in +pip==26.2.2 + # via + # -c https://raw.githubusercontent.com/edx/edx-lint/master/edx_lint/files/common_constraints.txt + # -r requirements/pip.in setuptools==82.0.1 # via -r requirements/pip.in diff --git a/requirements/quality.txt b/requirements/quality.txt index 49321b05..45578642 100644 --- a/requirements/quality.txt +++ b/requirements/quality.txt @@ -28,7 +28,7 @@ black==26.3.1 # via -r requirements/quality.in celery==5.6.3 # via -r requirements/test.txt -certifi==2026.4.22 +certifi==2026.10.19 # via # -r requirements/test.txt # requests diff --git a/requirements/test.txt b/requirements/test.txt index f2174468..c61470f6 100644 --- a/requirements/test.txt +++ b/requirements/test.txt @@ -22,7 +22,7 @@ billiard==4.2.4 # celery celery==5.6.3 # via -r requirements/base.txt -certifi==2026.4.22 +certifi==2026.10.19 # via # -r requirements/base.txt # requests