Python Requirements Update

requirements.txt

@@ -4,28 +4,29 @@
 #
 #    make upgrade
 #
-asgiref==3.7.2
+asgiref==3.8.1
     # via django
 backoff==2.2.1
     # via -r requirements/base.in
 backports-zoneinfo==0.2.1
     # via django
-boto3==1.28.68
+boto3==1.34.78
     # via -r requirements/base.in
-botocore==1.31.68
+botocore==1.34.78
     # via
     #   boto3
     #   s3transfer
-certifi==2023.7.22
+certifi==2024.2.2
     # via requests
 cffi==1.16.0
     # via pynacl
-charset-normalizer==3.3.1
+charset-normalizer==3.3.2
     # via requests
 click==8.1.7
     # via edx-django-utils
-django==4.2.6
+django==4.2.11
     # via
+    #   -c requirements/common_constraints.txt
     #   -r requirements/base.in
     #   django-crum
     #   django-storages
@@ -36,64 +37,63 @@ django-crum==0.7.9
     # via edx-django-utils
 django-storages==1.14.2
     # via -r requirements/base.in
-django-waffle==4.0.0
+django-waffle==4.1.0
     # via edx-django-utils
-edx-django-release-util==1.3.0
+edx-django-release-util==1.4.0
     # via -r requirements/base.in
-edx-django-utils==5.7.0
+edx-django-utils==5.12.0
     # via -r requirements/base.in
 gunicorn==21.2.0
     # via -r requirements/base.in
-idna==3.4
+idna==3.6
     # via requests
-isort==5.12.0
+isort==5.13.2
     # via -r requirements/base.in
 jmespath==1.0.1
     # via
     #   boto3
     #   botocore
-mysqlclient==2.2.0
+mysqlclient==2.2.4
     # via -r requirements/base.in
-newrelic==9.1.1
+newrelic==9.8.0
     # via
     #   -r requirements/base.in
     #   edx-django-utils
-packaging==23.2
+packaging==24.0
     # via gunicorn
 path-py==11.0.1
     # via -r requirements/base.in
-pbr==5.11.1
+pbr==6.0.0
     # via stevedore
-psutil==5.9.6
+psutil==5.9.8
     # via edx-django-utils
-pycparser==2.21
+pycparser==2.22
     # via cffi
 pynacl==1.5.0
     # via edx-django-utils
-python-dateutil==2.8.2
+python-dateutil==2.9.0.post0
     # via botocore
-python-memcached==1.59
+python-memcached==1.62
     # via -r requirements/base.in
 python-termstyle==0.1.10
     # via -r requirements/base.in
-pytz==2023.3.post1
+pytz==2024.1
     # via -r requirements/base.in
 pyyaml==6.0.1
     # via edx-django-release-util
 requests==2.31.0
     # via -r requirements/base.in
-s3transfer==0.7.0
+s3transfer==0.10.1
     # via boto3
 six==1.16.0
     # via
     #   edx-django-release-util
     #   python-dateutil
-    #   python-memcached
 sqlparse==0.4.4
     # via django
-stevedore==5.1.0
+stevedore==5.2.0
     # via edx-django-utils
-typing-extensions==4.8.0
+typing-extensions==4.10.0
     # via asgiref
 urllib3==1.26.18
     # via

requirements/ci.txt

@@ -4,27 +4,35 @@
 #
 #    make upgrade
 #
-distlib==0.3.7
+cachetools==5.3.3
+    # via tox
+chardet==5.2.0
+    # via tox
+colorama==0.4.6
+    # via tox
+distlib==0.3.8
     # via virtualenv
-filelock==3.12.4
+filelock==3.13.3
     # via
     #   tox
     #   virtualenv
-packaging==23.2
-    # via tox
-platformdirs==3.11.0
-    # via virtualenv
-pluggy==1.3.0
-    # via tox
-py==1.11.0
+packaging==24.0
+    # via
+    #   pyproject-api
+    #   tox
+platformdirs==4.2.0
+    # via
+    #   tox
+    #   virtualenv
+pluggy==1.4.0
     # via tox
-six==1.16.0
+pyproject-api==1.6.1
     # via tox
 tomli==2.0.1
-    # via tox
-tox==3.28.0
     # via
-    #   -c requirements/common_constraints.txt
-    #   -r requirements/ci.in
-virtualenv==20.24.5
+    #   pyproject-api
+    #   tox
+tox==4.14.2
+    # via -r requirements/ci.in
+virtualenv==20.25.1
     # via tox

requirements/common_constraints.txt

@@ -18,7 +18,7 @@
 
 
 # using LTS django version
-
+Django<5.0
 
 # elasticsearch>=7.14.0 includes breaking changes in it which caused issues in discovery upgrade process.
 # elastic search changelog: https://www.elastic.co/guide/en/enterprise-search/master/release-notes-7.14.0.html
@@ -27,6 +27,11 @@ elasticsearch<7.14.0
 # django-simple-history>3.0.0 adds indexing and causes a lot of migrations to be affected
 django-simple-history==3.0.0
 
-# tox>4.0.0 isn't yet compatible with many tox plugins, causing CI failures in almost all repos.
-# Details can be found in this discussion: https://github.com/tox-dev/tox/discussions/1810
-tox<4.0.0
+# opentelemetry requires version 6.x at the moment:
+# https://github.com/open-telemetry/opentelemetry-python/issues/3570
+# Normally this could be added as a constraint in edx-django-utils, where we're
+# adding the opentelemetry dependency. However, when we compile pip-tools.txt,
+# that uses version 7.x, and then there's no undoing that when compiling base.txt.
+# So we need to pin it globally, for now.
+# Ticket for unpinning: https://github.com/openedx/edx-lint/issues/407
+importlib-metadata<7