Update tutor requirement from <17.0.0,>=16.0.0 to >=16.0.0,<18.0.0

[dependabot]

Updates the requirements on tutor to permit the latest version.

Release notes

Sourced from tutor's releases.

v17.0.0

Install this version from pip with:

pip install "tutor[full]==17.0.0"

Or download the compiled binaries:

sudo curl -L "https://github.com/overhangio/tutor/releases/download/v17.0.0/tutor-$(uname -s)_$(uname -m)" -o /usr/local/bin/tutor
sudo chmod 0755 /usr/local/bin/tutor

See the installation docs for more installation options and instructions.

Changes

• 💥[Feature] Upgrade to Quince. (by @​regisb)
• 💥[Feature] Replace ".local.overhang.io" hostnames by ".local.edly.io". (by @​regisb)
• 💥[Feature] Enable the Indigo theme by default, if no other theme is set. (by @​regisb)
• 💥[Deprecation] Tutor no longer supports the legacy Docker builder, which was previously available by setting DOCKER_BUILDKIT=0 in the host environment. Going forward, Tutor will always use BuildKit (a.k.a. docker buildx in Docker v19-v22, or just docker build in Docker v23). This transition will improve build performance and should be seamless for Tutor users who are running a supported Docker version (by @​kdmccormick).
• 💥[Deprecation] The template variable is_buildkit_enabled, which now always returns True, is deprecated. Plugin authors should assume BuildKit is enabled and remove the variable from their templates (by @​kdmccormick).
• 💥[Deprecation] Adding Python packages to edx-platform via private.txt is no longer supported. Instead, users should bind-mount their requirement directories with tutor mounts add .... (by @​regisb)
• [Bugfix] Updated how the Tutor setting JWT_RSA_PRIVATE_KEY is rendered into the LMS Django setting JWT_AUTH['JWT_PRIVATE_SIGNING_JWK'] as required by a recent breaking upstream change. The new representation of the JWT_PRIVATE_SIGNING_JWK simply adds the dq, dp, and qi parameters. Without this fix, LMS would encounter an InvalidKeyError on all logins. (by @​kdmccormick)
• [Improvement] You don't have to run tutor config save every time you enable or disable a plugin anymore. (by @​CodeWithEmad)

Changelog

Sourced from tutor's changelog.

v17.0.0 (2023-12-09)

• 💥[Feature] Upgrade to Quince. (by @​regisb)
• 💥[Feature] Replace ".local.overhang.io" hostnames by ".local.edly.io". (by @​regisb)
• 💥[Feature] Enable the Indigo theme by default, if no other theme is set. (by @​regisb)
• 💥[Deprecation] Tutor no longer supports the legacy Docker builder, which was previously available by setting DOCKER_BUILDKIT=0 in the host environment. Going forward, Tutor will always use BuildKit (a.k.a. docker buildx in Docker v19-v22, or just docker build in Docker v23). This transition will improve build performance and should be seamless for Tutor users who are running a supported Docker version (by @​kdmccormick).
• 💥[Deprecation] The template variable is_buildkit_enabled, which now always returns True, is deprecated. Plugin authors should assume BuildKit is enabled and remove the variable from their templates (by @​kdmccormick).
• 💥[Deprecation] Adding Python packages to edx-platform via private.txt is no longer supported. Instead, users should bind-mount their requirement directories with tutor mounts add .... (by @​regisb)
• [Bugfix] Updated how the Tutor setting JWT_RSA_PRIVATE_KEY is rendered into the LMS Django setting JWT_AUTH['JWT_PRIVATE_SIGNING_JWK'] as required by a recent breaking upstream change. The new representation of the JWT_PRIVATE_SIGNING_JWK simply adds the dq, dp, and qi parameters. Without this fix, LMS would encounter an InvalidKeyError on all logins. (by @​kdmccormick)
• [Improvement] You don't have to run tutor config save every time you enable or disable a plugin anymore. (by @​CodeWithEmad)

v16.1.8 (2023-12-10)

• [Feature] Make it easy to work on 3rd-party edx-platform Python packages with tutor mounts add /path/to/my/package. (by @​regisb)
• [Improvement] When configured with RUN_MYSQL: true, run mysqld with binlog expiry set to 3 days (rather than the default of 30).
• [Improvement] Fix ulimits error for elasticsearch in Docker rootless mode (by @​OmarIthawi)
• [Improvement] Do not hardcode OPENEDX_COMMON_VERSION = master in the nightly branch. This removes git conflicts whenever we bump the common version in the master branch. (by @​regisb)
• [Improvement] The iter_mounts template function can now take multiple image names as argument. This should concern only very advanced users. (by @​regisb)

v16.1.7 (2023-11-17)

• [Feature] Upgrade to open-release/palm.4. It is strongly recommended to upgrade to this release for as long as possible before upgrading to Quince. Otherwise, many users will be logged out after the Quince upgrade and will have to log in again -- see the Quince release notes. (by @​regisb)
• [Bugfix] Fix installation of tutor due to missing dev.txt file in Python package. (by @​regisb)

v16.1.6 (2023-11-16)

• [Feature] Upgrade to open-release/palm.4. (by @​regisb)
• [Improvement] Install tutor development tools with pip install tutor[dev]. (by @​CodeWithEmad)

v16.1.5 (2023-10-30)

• [Bugfix] Fix ORA2 file uploads in CMS. As the cache settings are shared between CMS and LMS, the settings are moved from common_lms.py to common_all.py. (by @​FatemeKhodayari)

v16.1.4 (2023-10-13)

• [Improvement] No more large dev images. This was fixed by adding --no-log-init option to useradd command and reducing space usage of /var/log/faillog. (by @​CodeWithEmad)
• [Improvement] Upgrade the Open edX default version to open-release/palm.3. (by @​regisb)

v16.1.3 (2023-10-10)

• [Improvement] Adds connect=False to the LMS and CMS' MongoDB connection to prevent ServerSelectionError after a cluster failover. (by @​open-craft)
• [Bugfix] Override CMS_BASE setting in Studio for the development environment. Without this, parts of Studio will try to use the devstack default of localhost:8010 instead. (by @​ormsbee)
• [Bugfix] Fix build error caused by py2neo package that was abruptly pulled from pypi and GitHub. (by @​regisb)

... (truncated)

Commits

• 0ccf486 feat: upgrade to quince
• 71e4691 Merge remote-tracking branch 'origin/master' into nightly
• ada5b36 v16.1.8
• 0d997c9 feat: auto-mount edx-platform python requirements
• 6da97d2 feat: local.overhang.io -> local.edly.io
• 6582e3a fix: fill patch catch on plugin load/unload
• 61d37b4 fix: save configs by enable/disable plugins.
• 9a45073 Merge remote-tracking branch 'origin/master' into nightly
• 8681eca chore: fixed typos
• 0ef86fc docs: add more clarity to debugging section
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

The following labels could not be found: dependencies, python, automated pr.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

[lpm0073]

pretty sure that we do NOT want to do this. Generally, the tutor version pin should not span more than one major release. Plus, main branch should only consider tutor latest, which would be >= 17.0.0, < 18.0.0