chore(deps): update tutor requirement from <18.0.0,>=17.0.0 to >=17.0.0,<19.0.0

[dependabot]

Updates the requirements on tutor to permit the latest version.

Release notes

Sourced from tutor's releases.

v18.1.2

Install this version from pip with:

pip install "tutor[full]==18.1.2"

Or download the compiled binaries:

sudo curl -L "https://github.com/overhangio/tutor/releases/download/v18.1.2/tutor-$(uname -s)_$(uname -m)" -o /usr/local/bin/tutor
sudo chmod 0755 /usr/local/bin/tutor

See the installation docs for more installation options and instructions.

Changes

• [Security] Add upstream security fix as patch in Open edX image (by @​dawoudsheraz)

Changelog

Sourced from tutor's changelog.

v18.1.2 (2024-07-26)

• [Security] Add upstream security fix as patch in Open edX image (by @​dawoudsheraz)

v18.1.1 (2024-07-04)

• [Bugfix] Fix mysql-native-password is not loaded error in MySQL 8.4 when upgrading from tutor 15 or an earlier release to tutor 18 by enabling the plugin. (by @​Danyal-Faheem)

v18.1.0 (2024-06-25)

• 💥[Feature] Upgrade default charset and collation of mysql to "utf8mb4" and "utf8mb4_unicode_ci" respectively. This upgrade should be automatic for most users. However, if you are running a third-party MySQL (i.e. RUN_MYSQL=false), you are expected to upgrade manually. Please refer to the third-party provider's documentation for detailed upgrade instructions. Ensuring that your MySQL version is up-to-date is crucial for maintaining compatibility and security. (by @​Danyal-Faheem)
• [Bugfix] Do not fail on start when there are not persistent volume claims to apply. (by @​snglth)
• [Bugfix] Fix legacy warnings during Docker build. (by @​regisb)

v18.0.0 (2024-06-19)

• 💥[Feature] Upgrade to Redwood (by @​dawoudsheraz)

• [Bugfix] Wrap Django5 warning imports in try-except block to avoid failures in django3 that's still in use in edx-platform's master branch (by @​mariajgrimaldi).

• 💥[Feature] Pull translations via atlas during Docker build. This breaks the openedx-i18n custom locale Tutor feature in favor of OEP-58 in favor of https://github.com/openedx/openedx-translations. (by @​omarithawi)

• 💥[Feature] The openedx-assets command is replaced with npm run subcommands. This will slightly reduce the build time for edx-platform assets and comprehensive themes. It will also open up the door for more significant build time reductions in the future. Here is a migration guide, where each command is to be run in the lms or cms container:

  Before	After
  openedx-assets build --env=prod ARGS	npm run build -- ARGS
  openedx-assets build --env=dev ARGS	npm run build-dev -- ARGS
  openedx-assets common --env=prod ARGS	npm run compile-sass -- --skip-themes ARGS
  openedx-assets common --env=dev ARGS	npm run compile-sass-dev -- --skip-themes ARGS
  openedx-assets webpack --env=prod ARGS	npm run webpack -- ARGS
  openedx-assets webpack --env=dev ARGS	npm run webpack-dev -- ARGS
  openedx-assets npm	npm run postinstall (npm clean-install runs this automatically)
  openedx-assets xmodule	(no longer necessary)
  openedx-assets collect ARGS	./manage.py lms collectstatic --noinput ARGS && ./manage.py cms collectstatic ARGS
  openedx-assets watch-themes ARGS	npm run watch-themes -- ARGS

For more details, see the deprecation notice for paver and the static assets reference in edx-platform.

• 💥[Feature] Update MongoDB to v7.0.7 (by @​dawoudsheraz) MongoDB is upgraded from version 4.4 to 7.0. Since there have been major releases since 4.4, the upgrade will need to go through them before running Mongo 7. MongoDB would need to follow 4.4 --> 5.0 --> 6.0 --> 7.0 upgrade path to work correctly. The container will keep on restarting with featureCompatibility error if the upgrade path is not followed. To upgrade mongo, run the following command based in the appropriate environment:

  tutor upgrade --from=quince

For k8s only, the above command will not perform the upgrade automatically. Instead, the command will output a series of commands that would need to be run manually to carry out the upgrade.

• [Improvement] Upgrade Nodejs from 16.14.0 to 18.20.1 in edx-platform. (by @​regisb)
• [Improvement] Auto-detect bind mounts of openedx-learning for edx-platform (by @​bradenmacdonald)
• [Feature] Upgrade Open edX image to use Python 3.11 (by @​dawoudsheraz)

... (truncated)

Commits

• b259376 v18.1.2
• 1c5d54a docs: fix mysql version on RUN_MYSQL=false (#1104)
• 6549442 security: add upstream security patch in Open edX image (#1100)
• 01d078c chore: add docs link in the troubleshooting section (#1092)
• ff0f626 build: update macos runner for release.yml (#1093)
• cbd20d3 v18.1.1 (#1091)
• 0854914 fix: add turn on mysql-native-password authentication plugin to fix broken co...
• dce1138 v18.1.0
• c8ce86b fix: do not fail on start when there are no persistent volume claims
• c4fd306 feat!: upgrade default mysql charset and collation to utf8mb4
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)