Merge branch 'master' into image-upload-fail

.github/workflows/ci.yml

@@ -19,7 +19,7 @@ jobs:
         db-version: ['mysql80']
 
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v4
     - name: Start container
       run: |
         docker compose -f .ci/docker-compose-ci.yml up -d

.github/workflows/codeql-analysis.yml

@@ -21,17 +21,17 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v2
+      uses: actions/checkout@v4
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@v1
+      uses: github/codeql-action/init@v3
       with:
         languages: ${{ matrix.language }}
 
     # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
     - name: Autobuild
-      uses: github/codeql-action/autobuild@v1
+      uses: github/codeql-action/autobuild@v3
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@v1
+      uses: github/codeql-action/analyze@v3

.github/workflows/migrations-mysql8-check.yml

@@ -14,15 +14,15 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        os: [ ubuntu-20.04 ]
+        os: [ ubuntu-latest ]
         python-version: [ '3.11', '3.12' ]
 
     steps:
     - name: Checkout repo
-      uses: actions/checkout@v2
+      uses: actions/checkout@v4
 
     - name: Setup Python ${{ matrix.python-version }}
-      uses: actions/setup-python@v2
+      uses: actions/setup-python@v5
       with:
         python-version: ${{ matrix.python-version }}
 
@@ -36,7 +36,7 @@ jobs:
         echo "dir=$(pip cache dir)" >> $GITHUB_OUTPUT
     - name: Cache pip dependencies
       id: cache-dependencies
-      uses: actions/cache@v2
+      uses: actions/cache@v4
       with:
         path: ${{ steps.pip-cache-dir.outputs.dir }}
         key: ${{ runner.os }}-pip-${{ hashFiles('requirements/pip-tools.txt') }}

.github/workflows/trivy-code-scanning.yml

@@ -15,7 +15,7 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v2
+        uses: actions/checkout@v4
 
       - name: Build an image from Dockerfile
         run: |
@@ -29,6 +29,6 @@ jobs:
           output: 'trivy-results.sarif'
 
       - name: Upload Trivy scan results to GitHub Security tab
-        uses: github/codeql-action/upload-sarif@v1
+        uses: github/codeql-action/upload-sarif@v3
         with:
           sarif_file: 'trivy-results.sarif'

requirements/base.txt

@@ -10,17 +10,17 @@ certifi==2024.8.30
     # via
     #   elasticsearch
     #   requests
-cffi==1.17.0
+cffi==1.17.1
     # via
     #   cryptography
     #   pynacl
 chardet==3.0.4
     # via requests
 click==8.1.7
     # via edx-django-utils
-cryptography==43.0.0
+cryptography==43.0.1
     # via pyjwt
-django==4.2.15
+django==4.2.16
     # via
     #   -c requirements/common_constraints.txt
     #   -r requirements/base.in
@@ -72,9 +72,9 @@ edx-django-utils==5.15.0
     # via
     #   -r requirements/base.in
     #   edx-drf-extensions
-edx-drf-extensions==10.3.0
+edx-drf-extensions==10.4.0
     # via -r requirements/base.in
-edx-opaque-keys==2.10.0
+edx-opaque-keys==2.11.0
     # via edx-drf-extensions
 elasticsearch==7.13.4
     # via

requirements/ci.txt

@@ -12,23 +12,23 @@ colorama==0.4.6
     # via tox
 distlib==0.3.8
     # via virtualenv
-filelock==3.15.4
+filelock==3.16.0
     # via
     #   tox
     #   virtualenv
 packaging==24.1
     # via
     #   pyproject-api
     #   tox
-platformdirs==4.2.2
+platformdirs==4.3.2
     # via
     #   tox
     #   virtualenv
 pluggy==1.5.0
     # via tox
 pyproject-api==1.7.1
     # via tox
-tox==4.18.0
+tox==4.18.1
     # via -r requirements/ci.in
-virtualenv==20.26.3
+virtualenv==20.26.4
     # via tox

requirements/constraints.txt

@@ -21,6 +21,3 @@ python-dateutil==2.4.0
 more-itertools==5.0.0
 pylint==1.5.0
 django-cors-headers==3.14.0
-
-
-backports-zoneinfo==0.2.1; python_version < '3.9'

requirements/django.txt

@@ -1 +1 @@
-django==4.2.15
+django==4.2.16

requirements/pip-tools.txt

@@ -4,7 +4,7 @@
 #
 #    make upgrade
 #
-build==1.2.1
+build==1.2.2
     # via pip-tools
 click==8.1.7
     # via pip-tools

requirements/pip.txt

@@ -10,5 +10,5 @@ wheel==0.44.0
 # The following packages are considered to be unsafe in a requirements file:
 pip==24.2
     # via -r requirements/pip.in
-setuptools==74.0.0
+setuptools==74.1.2
     # via -r requirements/pip.in

requirements/test.txt

@@ -18,7 +18,7 @@ certifi==2024.8.30
     #   -r requirements/base.txt
     #   elasticsearch
     #   requests
-cffi==1.17.0
+cffi==1.17.1
     # via
     #   -r requirements/base.txt
     #   cryptography
@@ -41,13 +41,13 @@ coverage[toml]==7.6.1
     # via
     #   -r requirements/test.in
     #   pytest-cov
-cryptography==43.0.0
+cryptography==43.0.1
     # via
     #   -r requirements/base.txt
     #   pyjwt
 ddt==1.7.2
     # via -r requirements/test.in
-diff-cover==9.1.1
+diff-cover==9.2.0
     # via -r requirements/test.in
 distlib==0.3.8
     # via virtualenv
@@ -111,9 +111,9 @@ edx-django-utils==5.15.0
     # via
     #   -r requirements/base.txt
     #   edx-drf-extensions
-edx-drf-extensions==10.3.0
+edx-drf-extensions==10.4.0
     # via -r requirements/base.txt
-edx-opaque-keys==2.10.0
+edx-opaque-keys==2.11.0
     # via
     #   -r requirements/base.txt
     #   edx-drf-extensions
@@ -132,9 +132,9 @@ elasticsearch-dsl==7.4.1
     #   django-elasticsearch-dsl-drf
 factory-boy==3.3.1
     # via -r requirements/test.in
-faker==28.1.0
+faker==28.4.1
     # via factory-boy
-filelock==3.15.4
+filelock==3.16.0
     # via
     #   tox
     #   virtualenv
@@ -186,7 +186,7 @@ pbr==6.1.0
     #   stevedore
 pep8==1.7.1
     # via -r requirements/test.in
-platformdirs==4.2.2
+platformdirs==4.3.2
     # via virtualenv
 pluggy==1.5.0
     # via
@@ -229,7 +229,7 @@ pytest==8.3.2
     #   pytest-django
 pytest-cov==5.0.0
     # via -r requirements/test.in
-pytest-django==4.8.0
+pytest-django==4.9.0
     # via -r requirements/test.in
 python-dateutil==2.4.0
     # via
@@ -297,7 +297,7 @@ urllib3==1.26.20
     #   -r requirements/base.txt
     #   elasticsearch
     #   requests
-virtualenv==20.26.3
+virtualenv==20.26.4
     # via tox
 wrapt==1.16.0
     # via astroid