From cb67bfd22a3f0d9b66a3d4b8c2fb657029c84bf6 Mon Sep 17 00:00:00 2001 From: Fox Danger Piacenti Date: Thu, 11 Jun 2026 14:14:01 -0500 Subject: [PATCH 1/2] chore: remove web_fragment dependency --- requirements/edx/base.txt | 1 - requirements/edx/kernel.in | 1 - 2 files changed, 2 deletions(-) diff --git a/requirements/edx/base.txt b/requirements/edx/base.txt index b3dd1789244e..b77240514087 100644 --- a/requirements/edx/base.txt +++ b/requirements/edx/base.txt @@ -1272,7 +1272,6 @@ wcwidth==0.8.1 # via prompt-toolkit web-fragments==4.0.0 # via - # -r requirements/edx/kernel.in # crowdsourcehinter-xblock # edx-sga # staff-graded-xblock diff --git a/requirements/edx/kernel.in b/requirements/edx/kernel.in index 8abecd6ea77a..2f471ed05364 100644 --- a/requirements/edx/kernel.in +++ b/requirements/edx/kernel.in @@ -153,7 +153,6 @@ sortedcontainers # Provides SortedKeyList, used for lists of stevedore # Support for runtime plugins, used for XBlocks and edx-platform Django app plugins unicodecsv # Easier support for CSV files with unicode text webob -web-fragments # Provides the ability to render fragments of web pages wrapt # Better functools.wrapped. TODO: functools has since improved, maybe we can switch? XBlock[django] # Courseware component architecture xss-utils # https://github.com/openedx/edx-platform/pull/20633 Fix XSS via Translations From d234ffcd432f287eec75e52a4ec214745fb2a3ee Mon Sep 17 00:00:00 2001 From: Fox Danger Piacenti Date: Thu, 11 Jun 2026 14:21:27 -0500 Subject: [PATCH 2/2] chore: bump requirements --- requirements/edx-sandbox/base.txt | 4 +-- requirements/edx/base.txt | 28 +++++++-------- requirements/edx/development.txt | 36 +++++++++---------- requirements/edx/doc.txt | 28 +++++++-------- requirements/edx/semgrep.txt | 8 ++--- requirements/edx/testing.txt | 36 +++++++++---------- scripts/user_retirement/requirements/base.txt | 6 ++-- .../user_retirement/requirements/testing.txt | 6 ++-- 8 files changed, 76 insertions(+), 76 deletions(-) diff --git a/requirements/edx-sandbox/base.txt b/requirements/edx-sandbox/base.txt index 1f28c78b8dac..95dea6eed3bd 100644 --- a/requirements/edx-sandbox/base.txt +++ b/requirements/edx-sandbox/base.txt @@ -14,7 +14,7 @@ codejail-includes==2.0.0 # via -r requirements/edx-sandbox/base.in contourpy==1.3.3 # via matplotlib -cryptography==48.0.0 +cryptography==48.0.1 # via -r requirements/edx-sandbox/base.in cycler==0.12.1 # via matplotlib @@ -84,5 +84,5 @@ sympy==1.14.0 # via # -r requirements/edx-sandbox/base.in # openedx-calc -tqdm==4.68.1 +tqdm==4.68.2 # via nltk diff --git a/requirements/edx/base.txt b/requirements/edx/base.txt index b77240514087..e61fd70aa941 100644 --- a/requirements/edx/base.txt +++ b/requirements/edx/base.txt @@ -68,14 +68,14 @@ bleach[css]==6.4.0 # ora2 # xblock-drag-and-drop-v2 # xblock-poll -boto3==1.43.25 +boto3==1.43.27 # via # -r requirements/edx/kernel.in # django-ses # fs-s3fs # ora2 # snowflake-connector-python -botocore==1.43.25 +botocore==1.43.27 # via # -r requirements/edx/kernel.in # boto3 @@ -150,7 +150,7 @@ codejail-includes==2.0.0 # via -r requirements/edx/kernel.in crowdsourcehinter-xblock==1.0.0 # via -r requirements/edx/bundled.in -cryptography==48.0.0 +cryptography==48.0.1 # via # -r requirements/edx/kernel.in # django-fernet-fields-v2 @@ -268,7 +268,7 @@ django-config-models==3.0.0 # lti-consumer-xblock django-cors-headers==4.9.0 # via -r requirements/edx/kernel.in -django-countries==8.2.0 +django-countries==9.0.0 # via # -r requirements/edx/kernel.in # edx-enterprise @@ -296,7 +296,7 @@ django-ipware==7.0.1 # -r requirements/edx/kernel.in # edx-enterprise # edx-proctoring -django-js-asset==3.1.2 +django-js-asset==4.0.1 # via django-mptt django-method-override==1.0.4 # via -r requirements/edx/kernel.in @@ -515,6 +515,7 @@ edx-opaque-keys[django]==4.0.0 # openedx-events # openedx-filters # ora2 + # xblock # xblocks-contrib edx-organizations==8.0.0 # via @@ -589,7 +590,7 @@ event-tracking==4.0.2 # edx-search fastavro==1.12.2 # via openedx-events -filelock==3.29.1 +filelock==3.29.3 # via snowflake-connector-python firebase-admin==7.4.0 # via edx-ace @@ -642,12 +643,12 @@ googleapis-common-protos==1.75.0 # via # google-api-core # grpcio-status -grpcio==1.81.0 +grpcio==1.81.1 # via # google-api-core # google-cloud-firestore # grpcio-status -grpcio-status==1.81.0 +grpcio-status==1.81.1 # via google-api-core gunicorn==26.0.0 # via -r requirements/edx/kernel.in @@ -791,7 +792,7 @@ more-itertools==11.1.0 # via cssutils mpmath==1.3.0 # via sympy -msgpack==1.1.2 +msgpack==1.2.0 # via cachecontrol multidict==6.7.1 # via @@ -834,7 +835,7 @@ openedx-atlas==0.7.0 # enterprise-integrated-channels # openedx-authz # openedx-forum -openedx-authz==1.16.0 +openedx-authz==1.18.0 # via -r requirements/edx/kernel.in openedx-calc==5.0.0 # via @@ -1196,7 +1197,7 @@ super-csv==5.0.0 # via edx-bulk-grades sympy==1.14.0 # via openedx-calc -testfixtures==12.0.0 +testfixtures==12.0.1 # via edx-enterprise text-unidecode==1.3 # via python-slugify @@ -1208,7 +1209,7 @@ tomlkit==0.15.0 # via # openedx-core # snowflake-connector-python -tqdm==4.68.1 +tqdm==4.68.2 # via nltk typesense==2.0.0 # via @@ -1275,7 +1276,6 @@ web-fragments==4.0.0 # crowdsourcehinter-xblock # edx-sga # staff-graded-xblock - # xblock # xblock-utils # xblocks-contrib webencodings==0.5.1 @@ -1294,7 +1294,7 @@ wrapt==2.2.1 # via # -r requirements/edx/kernel.in # xblocks-contrib -xblock[django]==6.1.0 +xblock[django]==6.2.0 # via # -r requirements/edx/kernel.in # acid-xblock diff --git a/requirements/edx/development.txt b/requirements/edx/development.txt index 76862b460a32..034620de55cc 100644 --- a/requirements/edx/development.txt +++ b/requirements/edx/development.txt @@ -134,7 +134,7 @@ bleach[css]==6.4.0 # ora2 # xblock-drag-and-drop-v2 # xblock-poll -boto3==1.43.25 +boto3==1.43.27 # via # -r requirements/edx/doc.txt # -r requirements/edx/testing.txt @@ -142,7 +142,7 @@ boto3==1.43.25 # fs-s3fs # ora2 # snowflake-connector-python -botocore==1.43.25 +botocore==1.43.27 # via # -r requirements/edx/doc.txt # -r requirements/edx/testing.txt @@ -289,7 +289,7 @@ crowdsourcehinter-xblock==1.0.0 # via # -r requirements/edx/doc.txt # -r requirements/edx/testing.txt -cryptography==48.0.0 +cryptography==48.0.1 # via # -r requirements/edx/doc.txt # -r requirements/edx/testing.txt @@ -452,7 +452,7 @@ django-cors-headers==4.9.0 # via # -r requirements/edx/doc.txt # -r requirements/edx/testing.txt -django-countries==8.2.0 +django-countries==9.0.0 # via # -r requirements/edx/doc.txt # -r requirements/edx/testing.txt @@ -490,7 +490,7 @@ django-ipware==7.0.1 # -r requirements/edx/testing.txt # edx-enterprise # edx-proctoring -django-js-asset==3.1.2 +django-js-asset==4.0.1 # via # -r requirements/edx/doc.txt # -r requirements/edx/testing.txt @@ -799,6 +799,7 @@ edx-opaque-keys[django]==4.0.0 # openedx-events # openedx-filters # ora2 + # xblock # xblocks-contrib edx-organizations==8.0.0 # via @@ -906,7 +907,7 @@ execnet==2.1.2 # pytest-xdist factory-boy==3.3.3 # via -r requirements/edx/testing.txt -faker==40.21.0 +faker==40.23.0 # via # -r requirements/edx/testing.txt # factory-boy @@ -915,7 +916,7 @@ fastavro==1.12.2 # -r requirements/edx/doc.txt # -r requirements/edx/testing.txt # openedx-events -filelock==3.29.1 +filelock==3.29.3 # via # -r requirements/edx/doc.txt # -r requirements/edx/testing.txt @@ -1016,14 +1017,14 @@ grimp==3.14 # via # -r requirements/edx/testing.txt # import-linter -grpcio==1.81.0 +grpcio==1.81.1 # via # -r requirements/edx/doc.txt # -r requirements/edx/testing.txt # google-api-core # google-cloud-firestore # grpcio-status -grpcio-status==1.81.0 +grpcio-status==1.81.1 # via # -r requirements/edx/doc.txt # -r requirements/edx/testing.txt @@ -1306,7 +1307,7 @@ mpmath==1.3.0 # -r requirements/edx/doc.txt # -r requirements/edx/testing.txt # sympy -msgpack==1.1.2 +msgpack==1.2.0 # via # -r requirements/edx/doc.txt # -r requirements/edx/testing.txt @@ -1374,7 +1375,7 @@ openedx-atlas==0.7.0 # enterprise-integrated-channels # openedx-authz # openedx-forum -openedx-authz==1.16.0 +openedx-authz==1.18.0 # via # -r requirements/edx/doc.txt # -r requirements/edx/testing.txt @@ -1759,7 +1760,7 @@ python-dateutil==2.9.0.post0 # olxcleaner # ora2 # xblock -python-discovery==1.4.0 +python-discovery==1.4.2 # via # -r requirements/edx/testing.txt # tox @@ -1899,7 +1900,7 @@ rpds-py==2026.5.1 # -r requirements/edx/testing.txt # jsonschema # referencing -ruff==0.15.16 +ruff==0.15.17 # via -r requirements/edx/testing.txt rules==3.5 # via @@ -2105,7 +2106,7 @@ sympy==1.14.0 # -r requirements/edx/doc.txt # -r requirements/edx/testing.txt # openedx-calc -testfixtures==12.0.0 +testfixtures==12.0.1 # via # -r requirements/edx/doc.txt # -r requirements/edx/testing.txt @@ -2139,7 +2140,7 @@ tomlkit==0.15.0 # snowflake-connector-python tox==4.55.1 # via -r requirements/edx/testing.txt -tqdm==4.68.1 +tqdm==4.68.2 # via # -r requirements/edx/doc.txt # -r requirements/edx/testing.txt @@ -2234,7 +2235,7 @@ vine==5.1.0 # amqp # celery # kombu -virtualenv==21.4.2 +virtualenv==21.4.3 # via # -r requirements/edx/testing.txt # tox @@ -2269,7 +2270,6 @@ web-fragments==4.0.0 # crowdsourcehinter-xblock # edx-sga # staff-graded-xblock - # xblock # xblock-utils # xblocks-contrib webencodings==0.5.1 @@ -2297,7 +2297,7 @@ wrapt==2.2.1 # -r requirements/edx/doc.txt # -r requirements/edx/testing.txt # xblocks-contrib -xblock[django]==6.1.0 +xblock[django]==6.2.0 # via # -r requirements/edx/doc.txt # -r requirements/edx/testing.txt diff --git a/requirements/edx/doc.txt b/requirements/edx/doc.txt index c2c63cbf8e97..0e17e40c206f 100644 --- a/requirements/edx/doc.txt +++ b/requirements/edx/doc.txt @@ -105,14 +105,14 @@ bleach[css]==6.4.0 # ora2 # xblock-drag-and-drop-v2 # xblock-poll -boto3==1.43.25 +boto3==1.43.27 # via # -r requirements/edx/base.txt # django-ses # fs-s3fs # ora2 # snowflake-connector-python -botocore==1.43.25 +botocore==1.43.27 # via # -r requirements/edx/base.txt # boto3 @@ -210,7 +210,7 @@ codejail-includes==2.0.0 # via -r requirements/edx/base.txt crowdsourcehinter-xblock==1.0.0 # via -r requirements/edx/base.txt -cryptography==48.0.0 +cryptography==48.0.1 # via # -r requirements/edx/base.txt # django-fernet-fields-v2 @@ -338,7 +338,7 @@ django-config-models==3.0.0 # lti-consumer-xblock django-cors-headers==4.9.0 # via -r requirements/edx/base.txt -django-countries==8.2.0 +django-countries==9.0.0 # via # -r requirements/edx/base.txt # edx-enterprise @@ -367,7 +367,7 @@ django-ipware==7.0.1 # -r requirements/edx/base.txt # edx-enterprise # edx-proctoring -django-js-asset==3.1.2 +django-js-asset==4.0.1 # via # -r requirements/edx/base.txt # django-mptt @@ -605,6 +605,7 @@ edx-opaque-keys[django]==4.0.0 # openedx-events # openedx-filters # ora2 + # xblock # xblocks-contrib edx-organizations==8.0.0 # via @@ -689,7 +690,7 @@ fastavro==1.12.2 # via # -r requirements/edx/base.txt # openedx-events -filelock==3.29.1 +filelock==3.29.3 # via # -r requirements/edx/base.txt # snowflake-connector-python @@ -762,13 +763,13 @@ googleapis-common-protos==1.75.0 # -r requirements/edx/base.txt # google-api-core # grpcio-status -grpcio==1.81.0 +grpcio==1.81.1 # via # -r requirements/edx/base.txt # google-api-core # google-cloud-firestore # grpcio-status -grpcio-status==1.81.0 +grpcio-status==1.81.1 # via # -r requirements/edx/base.txt # google-api-core @@ -963,7 +964,7 @@ mpmath==1.3.0 # via # -r requirements/edx/base.txt # sympy -msgpack==1.1.2 +msgpack==1.2.0 # via # -r requirements/edx/base.txt # cachecontrol @@ -1012,7 +1013,7 @@ openedx-atlas==0.7.0 # enterprise-integrated-channels # openedx-authz # openedx-forum -openedx-authz==1.16.0 +openedx-authz==1.18.0 # via -r requirements/edx/base.txt openedx-calc==5.0.0 # via @@ -1502,7 +1503,7 @@ sympy==1.14.0 # via # -r requirements/edx/base.txt # openedx-calc -testfixtures==12.0.0 +testfixtures==12.0.1 # via # -r requirements/edx/base.txt # edx-enterprise @@ -1523,7 +1524,7 @@ tomlkit==0.15.0 # -r requirements/edx/base.txt # openedx-core # snowflake-connector-python -tqdm==4.68.1 +tqdm==4.68.2 # via # -r requirements/edx/base.txt # nltk @@ -1612,7 +1613,6 @@ web-fragments==4.0.0 # crowdsourcehinter-xblock # edx-sga # staff-graded-xblock - # xblock # xblock-utils # xblocks-contrib webencodings==0.5.1 @@ -1634,7 +1634,7 @@ wrapt==2.2.1 # via # -r requirements/edx/base.txt # xblocks-contrib -xblock[django]==6.1.0 +xblock[django]==6.2.0 # via # -r requirements/edx/base.txt # acid-xblock diff --git a/requirements/edx/semgrep.txt b/requirements/edx/semgrep.txt index 5614f2dec99a..9ee0a2a62a99 100644 --- a/requirements/edx/semgrep.txt +++ b/requirements/edx/semgrep.txt @@ -43,7 +43,7 @@ click-option-group==0.5.9 # via semgrep colorama==0.4.6 # via semgrep -cryptography==48.0.0 +cryptography==48.0.1 # via pyjwt exceptiongroup==1.2.2 # via semgrep @@ -140,7 +140,7 @@ pydantic-settings==2.14.1 # via mcp pygments==2.20.0 # via rich -pyjwt[crypto]==2.12.1 +pyjwt[crypto]==2.13.0 # via # mcp # semgrep @@ -168,11 +168,11 @@ ruamel-yaml-clib==0.2.15 # via semgrep semantic-version==2.10.0 # via semgrep -semgrep==1.165.0 +semgrep==1.166.0 # via -r requirements/edx/semgrep.in sse-starlette==3.4.4 # via mcp -starlette==1.2.1 +starlette==1.3.0 # via # mcp # sse-starlette diff --git a/requirements/edx/testing.txt b/requirements/edx/testing.txt index a8274a013799..0c0c2a4febc9 100644 --- a/requirements/edx/testing.txt +++ b/requirements/edx/testing.txt @@ -100,14 +100,14 @@ bleach[css]==6.4.0 # ora2 # xblock-drag-and-drop-v2 # xblock-poll -boto3==1.43.25 +boto3==1.43.27 # via # -r requirements/edx/base.txt # django-ses # fs-s3fs # ora2 # snowflake-connector-python -botocore==1.43.25 +botocore==1.43.27 # via # -r requirements/edx/base.txt # boto3 @@ -221,7 +221,7 @@ coverage[toml]==7.14.1 # pytest-cov crowdsourcehinter-xblock==1.0.0 # via -r requirements/edx/base.txt -cryptography==48.0.0 +cryptography==48.0.1 # via # -r requirements/edx/base.txt # django-fernet-fields-v2 @@ -359,7 +359,7 @@ django-config-models==3.0.0 # lti-consumer-xblock django-cors-headers==4.9.0 # via -r requirements/edx/base.txt -django-countries==8.2.0 +django-countries==9.0.0 # via # -r requirements/edx/base.txt # edx-enterprise @@ -388,7 +388,7 @@ django-ipware==7.0.1 # -r requirements/edx/base.txt # edx-enterprise # edx-proctoring -django-js-asset==3.1.2 +django-js-asset==4.0.1 # via # -r requirements/edx/base.txt # django-mptt @@ -623,6 +623,7 @@ edx-opaque-keys[django]==4.0.0 # openedx-events # openedx-filters # ora2 + # xblock # xblocks-contrib edx-organizations==8.0.0 # via @@ -707,13 +708,13 @@ execnet==2.1.2 # via pytest-xdist factory-boy==3.3.3 # via -r requirements/edx/testing.in -faker==40.21.0 +faker==40.23.0 # via factory-boy fastavro==1.12.2 # via # -r requirements/edx/base.txt # openedx-events -filelock==3.29.1 +filelock==3.29.3 # via # -r requirements/edx/base.txt # python-discovery @@ -789,13 +790,13 @@ googleapis-common-protos==1.75.0 # grpcio-status grimp==3.14 # via import-linter -grpcio==1.81.0 +grpcio==1.81.1 # via # -r requirements/edx/base.txt # google-api-core # google-cloud-firestore # grpcio-status -grpcio-status==1.81.0 +grpcio-status==1.81.1 # via # -r requirements/edx/base.txt # google-api-core @@ -1003,7 +1004,7 @@ mpmath==1.3.0 # via # -r requirements/edx/base.txt # sympy -msgpack==1.1.2 +msgpack==1.2.0 # via # -r requirements/edx/base.txt # cachecontrol @@ -1052,7 +1053,7 @@ openedx-atlas==0.7.0 # enterprise-integrated-channels # openedx-authz # openedx-forum -openedx-authz==1.16.0 +openedx-authz==1.18.0 # via -r requirements/edx/base.txt openedx-calc==5.0.0 # via @@ -1345,7 +1346,7 @@ python-dateutil==2.9.0.post0 # olxcleaner # ora2 # xblock -python-discovery==1.4.0 +python-discovery==1.4.2 # via # tox # virtualenv @@ -1455,7 +1456,7 @@ rpds-py==2026.5.1 # -r requirements/edx/base.txt # jsonschema # referencing -ruff==0.15.16 +ruff==0.15.17 # via -r requirements/edx/testing.in rules==3.5 # via @@ -1570,7 +1571,7 @@ sympy==1.14.0 # via # -r requirements/edx/base.txt # openedx-calc -testfixtures==12.0.0 +testfixtures==12.0.1 # via # -r requirements/edx/base.txt # -r requirements/edx/testing.in @@ -1598,7 +1599,7 @@ tomlkit==0.15.0 # snowflake-connector-python tox==4.55.1 # via -r requirements/edx/testing.in -tqdm==4.68.1 +tqdm==4.68.2 # via # -r requirements/edx/base.txt # nltk @@ -1669,7 +1670,7 @@ vine==5.1.0 # amqp # celery # kombu -virtualenv==21.4.2 +virtualenv==21.4.3 # via tox voluptuous==0.16.0 # via @@ -1693,7 +1694,6 @@ web-fragments==4.0.0 # crowdsourcehinter-xblock # edx-sga # staff-graded-xblock - # xblock # xblock-utils # xblocks-contrib webencodings==0.5.1 @@ -1715,7 +1715,7 @@ wrapt==2.2.1 # via # -r requirements/edx/base.txt # xblocks-contrib -xblock[django]==6.1.0 +xblock[django]==6.2.0 # via # -r requirements/edx/base.txt # acid-xblock diff --git a/scripts/user_retirement/requirements/base.txt b/scripts/user_retirement/requirements/base.txt index 31ed803b298d..1e79e43ad3d2 100644 --- a/scripts/user_retirement/requirements/base.txt +++ b/scripts/user_retirement/requirements/base.txt @@ -10,9 +10,9 @@ attrs==26.1.0 # via zeep backoff==2.2.1 # via -r scripts/user_retirement/requirements/base.in -boto3==1.43.25 +boto3==1.43.27 # via -r scripts/user_retirement/requirements/base.in -botocore==1.43.25 +botocore==1.43.27 # via # boto3 # s3transfer @@ -28,7 +28,7 @@ click==8.4.1 # via # -r scripts/user_retirement/requirements/base.in # edx-django-utils -cryptography==48.0.0 +cryptography==48.0.1 # via # google-auth # pyjwt diff --git a/scripts/user_retirement/requirements/testing.txt b/scripts/user_retirement/requirements/testing.txt index 8a022d354b7a..d2ea6edacd4f 100644 --- a/scripts/user_retirement/requirements/testing.txt +++ b/scripts/user_retirement/requirements/testing.txt @@ -14,11 +14,11 @@ attrs==26.1.0 # zeep backoff==2.2.1 # via -r scripts/user_retirement/requirements/base.txt -boto3==1.43.25 +boto3==1.43.27 # via # -r scripts/user_retirement/requirements/base.txt # moto -botocore==1.43.25 +botocore==1.43.27 # via # -r scripts/user_retirement/requirements/base.txt # boto3 @@ -41,7 +41,7 @@ click==8.4.1 # via # -r scripts/user_retirement/requirements/base.txt # edx-django-utils -cryptography==48.0.0 +cryptography==48.0.1 # via # -r scripts/user_retirement/requirements/base.txt # google-auth