chore: Upgrade Python requirements

requirements/ci.txt

@@ -8,9 +8,9 @@ cachetools==7.1.4
     # via tox
 colorama==0.4.6
     # via tox
-distlib==0.4.1
+distlib==0.4.3
     # via virtualenv
-filelock==3.29.1
+filelock==3.30.2
     # via
     #   python-discovery
     #   tox
@@ -30,15 +30,15 @@ pluggy==1.6.0
     #   tox
 pyproject-api==1.10.1
     # via tox
-python-discovery==1.4.0
+python-discovery==1.4.4
     # via
     #   tox
     #   virtualenv
 tomli-w==1.2.0
     # via tox
-tox==4.55.1
+tox==4.56.4
     # via -r requirements/ci.in
-virtualenv==21.4.2
+virtualenv==21.6.1
     # via
     #   -r requirements/ci.in
     #   tox

requirements/common_constraints.txt

@@ -18,3 +18,9 @@ Django<6.0
 # elastic search changelog: https://www.elastic.co/guide/en/enterprise-search/master/release-notes-7.14.0.html
 # See https://github.com/openedx/edx-platform/issues/35126 for more info
 elasticsearch<7.14.0
+
+# 2026-07-06: Constrain social-auth-* packages to the latest version compatible with
+# edx-drf-extensions<=10.6.0. (Newer versions require a POST instead of a GET.)
+# Tracking issue: https://github.com/openedx/edx-drf-extensions/issues/561
+social-auth-app-django>=5.9.0,<6.0.0
+social-auth-core>=4.9.1,<5.0.0

requirements/dev.txt

@@ -4,23 +4,23 @@
 #
 #    make upgrade
 #
-asgiref==3.11.1
+asgiref==3.12.1
     # via django
 astroid==4.0.4
     # via
     #   pylint
     #   pylint-celery
 cachetools==7.1.4
     # via tox
-certifi==2026.5.20
+certifi==2026.6.17
     # via requests
-cffi==2.0.0
+cffi==2.1.0
     # via cryptography
 chardet==7.4.3
     # via diff-cover
-charset-normalizer==3.4.7
+charset-normalizer==3.4.9
     # via requests
-click==8.4.1
+click==8.4.2
     # via
     #   click-log
     #   code-annotations
@@ -31,15 +31,15 @@ code-annotations==3.0.0
     # via edx-lint
 colorama==0.4.6
     # via tox
-cryptography==48.0.0
+cryptography==49.0.0
     # via secretstorage
 diff-cover==10.3.0
     # via -r requirements/dev.in
 dill==0.4.1
     # via pylint
-distlib==0.4.1
+distlib==0.4.3
     # via virtualenv
-django==5.2.15
+django==5.2.16
     # via
     #   -c requirements/common_constraints.txt
     #   -r requirements/quality.in
@@ -50,7 +50,7 @@ edx-i18n-tools==2.0.0
     # via -r requirements/dev.in
 edx-lint==6.1.0
     # via -r requirements/quality.in
-filelock==3.29.1
+filelock==3.30.2
     # via
     #   python-discovery
     #   tox
@@ -67,7 +67,7 @@ jaraco-classes==3.4.0
     # via keyring
 jaraco-context==6.1.2
     # via keyring
-jaraco-functools==4.5.0
+jaraco-functools==4.6.0
     # via keyring
 jeepney==0.9.0
     # via
@@ -97,7 +97,7 @@ more-itertools==11.1.0
     # via
     #   jaraco-classes
     #   jaraco-functools
-nh3==0.3.5
+nh3==0.3.6
     # via readme-renderer
 packaging==26.2
     # via
@@ -131,23 +131,23 @@ pygments==2.20.0
     #   diff-cover
     #   readme-renderer
     #   rich
-pylint==4.0.5
+pylint==4.0.6
     # via
     #   edx-lint
     #   pylint-celery
     #   pylint-django
     #   pylint-plugin-utils
 pylint-celery==0.3
     # via edx-lint
-pylint-django==2.7.0
+pylint-django==2.8.0
     # via edx-lint
 pylint-plugin-utils==0.9.0
     # via
     #   pylint-celery
     #   pylint-django
 pyproject-api==1.10.1
     # via tox
-python-discovery==1.4.0
+python-discovery==1.4.4
     # via
     #   tox
     #   virtualenv
@@ -157,7 +157,7 @@ pyyaml==6.0.3
     # via
     #   code-annotations
     #   edx-i18n-tools
-readme-renderer==44.0
+readme-renderer==45.0
     # via twine
 requests==2.34.2
     # via
@@ -177,17 +177,17 @@ snowballstemmer==3.1.1
     # via pydocstyle
 sqlparse==0.5.5
     # via django
-stevedore==5.8.0
+stevedore==5.9.0
     # via code-annotations
 text-unidecode==1.3
     # via python-slugify
 tomli-w==1.2.0
     # via tox
-tomlkit==0.15.0
+tomlkit==0.15.1
     # via
     #   edx-lint
     #   pylint
-tox==4.55.1
+tox==4.56.4
     # via -r requirements/dev.in
 twine==6.2.0
     # via -r requirements/dev.in
@@ -196,7 +196,7 @@ urllib3==2.7.0
     #   id
     #   requests
     #   twine
-virtualenv==21.4.2
+virtualenv==21.6.1
     # via
     #   -r requirements/dev.in
     #   tox

requirements/doc.txt

@@ -8,23 +8,23 @@ accessible-pygments==0.0.5
     # via pydata-sphinx-theme
 alabaster==1.0.0
     # via sphinx
-asgiref==3.11.1
+asgiref==3.12.1
     # via django
 babel==2.18.0
     # via
     #   pydata-sphinx-theme
     #   sphinx
-beautifulsoup4==4.14.3
+beautifulsoup4==4.15.0
     # via pydata-sphinx-theme
-certifi==2026.5.20
+certifi==2026.6.17
     # via requests
-cffi==2.0.0
+cffi==2.1.0
     # via cryptography
-charset-normalizer==3.4.7
+charset-normalizer==3.4.9
     # via requests
-cryptography==48.0.0
+cryptography==49.0.0
     # via secretstorage
-django==5.2.15
+django==5.2.16
     # via
     #   -c requirements/common_constraints.txt
     #   -r requirements/doc.in
@@ -47,7 +47,7 @@ jaraco-classes==3.4.0
     # via keyring
 jaraco-context==6.1.2
     # via keyring
-jaraco-functools==4.5.0
+jaraco-functools==4.6.0
     # via keyring
 jeepney==0.9.0
     # via
@@ -67,7 +67,7 @@ more-itertools==11.1.0
     # via
     #   jaraco-classes
     #   jaraco-functools
-nh3==0.3.5
+nh3==0.3.6
     # via readme-renderer
 packaging==26.2
     # via
@@ -87,7 +87,7 @@ pygments==2.20.0
     #   readme-renderer
     #   rich
     #   sphinx
-readme-renderer==44.0
+readme-renderer==45.0
     # via
     #   -r requirements/doc.in
     #   twine
@@ -139,11 +139,11 @@ sphinxcontrib-serializinghtml==2.0.0
     # via sphinx
 sqlparse==0.5.5
     # via django
-stevedore==5.8.0
+stevedore==5.9.0
     # via doc8
 twine==6.2.0
     # via -r requirements/doc.in
-typing-extensions==4.15.0
+typing-extensions==4.16.0
     # via
     #   beautifulsoup4
     #   pydata-sphinx-theme

requirements/pip-tools.txt

@@ -6,7 +6,7 @@
 #
 build==1.5.0
     # via pip-tools
-click==8.4.1
+click==8.4.2
     # via pip-tools
 packaging==26.2
     # via

requirements/pip.txt

@@ -12,5 +12,5 @@ wheel==0.47.0
 # The following packages are considered to be unsafe in a requirements file:
 pip==26.1.2
     # via -r requirements/pip.in
-setuptools==82.0.1
+setuptools==83.0.0
     # via -r requirements/pip.in

requirements/quality.txt

@@ -4,13 +4,13 @@
 #
 #    make upgrade
 #
-asgiref==3.11.1
+asgiref==3.12.1
     # via django
 astroid==4.0.4
     # via
     #   pylint
     #   pylint-celery
-click==8.4.1
+click==8.4.2
     # via
     #   click-log
     #   code-annotations
@@ -21,7 +21,7 @@ code-annotations==3.0.0
     # via edx-lint
 dill==0.4.1
     # via pylint
-django==5.2.15
+django==5.2.16
     # via
     #   -c requirements/common_constraints.txt
     #   -r requirements/quality.in
@@ -43,15 +43,15 @@ pycodestyle==2.14.0
     # via -r requirements/quality.in
 pydocstyle==6.3.0
     # via -r requirements/quality.in
-pylint==4.0.5
+pylint==4.0.6
     # via
     #   edx-lint
     #   pylint-celery
     #   pylint-django
     #   pylint-plugin-utils
 pylint-celery==0.3
     # via edx-lint
-pylint-django==2.7.0
+pylint-django==2.8.0
     # via edx-lint
 pylint-plugin-utils==0.9.0
     # via
@@ -67,11 +67,11 @@ snowballstemmer==3.1.1
     # via pydocstyle
 sqlparse==0.5.5
     # via django
-stevedore==5.8.0
+stevedore==5.9.0
     # via code-annotations
 text-unidecode==1.3
     # via python-slugify
-tomlkit==0.15.0
+tomlkit==0.15.1
     # via
     #   edx-lint
     #   pylint

requirements/test.txt

@@ -4,7 +4,7 @@
 #
 #    make upgrade
 #
-coverage[toml]==7.14.1
+coverage[toml]==7.15.2
     # via pytest-cov
 ddt==1.3.1
     # via -r requirements/test.in
@@ -18,7 +18,7 @@ pluggy==1.6.0
     #   pytest-cov
 pygments==2.20.0
     # via pytest
-pytest==9.0.3
+pytest==9.1.1
     # via
     #   pytest-cov
     #   pytest-django