Dropped django 4.2 support. Bumped dependencies

.github/workflows/ci.yml

@@ -15,7 +15,7 @@ jobs:
       matrix:
         os: [ubuntu-latest]
         python-version: ['3.11', '3.12']
-        toxenv: [quality, django42-drf314, django42-drflatest, django52-drf314, django52-drflatest]
+        toxenv: [quality, django52-drf314, django52-drflatest]
 
     steps:
     - uses: actions/checkout@v6
@@ -36,7 +36,7 @@ jobs:
       run: tox
 
     - name: Run Coverage
-      if: matrix.python-version == '3.11' && matrix.toxenv=='django42-drflatest'
+      if: matrix.python-version == '3.11' && matrix.toxenv=='django52-drflatest'
       uses: codecov/codecov-action@v5
       with:
         flags: unittests

CHANGELOG.rst

@@ -11,6 +11,11 @@ Change Log
 
 .. There should always be an "Unreleased" section for changes pending release.
 
+Unreleased
+----------
+
+* Dropped Django 4.2 support; upgraded Django to 5.2 in test dependencies; bumped pip to 26.0.1
+
 [4.8.0] - 2025-04-25
 --------------------
 

requirements/base.txt

@@ -10,19 +10,19 @@ appdirs==1.4.4
     # via fs
 asgiref==3.11.1
     # via django
-attrs==25.4.0
+attrs==26.1.0
     # via openedx-events
 billiard==4.2.4
     # via celery
 celery==5.6.2
     # via event-tracking
-certifi==2026.1.4
+certifi==2026.2.25
     # via requests
 cffi==2.0.0
     # via
     #   cryptography
     #   pynacl
-charset-normalizer==3.4.4
+charset-normalizer==3.4.6
     # via requests
 click==8.3.1
     # via
@@ -38,11 +38,11 @@ click-plugins==1.1.1.2
     # via celery
 click-repl==0.3.0
     # via celery
-code-annotations==2.3.0
+code-annotations==3.0.0
     # via edx-toggles
 cryptography==46.0.5
     # via pyjwt
-django==4.2.28
+django==5.2.12
     # via
     #   -c requirements/common_constraints.txt
     #   -r requirements/base.in
@@ -67,7 +67,7 @@ django-waffle==5.0.0
     #   edx-django-utils
     #   edx-drf-extensions
     #   edx-toggles
-djangorestframework==3.16.1
+djangorestframework==3.17.1
     # via
     #   -r requirements/base.in
     #   drf-jwt
@@ -86,7 +86,7 @@ edx-django-utils==8.0.1
     #   openedx-events
 edx-drf-extensions==10.6.0
     # via -r requirements/base.in
-edx-opaque-keys[django]==3.0.0
+edx-opaque-keys[django]==3.1.0
     # via
     #   -r requirements/base.in
     #   edx-ccx-keys
@@ -96,7 +96,7 @@ edx-toggles==5.4.1
     # via
     #   -r requirements/base.in
     #   event-tracking
-event-tracking==3.3.0
+event-tracking==4.0.0
     # via -r requirements/base.in
 fastavro==1.12.1
     # via openedx-events
@@ -117,7 +117,7 @@ markupsafe==3.0.3
     #   jinja2
     #   mako
     #   xblock
-openedx-events==10.5.0
+openedx-events==11.0.0
     # via event-tracking
 packaging==26.0
     # via kombu
@@ -127,7 +127,7 @@ psutil==7.2.2
     # via edx-django-utils
 pycparser==3.0
     # via cffi
-pyjwt[crypto]==2.11.0
+pyjwt[crypto]==2.12.1
     # via
     #   drf-jwt
     #   edx-drf-extensions
@@ -143,7 +143,7 @@ python-dateutil==2.9.0.post0
     #   xblock
 python-slugify==8.0.4
     # via code-annotations
-pytz==2025.2
+pytz==2026.1.post1
     # via
     #   -r requirements/base.in
     #   event-tracking
@@ -166,7 +166,7 @@ six==1.17.0
     #   python-dateutil
 sqlparse==0.5.5
     # via django
-stevedore==5.6.0
+stevedore==5.7.0
     # via
     #   code-annotations
     #   edx-django-utils
@@ -188,15 +188,15 @@ vine==5.1.0
     #   kombu
 wcwidth==0.6.0
     # via prompt-toolkit
-web-fragments==3.1.0
+web-fragments==4.0.0
     # via xblock
 webob==1.8.9
     # via xblock
-xblock==5.3.0
+xblock==6.0.0
     # via -r requirements/base.in
 
 # The following packages are considered to be unsafe in a requirements file:
-setuptools==82.0.0
+setuptools==82.0.1
     # via
     #   -r requirements/base.in
     #   fs

requirements/ci.txt

@@ -4,16 +4,15 @@
 #
 #    make upgrade
 #
-cachetools==7.0.1
-    # via tox
-chardet==5.2.0
+cachetools==7.0.5
     # via tox
 colorama==0.4.6
     # via tox
 distlib==0.4.0
     # via virtualenv
-filelock==3.20.3
+filelock==3.25.2
     # via
+    #   python-discovery
     #   tox
     #   virtualenv
 mock==5.2.0
@@ -22,15 +21,20 @@ packaging==26.0
     # via
     #   pyproject-api
     #   tox
-platformdirs==4.5.1
+platformdirs==4.9.4
     # via
+    #   python-discovery
     #   tox
     #   virtualenv
 pluggy==1.6.0
     # via tox
 pyproject-api==1.10.0
     # via tox
-tox==4.34.1
+python-discovery==1.2.0
+    # via virtualenv
+tomli-w==1.2.0
+    # via tox
+tox==4.50.3
     # via -r requirements/ci.in
-virtualenv==20.36.1
+virtualenv==21.2.0
     # via tox

requirements/common_constraints.txt

@@ -12,15 +12,9 @@
 #  this file from Github directly. It does not require packaging in edx-lint.
 
 # using LTS django version
-Django<5.0
+Django<6.0
 
 # elasticsearch>=7.14.0 includes breaking changes in it which caused issues in discovery upgrade process.
 # elastic search changelog: https://www.elastic.co/guide/en/enterprise-search/master/release-notes-7.14.0.html
 # See https://github.com/openedx/edx-platform/issues/35126 for more info
 elasticsearch<7.14.0
-
-# pip 26 is incompatible with pip-tools hence causing failures during the build process
-# Make upgrade command and all requirements upgrade jobs are broken due to this.
-# The constraint can be removed once a release (pip-tools > 7.5.2) is available with support for pip 26
-# Issue to track this dependency and unpin later on: https://github.com/jazzband/pip-tools/issues/2319
-pip<26.0