chore: Upgrade Python requirements (#423)

requirements/base.txt

@@ -10,7 +10,7 @@ certifi==2024.7.4
     # via
     #   elasticsearch
     #   requests
-cffi==1.16.0
+cffi==1.17.0
     # via
     #   cryptography
     #   pynacl
@@ -20,7 +20,7 @@ click==8.1.7
     # via edx-django-utils
 cryptography==43.0.0
     # via pyjwt
-django==4.2.14
+django==4.2.15
     # via
     #   -c requirements/common_constraints.txt
     #   -r requirements/base.in
@@ -89,15 +89,15 @@ elasticsearch-dsl==7.4.1
     #   -r requirements/base.in
     #   django-elasticsearch-dsl
     #   django-elasticsearch-dsl-drf
-gunicorn==22.0.0
+gunicorn==23.0.0
     # via -r requirements/base.in
 idna==2.10
     # via requests
 inflection==0.5.1
     # via drf-yasg
 mysqlclient==2.2.4
     # via -r requirements/base.in
-newrelic==9.12.0
+newrelic==9.13.0
     # via
     #   -r requirements/base.in
     #   edx-django-utils
@@ -132,7 +132,7 @@ python-dateutil==2.4.0
     #   elasticsearch-dsl
 pytz==2024.1
     # via drf-yasg
-pyyaml==6.0.1
+pyyaml==6.0.2
     # via
     #   drf-yasg
     #   edx-django-release-util

requirements/ci.txt

@@ -28,7 +28,7 @@ pluggy==1.5.0
     # via tox
 pyproject-api==1.7.1
     # via tox
-tox==4.16.0
+tox==4.17.1
     # via -r requirements/ci.in
 virtualenv==20.26.3
     # via tox

requirements/common_constraints.txt

@@ -28,15 +28,6 @@ elasticsearch<7.14.0
 # django-simple-history>3.0.0 adds indexing and causes a lot of migrations to be affected
 django-simple-history==3.0.0
 
-# opentelemetry requires version 6.x at the moment:
-# https://github.com/open-telemetry/opentelemetry-python/issues/3570
-# Normally this could be added as a constraint in edx-django-utils, where we're
-# adding the opentelemetry dependency. However, when we compile pip-tools.txt,
-# that uses version 7.x, and then there's no undoing that when compiling base.txt.
-# So we need to pin it globally, for now.
-# Ticket for unpinning: https://github.com/openedx/edx-lint/issues/407
-importlib-metadata<7
-
 # Cause: https://github.com/openedx/event-tracking/pull/290
 # event-tracking 2.4.1 upgrades to pymongo 4.4.0 which is not supported on edx-platform.
 # We will pin event-tracking to do not break existing installations

requirements/django.txt

@@ -1 +1 @@
-django==4.2.14
+django==4.2.15

requirements/test.txt

@@ -18,7 +18,7 @@ certifi==2024.7.4
     #   -r requirements/base.txt
     #   elasticsearch
     #   requests
-cffi==1.16.0
+cffi==1.17.0
     # via
     #   -r requirements/base.txt
     #   cryptography
@@ -132,13 +132,13 @@ elasticsearch-dsl==7.4.1
     #   django-elasticsearch-dsl-drf
 factory-boy==3.3.0
     # via -r requirements/test.in
-faker==26.1.0
+faker==26.3.0
     # via factory-boy
 filelock==3.15.4
     # via
     #   tox
     #   virtualenv
-gunicorn==22.0.0
+gunicorn==23.0.0
     # via -r requirements/base.txt
 idna==2.10
     # via
@@ -164,7 +164,7 @@ more-itertools==5.0.0
     #   -r requirements/test.in
 mysqlclient==2.2.4
     # via -r requirements/base.txt
-newrelic==9.12.0
+newrelic==9.13.0
     # via
     #   -r requirements/base.txt
     #   edx-django-utils
@@ -243,7 +243,7 @@ pytz==2024.1
     # via
     #   -r requirements/base.txt
     #   drf-yasg
-pyyaml==6.0.1
+pyyaml==6.0.2
     # via
     #   -r requirements/base.txt
     #   code-annotations