chore: python requirements update (#4478)

requirements/common_constraints.txt

@@ -29,3 +29,7 @@ elasticsearch<7.14.0
 # This can be unpinned once https://github.com/openedx/edx-platform/issues/34586
 # has been resolved and edx-platform is running with pymongo>=4.4.0
 event-tracking<2.4.1
+
+# Cause: https://github.com/openedx/edx-lint/issues/458
+# This can be unpinned once https://github.com/openedx/edx-lint/issues/459 has been resolved.
+pip<24.3

requirements/local.txt

@@ -64,9 +64,9 @@ boltons==21.0.0
     #   face
     #   glom
     #   semgrep
-boto3==1.35.44
+boto3==1.35.49
     # via django-ses
-botocore==1.35.44
+botocore==1.35.49
     # via
     #   boto3
     #   s3transfer
@@ -372,9 +372,9 @@ edx-django-utils==7.0.0
     #   getsmarter-api-clients
     #   openedx-events
     #   taxonomy-connector
-edx-drf-extensions==10.4.0
+edx-drf-extensions==10.5.0
     # via -r requirements/base.in
-edx-event-bus-kafka==5.8.1
+edx-event-bus-kafka==6.0.0
     # via -r requirements/base.in
 edx-event-bus-redis==0.5.1
     # via -r requirements/base.in
@@ -418,7 +418,7 @@ face==22.0.0
     # via glom
 factory-boy==3.3.1
     # via -r requirements/test.in
-faker==30.6.0
+faker==30.8.1
     # via factory-boy
 fastavro==1.9.7
     # via openedx-events
@@ -429,7 +429,7 @@ filelock==3.16.1
     #   virtualenv
 freezegun==1.5.1
     # via -r requirements/test.in
-frozenlist==1.4.1
+frozenlist==1.5.0
     # via
     #   aiohttp
     #   aiosignal
@@ -586,9 +586,9 @@ prompt-toolkit==3.0.48
     # via click-repl
 propcache==0.2.0
     # via yarl
-proto-plus==1.24.0
+proto-plus==1.25.0
     # via google-api-core
-protobuf==5.28.2
+protobuf==5.28.3
     # via
     #   google-api-core
     #   googleapis-common-protos
@@ -719,7 +719,7 @@ pyyaml==6.0.2
     #   responses
 rcssmin==1.1.2
     # via django-compressor
-redis==5.1.1
+redis==5.2.0
     # via
     #   -r requirements/base.in
     #   walrus
@@ -798,7 +798,7 @@ sniffio==1.3.1
     # via trio
 snowballstemmer==2.2.0
     # via sphinx
-snowflake-connector-python==3.12.2
+snowflake-connector-python==3.12.3
     # via -r requirements/base.in
 social-auth-app-django==5.4.2
     # via
@@ -849,7 +849,7 @@ testfixtures==8.3.0
     # via -r requirements/test.in
 text-unidecode==1.3
     # via python-slugify
-tinycss2==1.3.0
+tinycss2==1.4.0
     # via
     #   cairosvg
     #   cssselect2
@@ -919,7 +919,7 @@ wsproto==1.2.0
     # via trio-websocket
 xss-utils==0.6.0
     # via -r requirements/base.in
-yarl==1.15.5
+yarl==1.16.0
     # via aiohttp
 zeep==4.3.1
     # via simple-salesforce

requirements/pip.txt

@@ -9,6 +9,8 @@ wheel==0.44.0
 
 # The following packages are considered to be unsafe in a requirements file:
 pip==24.2
-    # via -r requirements/pip.in
+    # via
+    #   -c requirements/common_constraints.txt
+    #   -r requirements/pip.in
 setuptools==75.2.0
     # via -r requirements/pip.in

requirements/production.txt

@@ -41,9 +41,9 @@ beautifulsoup4==4.12.3
     #   taxonomy-connector
 billiard==4.2.1
     # via celery
-boto3==1.35.44
+boto3==1.35.49
     # via django-ses
-botocore==1.35.44
+botocore==1.35.49
     # via
     #   boto3
     #   s3transfer
@@ -308,9 +308,9 @@ edx-django-utils==7.0.0
     #   getsmarter-api-clients
     #   openedx-events
     #   taxonomy-connector
-edx-drf-extensions==10.4.0
+edx-drf-extensions==10.5.0
     # via -r requirements/base.in
-edx-event-bus-kafka==5.8.1
+edx-event-bus-kafka==6.0.0
     # via -r requirements/base.in
 edx-event-bus-redis==0.5.1
     # via -r requirements/base.in
@@ -346,7 +346,7 @@ fastavro==1.9.7
     # via openedx-events
 filelock==3.16.1
     # via snowflake-connector-python
-frozenlist==1.4.1
+frozenlist==1.5.0
     # via
     #   aiohttp
     #   aiosignal
@@ -469,9 +469,9 @@ prompt-toolkit==3.0.48
     # via click-repl
 propcache==0.2.0
     # via yarl
-proto-plus==1.24.0
+proto-plus==1.25.0
     # via google-api-core
-protobuf==5.28.2
+protobuf==5.28.3
     # via
     #   google-api-core
     #   googleapis-common-protos
@@ -542,7 +542,7 @@ pyyaml==6.0.2
     #   edx-django-release-util
 rcssmin==1.1.2
     # via django-compressor
-redis==5.1.1
+redis==5.2.0
     # via
     #   -r requirements/base.in
     #   walrus
@@ -593,7 +593,7 @@ six==1.16.0
     #   edx-django-release-util
     #   elasticsearch-dsl
     #   python-dateutil
-snowflake-connector-python==3.12.2
+snowflake-connector-python==3.12.3
     # via -r requirements/base.in
 social-auth-app-django==5.4.2
     # via
@@ -618,7 +618,7 @@ taxonomy-connector==1.54.0
     # via -r requirements/base.in
 text-unidecode==1.3
     # via python-slugify
-tinycss2==1.3.0
+tinycss2==1.4.0
     # via
     #   cairosvg
     #   cssselect2
@@ -662,15 +662,15 @@ webencodings==0.5.1
     #   tinycss2
 xss-utils==0.6.0
     # via -r requirements/base.in
-yarl==1.15.5
+yarl==1.16.0
     # via aiohttp
 zeep==4.3.1
     # via simple-salesforce
 zipp==3.20.2
     # via importlib-metadata
 zope-event==5.0
     # via gevent
-zope-interface==7.1.0
+zope-interface==7.1.1
     # via gevent
 
 # The following packages are considered to be unsafe in a requirements file: