fix: pin to resolve make upgrade build failure

CHANGELOG.rst

@@ -15,6 +15,11 @@ Unreleased
 ----------
 
 =========================
+[10.21.15] - 2025-11-14
+---------------------
+* fix: pin `pip<25.3` to resolve make upgrade build failure
+* See issue https://github.com/openedx/public-engineering/issues/440 for details.
+---------------------
 [10.21.14] - 2025-11-13
 -----------------------
   * fix: use group uuid in hex format for filtering

Makefile

@@ -15,7 +15,7 @@ clean: ## remove generated byte code, coverage reports, and build artifacts
 	rm -fr *.egg-info
 
 piptools-requirements: ## install tools prior to requirements
-	pip install -q -r requirements/pip_tools.txt
+	pip install -q -r requirements/pip_tools.txt -c requirements/constraints.txt
 
 coverage: clean ## generate and view HTML coverage report
 	py.test --cov-report html

enterprise_data/__init__.py

@@ -2,4 +2,4 @@
 Enterprise data api application. This Django app exposes API endpoints used by enterprises.
 """
 
-__version__ = "10.21.14"
+__version__ = "10.21.15"

requirements/base.txt

@@ -10,25 +10,25 @@ asgiref==3.10.0
     # via django
 asn1crypto==1.5.1
     # via snowflake-connector-python
-awscli==1.42.59
+awscli==1.42.74
     # via -r requirements/reporting.in
 bcrypt==5.0.0
     # via paramiko
-billiard==4.2.2
+billiard==4.2.3
     # via celery
-boto3==1.40.59
+boto3==1.40.74
     # via
     #   -r requirements/reporting.in
     #   snowflake-connector-python
-botocore==1.40.59
+botocore==1.40.74
     # via
     #   awscli
     #   boto3
     #   s3transfer
     #   snowflake-connector-python
 celery==5.3.6
     # via -r requirements/reporting.in
-certifi==2025.10.5
+certifi==2025.11.12
     # via
     #   py2neo
     #   requests
@@ -41,7 +41,7 @@ charset-normalizer==3.4.4
     # via
     #   requests
     #   snowflake-connector-python
-click==8.3.0
+click==8.3.1
     # via
     #   celery
     #   click-didyoumean
@@ -65,7 +65,7 @@ cryptography==46.0.3
     #   pyjwt
     #   pyopenssl
     #   snowflake-connector-python
-django==4.2.25
+django==5.2.8
     # via
     #   -c requirements/common_constraints.txt
     #   -r requirements/base.in
@@ -85,7 +85,7 @@ django-crum==0.7.9
     #   edx-rbac
 django-fernet-fields-v2==0.9
     # via -r requirements/base.in
-django-filter==25.1
+django-filter==25.2
     # via -r requirements/base.in
 django-model-utils==5.0.0
     # via
@@ -127,7 +127,7 @@ edx-rest-api-client==6.2.0
     # via -r requirements/base.in
 factory-boy==3.3.3
     # via -r requirements/base.in
-faker==37.12.0
+faker==38.0.0
     # via factory-boy
 filelock==3.20.0
     # via snowflake-connector-python
@@ -143,7 +143,7 @@ jmespath==1.0.1
     # via
     #   boto3
     #   botocore
-kombu==5.5.4
+kombu==5.6.0
     # via celery
 monotonic==1.6
     # via py2neo
@@ -166,7 +166,7 @@ platformdirs==4.5.0
     # via snowflake-connector-python
 prompt-toolkit==3.0.52
     # via click-repl
-psutil==7.1.2
+psutil==7.1.3
     # via edx-django-utils
 py2neo @ https://github.com/overhangio/py2neo/releases/download/2021.2.3/py2neo-2021.2.3.tar.gz
     # via -r requirements/reporting.in
@@ -186,9 +186,9 @@ pyjwt[crypto]==2.10.1
     #   snowflake-connector-python
 pyminizip==0.2.6
     # via -r requirements/reporting.in
-pymongo==4.15.3
+pymongo==4.15.4
     # via edx-opaque-keys
-pynacl==1.6.0
+pynacl==1.6.1
     # via
     #   edx-django-utils
     #   paramiko

requirements/ci.txt

@@ -4,13 +4,13 @@
 #
 #    make upgrade
 #
-cachetools==6.2.1
+cachetools==6.2.2
     # via tox
 chardet==5.2.0
     # via tox
 colorama==0.4.6
     # via tox
-coverage==7.11.0
+coverage==7.11.3
     # via -r requirements/ci.in
 distlib==0.4.0
     # via virtualenv
@@ -32,5 +32,5 @@ pyproject-api==1.10.0
     # via tox
 tox==4.32.0
     # via -r requirements/ci.in
-virtualenv==20.35.3
+virtualenv==20.35.4
     # via tox

requirements/common_constraints.txt

@@ -13,9 +13,16 @@
 #  this file from Github directly. It does not require packaging in edx-lint.
 
 # using LTS django version
-Django<5.0
+Django<6.0
 
 # elasticsearch>=7.14.0 includes breaking changes in it which caused issues in discovery upgrade process.
 # elastic search changelog: https://www.elastic.co/guide/en/enterprise-search/master/release-notes-7.14.0.html
 # See https://github.com/openedx/edx-platform/issues/35126 for more info
 elasticsearch<7.14.0
+
+# pip 25.3 is incompatible with pip-tools hence causing failures during the build process
+# Make upgrade command and all requirements upgrade jobs are broken due to this.
+# See issue https://github.com/openedx/public-engineering/issues/440 for details regarding the ongoing fix.
+# The constraint can be removed once a release (pip-tools > 7.5.1) is available with support for pip 25.3
+# Issue to track this dependency and unpin later on: https://github.com/openedx/edx-lint/issues/503
+pip<25.3

requirements/constraints.txt

@@ -12,3 +12,10 @@
 
 # Common constraints for edx repos
 -c common_constraints.txt
+
+# pip 25.3 is incompatible with pip-tools hence causing failures during the build process 
+# Make upgrade command and all requirements upgrade jobs are broken due to this.
+# See issue https://github.com/openedx/public-engineering/issues/440 for details regarding the ongoing fix.
+# The constraint can be removed once a release (pip-tools > 7.5.1) is available with support for pip 25.3
+# Issue to track this dependency and unpin later on: https://github.com/openedx/edx-lint/issues/503
+pip<25.3

requirements/dev.txt

@@ -14,29 +14,29 @@ astroid==3.3.11
     # via
     #   pylint
     #   pylint-celery
-awscli==1.42.59
+awscli==1.42.74
     # via -r requirements/reporting.in
 bcrypt==5.0.0
     # via paramiko
-billiard==4.2.2
+billiard==4.2.3
     # via celery
-boto3==1.40.59
+boto3==1.40.74
     # via
     #   -r requirements/reporting.in
     #   snowflake-connector-python
-botocore==1.40.59
+botocore==1.40.74
     # via
     #   awscli
     #   boto3
     #   s3transfer
     #   snowflake-connector-python
 build==1.3.0
     # via pip-tools
-cachetools==6.2.1
+cachetools==6.2.2
     # via tox
 celery==5.3.6
     # via -r requirements/reporting.in
-certifi==2025.10.5
+certifi==2025.11.12
     # via
     #   py2neo
     #   requests
@@ -53,7 +53,7 @@ charset-normalizer==3.4.4
     # via
     #   requests
     #   snowflake-connector-python
-click==8.3.0
+click==8.3.1
     # via
     #   celery
     #   click-didyoumean
@@ -88,13 +88,13 @@ cryptography==46.0.3
     #   pyopenssl
     #   secretstorage
     #   snowflake-connector-python
-diff-cover==9.7.1
+diff-cover==9.7.2
     # via -r requirements/dev-enterprise_data.in
 dill==0.4.0
     # via pylint
 distlib==0.4.0
     # via virtualenv
-django==4.2.25
+django==5.2.8
     # via
     #   -c requirements/common_constraints.txt
     #   -r requirements/base.in
@@ -115,7 +115,7 @@ django-crum==0.7.9
     #   edx-rbac
 django-fernet-fields-v2==0.9
     # via -r requirements/base.in
-django-filter==25.1
+django-filter==25.2
     # via -r requirements/base.in
 django-model-utils==5.0.0
     # via
@@ -165,7 +165,7 @@ edx-rest-api-client==6.2.0
     # via -r requirements/base.in
 factory-boy==3.3.3
     # via -r requirements/base.in
-faker==37.12.0
+faker==38.0.0
     # via factory-boy
 filelock==3.20.0
     # via
@@ -204,9 +204,9 @@ jmespath==1.0.1
     # via
     #   boto3
     #   botocore
-keyring==25.6.0
+keyring==25.7.0
     # via twine
-kombu==5.5.4
+kombu==5.6.0
     # via celery
 lxml[html-clean]==6.0.2
     # via
@@ -230,7 +230,7 @@ more-itertools==10.8.0
     #   jaraco-functools
 mysql-connector-python==9.5.0
     # via -r requirements/base.in
-nh3==0.3.1
+nh3==0.3.2
     # via readme-renderer
 packaging==25.0
     # via
@@ -251,7 +251,7 @@ pgpy==0.6.0
     # via -r requirements/reporting.in
 pillow==12.0.0
     # via pansi
-pip-tools==7.5.1
+pip-tools==7.5.2
     # via -r requirements/dev-enterprise_data.in
 platformdirs==4.5.0
     # via
@@ -267,7 +267,7 @@ polib==1.2.0
     # via edx-i18n-tools
 prompt-toolkit==3.0.52
     # via click-repl
-psutil==7.1.2
+psutil==7.1.3
     # via edx-django-utils
 py2neo @ https://github.com/overhangio/py2neo/releases/download/2021.2.3/py2neo-2021.2.3.tar.gz
     # via -r requirements/reporting.in
@@ -309,9 +309,9 @@ pylint-plugin-utils==0.9.0
     #   pylint-django
 pyminizip==0.2.6
     # via -r requirements/reporting.in
-pymongo==4.15.3
+pymongo==4.15.4
     # via edx-opaque-keys
-pynacl==1.6.0
+pynacl==1.6.1
     # via
     #   edx-django-utils
     #   paramiko
@@ -364,7 +364,7 @@ s3transfer==0.14.0
     # via
     #   awscli
     #   boto3
-secretstorage==3.4.0
+secretstorage==3.4.1
     # via keyring
 semantic-version==2.10.0
     # via edx-drf-extensions
@@ -389,7 +389,7 @@ stevedore==5.5.0
     #   code-annotations
     #   edx-django-utils
     #   edx-opaque-keys
-testfixtures==9.2.0
+testfixtures==10.0.0
     # via -r requirements/quality.in
 text-unidecode==1.3
     # via python-slugify
@@ -426,7 +426,7 @@ vine==5.1.0
     #   amqp
     #   celery
     #   kombu
-virtualenv==20.35.3
+virtualenv==20.35.4
     # via tox
 wcwidth==0.2.14
     # via prompt-toolkit

requirements/django.txt

@@ -1 +1 @@
-django==4.2.25
+django==5.2.8

requirements/pip.txt

@@ -8,7 +8,10 @@ wheel==0.45.1
     # via -r requirements/pip.in
 
 # The following packages are considered to be unsafe in a requirements file:
-pip==25.3
-    # via -r requirements/pip.in
+pip==25.2
+    # via
+    #   -c requirements/common_constraints.txt
+    #   -c requirements/constraints.txt
+    #   -r requirements/pip.in
 setuptools==80.9.0
     # via -r requirements/pip.in

requirements/pip_tools.txt

@@ -6,11 +6,11 @@
 #
 build==1.3.0
     # via pip-tools
-click==8.3.0
+click==8.3.1
     # via pip-tools
 packaging==25.0
     # via build
-pip-tools==7.5.1
+pip-tools==7.5.2
     # via -r requirements/pip_tools.in
 pyproject-hooks==1.2.0
     # via