Skip to content

fix: upgrade openedx-forum to 0.4.1.post1 #39232

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
feanil merged 3 commits into from
Oct 14, 2026
+43 −7
Merged

fix: upgrade openedx-forum to 0.4.1.post1 #39232

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
8450899
fix: upgrade openedx-forum to 0.4.1.post1
feanil Oct 13, 2026
2c7a201
build: install the pinned pip before building static-asset deps
feanil Oct 14, 2026
2fc9a1c
build: refresh common constraints for the compile-requirements check
feanil Oct 14, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions .github/workflows/static-assets-check.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -70,6 +70,7 @@ jobs:

- name: Install Limited Python Deps for Build
run: |
pip install -r requirements/pip.txt
pip install -r requirements/edx/assets.txt

- name: Add node_modules bin to $Path
Expand Down
23 changes: 23 additions & 0 deletions requirements/common_constraints.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -22,3 +22,26 @@ Django<6.0
# elastic search changelog: https://www.elastic.co/guide/en/enterprise-search/master/release-notes-7.14.0.html
# See https://github.com/openedx/edx-platform/issues/35126 for more info
elasticsearch<7.14.0

# 2026-07-06: Constrain social-auth-* packages to the latest version compatible with
# edx-drf-extensions<=10.6.0. (Newer versions require a POST instead of a GET.)
# Tracking issue: https://github.com/openedx/edx-drf-extensions/issues/561
social-auth-app-django<6.0.0
social-auth-core<5.0.0

# 2026-08-11: pip-tools is only tested against the latest pip released at the time
# pip-tools was released; also, pip-tools package dependencies are extremely permissive
# about the pip version required, so the dependency resolver will not prevent an unwanted
# pip upgrade which would break pip-tools. The end result is that pip MUST be constrained
# by all pip-tools users in order to avoid potentially weeks-long lapses in pip <->
# pip-tools compatibility. We've constrained pip here in common_constraints.txt in the
# past, but always removed it once the issue was "fixed". Removing this constraint was
# always a mistake.
#
# This is a semi-permanent constraint and should be manually bumped after each pip-tools
# release.
#
# Exceptional conditions for removal:
# - We stop using pip-tools, OR
# - We migrate to the proposed `pip-tools[stable]` extra: https://github.com/jazzband/pip-tools/pull/2257
pip<26.2.1 # Known to work with pip-tools==7.6.1
6 changes: 4 additions & 2 deletions requirements/constraints.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -120,15 +120,17 @@ openedx-learning==0.26.0
openai<=0.28.1

# Date: 2026-06-04
# Cap openedx-forum to 0.4.1 on the Teak release line:
# Cap openedx-forum to the 0.4.1 line on the Teak release line:
# * 0.4.1 contains the fix for the "pinned" NULL sort bug
# (https://github.com/openedx/forum/pull/270 — discussion threads were not
# ordering correctly when sorted by "recent first"). See user report:
# https://discuss.openedx.org/t/discuss-forum-messages-order-not-organized-as-expected-in-teak/18665
# * 0.4.2 drops Python 3.11 support, which Teak still supports.
# * 0.4.3 removes the MongoDB backend, which Teak deployments may still rely on.
# * 0.4.1.post1 is a security release on the 0.4.1 line
# (https://github.com/openedx/forum/security/advisories/GHSA-c6fp-f54c-6cv4).
# Remove this cap on master / post-Teak release lines.
openedx-forum<=0.4.1
openedx-forum<0.4.2

# Date: 2026-06-04
# openedx-forum>=0.4.1 introduces an (off-by-default) Typesense search backend
Expand Down
4 changes: 3 additions & 1 deletion requirements/edx/base.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -815,7 +815,7 @@ openedx-filters==2.0.1
# -r requirements/edx/kernel.in
# lti-consumer-xblock
# ora2
openedx-forum==0.4.1
openedx-forum==0.4.1.post1
# via
# -c requirements/edx/../constraints.txt
# -r requirements/edx/kernel.in
Expand Down Expand Up @@ -1111,11 +1111,13 @@ snowflake-connector-python==3.14.1
# via edx-enterprise
social-auth-app-django==5.4.1
# via
# -c requirements/edx/../common_constraints.txt
# -c requirements/edx/../constraints.txt
# -r requirements/edx/kernel.in
# edx-auth-backends
social-auth-core==4.5.4
# via
# -c requirements/edx/../common_constraints.txt
# -c requirements/edx/../constraints.txt
# -r requirements/edx/kernel.in
# edx-auth-backends
Expand Down
4 changes: 3 additions & 1 deletion requirements/edx/development.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -1374,7 +1374,7 @@ openedx-filters==2.0.1
# -r requirements/edx/testing.txt
# lti-consumer-xblock
# ora2
openedx-forum==0.4.1
openedx-forum==0.4.1.post1
# via
# -c requirements/edx/../constraints.txt
# -r requirements/edx/doc.txt
Expand Down Expand Up @@ -1951,12 +1951,14 @@ snowflake-connector-python==3.14.1
# edx-enterprise
social-auth-app-django==5.4.1
# via
# -c requirements/edx/../common_constraints.txt
# -c requirements/edx/../constraints.txt
# -r requirements/edx/doc.txt
# -r requirements/edx/testing.txt
# edx-auth-backends
social-auth-core==4.5.4
# via
# -c requirements/edx/../common_constraints.txt
# -c requirements/edx/../constraints.txt
# -r requirements/edx/doc.txt
# -r requirements/edx/testing.txt
Expand Down
4 changes: 3 additions & 1 deletion requirements/edx/doc.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -986,7 +986,7 @@ openedx-filters==2.0.1
# -r requirements/edx/base.txt
# lti-consumer-xblock
# ora2
openedx-forum==0.4.1
openedx-forum==0.4.1.post1
# via
# -c requirements/edx/../constraints.txt
# -r requirements/edx/base.txt
Expand Down Expand Up @@ -1361,11 +1361,13 @@ snowflake-connector-python==3.14.1
# edx-enterprise
social-auth-app-django==5.4.1
# via
# -c requirements/edx/../common_constraints.txt
# -c requirements/edx/../constraints.txt
# -r requirements/edx/base.txt
# edx-auth-backends
social-auth-core==4.5.4
# via
# -c requirements/edx/../common_constraints.txt
# -c requirements/edx/../constraints.txt
# -r requirements/edx/base.txt
# edx-auth-backends
Expand Down
4 changes: 3 additions & 1 deletion requirements/edx/testing.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -1044,7 +1044,7 @@ openedx-filters==2.0.1
# -r requirements/edx/base.txt
# lti-consumer-xblock
# ora2
openedx-forum==0.4.1
openedx-forum==0.4.1.post1
# via
# -c requirements/edx/../constraints.txt
# -r requirements/edx/base.txt
Expand Down Expand Up @@ -1486,11 +1486,13 @@ snowflake-connector-python==3.14.1
# edx-enterprise
social-auth-app-django==5.4.1
# via
# -c requirements/edx/../common_constraints.txt
# -c requirements/edx/../constraints.txt
# -r requirements/edx/base.txt
# edx-auth-backends
social-auth-core==4.5.4
# via
# -c requirements/edx/../common_constraints.txt
# -c requirements/edx/../constraints.txt
# -r requirements/edx/base.txt
# edx-auth-backends
Expand Down
4 changes: 3 additions & 1 deletion requirements/pip.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -9,6 +9,8 @@ wheel==0.45.1

# The following packages are considered to be unsafe in a requirements file:
pip==24.2
# via -r requirements/pip.in
# via
# -c requirements/common_constraints.txt
# -r requirements/pip.in
setuptools==79.0.0
# via -r requirements/pip.in
Loading