From 1415d3af91171215d341ce81213e1f7704a28726 Mon Sep 17 00:00:00 2001
From: Agrendalath <piotr@surowiec.it>
Date: Tue, 10 Mar 2026 19:06:15 +0100
Subject: [PATCH 1/5] feat: mark course key admin widget as safe

This is required in Django 5.2, which automatically escapes this code.
---
 learning_paths/admin.py | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/learning_paths/admin.py b/learning_paths/admin.py
index 13f0dfe..86ec2d7 100644
--- a/learning_paths/admin.py
+++ b/learning_paths/admin.py
@@ -11,6 +11,7 @@
 from django.db import transaction
 from django.http import HttpResponseRedirect
 from django.urls import reverse
+from django.utils.safestring import mark_safe
 from django.utils.translation import gettext_lazy as _
 from django_object_actions import DjangoObjectActions, action
 
@@ -62,7 +63,7 @@ def render(self, name, value, attrs=None, renderer=None):
         data_list_id = f"datalist_{name}"
         options = "\n".join(f'<option value="{choice}" />' for choice in self.choices)
         datalist_html = f'<datalist id="{data_list_id}">\n{options}\n</datalist>'
-        return f"{text_input_html}\n{datalist_html}"
+        return mark_safe(f"{text_input_html}\n{datalist_html}")
 
 
 class LearningPathStepForm(forms.ModelForm):

From b9b57cbf56c0ab98afb739f06c9a1a051f0f3eb2 Mon Sep 17 00:00:00 2001
From: Agrendalath <piotr@surowiec.it>
Date: Fri, 12 Jun 2026 15:32:20 +0200
Subject: [PATCH 2/5] refactor: replace black with ruff, add yamllint

---
 .annotation_safe_list.yml                 |  34 ++--
 .github/workflows/ci.yml                  |  52 +++----
 .github/workflows/lint.yml                |  17 --
 .pii_annotations.yml                      |  44 +++---
 .readthedocs.yaml                         |   4 +-
 .yamllint.yml                             |  23 +++
 Makefile                                  |   2 +-
 catalog-info.yaml                         |  16 +-
 codecov.yml                               |   4 +-
 learning_paths/api/v1/tests/test_views.py |   8 -
 pyproject.toml                            |  17 +-
 requirements/base.txt                     |  99 ++++++------
 requirements/ci.txt                       |  26 ++--
 requirements/dev.txt                      | 182 ++++++++++++----------
 requirements/doc.txt                      | 154 +++++++++---------
 requirements/pip-tools.txt                |  14 +-
 requirements/pip.txt                      |  12 +-
 requirements/quality.in                   |   2 +
 requirements/quality.txt                  | 140 +++++++++--------
 requirements/test.txt                     | 109 ++++++-------
 setup.py                                  |   3 +-
 tox.ini                                   |   2 +
 22 files changed, 504 insertions(+), 460 deletions(-)
 delete mode 100644 .github/workflows/lint.yml
 create mode 100644 .yamllint.yml

diff --git a/.annotation_safe_list.yml b/.annotation_safe_list.yml
index 62eaaa7..a8ef6e3 100644
--- a/.annotation_safe_list.yml
+++ b/.annotation_safe_list.yml
@@ -3,39 +3,39 @@
 # See https://code-annotations.readthedocs.io/en/latest/safelist.html for more information.
 #
 # fake_app_1.FakeModelName:
-#    ".. no_pii:": "This model has no PII"
+#    ".. no_pii:": This model has no PII
 # fake_app_2.FakeModel2:
 #    ".. choice_annotation:": foo, bar, baz
 
 admin.LogEntry:
-  ".. no_pii:": "This model has no PII"
+  ".. no_pii:": This model has no PII
 auth.Group:
-  ".. no_pii:": "This model has no PII"
+  ".. no_pii:": This model has no PII
 auth.Permission:
-  ".. no_pii:": "This model has no PII"
+  ".. no_pii:": This model has no PII
 auth.User:
-  ".. pii": "This model minimally contains a username, password, and email"
-  ".. pii_types": "username, email_address, password"
-  ".. pii_retirement": "consumer_api"
+  ".. pii": This model minimally contains a username, password, and email
+  ".. pii_types": username, email_address, password
+  ".. pii_retirement": consumer_api
 contenttypes.ContentType:
-  ".. no_pii:": "This model has no PII"
+  ".. no_pii:": This model has no PII
 sessions.Session:
-  ".. no_pii:": "This model has no PII"
+  ".. no_pii:": This model has no PII
 social_django.Association:
-  ".. no_pii:": "This model has no PII"
+  ".. no_pii:": This model has no PII
 social_django.Code:
-  ".. pii:": "Email address"
+  ".. pii:": Email address
   ".. pii_types:": other
   ".. pii_retirement:": local_api
 social_django.Nonce:
-  ".. no_pii:": "This model has no PII"
+  ".. no_pii:": This model has no PII
 social_django.Partial:
-  ".. no_pii:": "This model has no PII"
+  ".. no_pii:": This model has no PII
 social_django.UserSocialAuth:
-  ".. no_pii:": "This model has no PII"
+  ".. no_pii:": This model has no PII
 waffle.Flag:
-  ".. no_pii:": "This model has no PII"
+  ".. no_pii:": This model has no PII
 waffle.Sample:
-  ".. no_pii:": "This model has no PII"
+  ".. no_pii:": This model has no PII
 waffle.Switch:
-  ".. no_pii:": "This model has no PII"
+  ".. no_pii:": This model has no PII
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 3fb61de..096f582 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -5,7 +5,7 @@ on:
     branches: [main]
   pull_request:
     branches:
-    - '**'
+      - '**'
 
 
 jobs:
@@ -19,28 +19,28 @@ jobs:
         toxenv: [django42, django52, quality, docs, pii_check]
 
     steps:
-    - uses: actions/checkout@v3
-    - name: setup python
-      uses: actions/setup-python@v2
-      with:
-        python-version: ${{ matrix.python-version }}
-
-    - name: Install pip
-      run: pip install -r requirements/pip.txt
-
-    - name: Install Dependencies
-      run: pip install -r requirements/ci.txt
-
-    - name: Run Tests
-      env:
-        TOXENV: ${{ matrix.toxenv }}
-      run: tox
-
-    - name: Run coverage
-      if: matrix.python-version == '3.11' && matrix.toxenv == 'django42'
-      uses: codecov/codecov-action@v3
-      env:
-        CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
-      with:
-        flags: unittests
-        fail_ci_if_error: true
+      - uses: actions/checkout@v3
+      - name: setup python
+        uses: actions/setup-python@v2
+        with:
+          python-version: ${{ matrix.python-version }}
+
+      - name: Install pip
+        run: pip install -r requirements/pip.txt
+
+      - name: Install Dependencies
+        run: pip install -r requirements/ci.txt
+
+      - name: Run Tests
+        env:
+          TOXENV: ${{ matrix.toxenv }}
+        run: tox
+
+      - name: Run coverage
+        if: matrix.python-version == '3.11' && matrix.toxenv == 'django42'
+        uses: codecov/codecov-action@v3
+        env:
+          CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
+        with:
+          flags: unittests
+          fail_ci_if_error: true
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
deleted file mode 100644
index 8e36925..0000000
--- a/.github/workflows/lint.yml
+++ /dev/null
@@ -1,17 +0,0 @@
-name: Lint
-
-on:
-  push:
-    branches: [main]
-  pull_request:
-    branches:
-      - '**'
-
-jobs:
-  lint:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v3
-      - uses: psf/black@stable
-        with:
-          options: --check --diff
diff --git a/.pii_annotations.yml b/.pii_annotations.yml
index 7da8f3c..d224255 100644
--- a/.pii_annotations.yml
+++ b/.pii_annotations.yml
@@ -7,29 +7,29 @@ annotations:
     "pii_group":
         - ".. pii:":
         - ".. pii_types:":
-            choices:
-              - id # Unique identifier for the user which is shared across systems
-              - name # Used for any part of the user's name
-              - username
-              - password
-              - location # Used for any part of any type address or country stored
-              - phone_number # Used for phone or fax numbers
-              - email_address
-              - birth_date # Used for any part of a stored birth date
-              - ip # IP address
-              - external_service # Used for external service ids or links such as social media links or usernames, website links, etc.
-              - biography # Any type of free-form biography field
-              - gender
-              - sex
-              - image
-              - video
-              - other
+              choices:
+                  - id  # Unique identifier for the user which is shared across systems
+                  - name  # Used for any part of the user's name
+                  - username
+                  - password
+                  - location  # Used for any part of any type address or country stored
+                  - phone_number  # Used for phone or fax numbers
+                  - email_address
+                  - birth_date  # Used for any part of a stored birth date
+                  - ip  # IP address
+                  - external_service  # Used for external service ids or links such as social media links or usernames, website links, etc.
+                  - biography  # Any type of free-form biography field
+                  - gender
+                  - sex
+                  - image
+                  - video
+                  - other
         - ".. pii_retirement:":
-            choices:
-              - retained     # Intentionally kept for legal reasons
-              - local_api    # An API exists in this repository for retiring this information
-              - consumer_api # The data's consumer must implement an API for retiring this information
-              - third_party  # A third party API exists to retire this data
+              choices:
+                  - retained      # Intentionally kept for legal reasons
+                  - local_api     # An API exists in this repository for retiring this information
+                  - consumer_api  # The data's consumer must implement an API for retiring this information
+                  - third_party   # A third party API exists to retire this data
 extensions:
     python:
         - py
diff --git a/.readthedocs.yaml b/.readthedocs.yaml
index ce8bde2..c872d00 100644
--- a/.readthedocs.yaml
+++ b/.readthedocs.yaml
@@ -12,9 +12,9 @@ sphinx:
 
 # Set the version of python needed to build these docs.
 build:
-  os: "ubuntu-22.04"
+  os: ubuntu-lts-latest
   tools:
-    python: "3.8"
+    python: "3.11"
 
 python:
   install:
diff --git a/.yamllint.yml b/.yamllint.yml
new file mode 100644
index 0000000..7b86ffe
--- /dev/null
+++ b/.yamllint.yml
@@ -0,0 +1,23 @@
+extends: default
+
+ignore: |
+  .pytest_cache/
+  .ruff_cache/
+  .tox/
+  pii_report/
+  venv/
+  .venv/
+rules:
+  indentation:
+    spaces: consistent
+    check-multi-line-strings: true
+  line-length: disable
+  document-start: disable
+  quoted-strings:
+    quote-type: any
+    required: only-when-needed
+  braces:
+    forbid: non-empty
+    level: warning
+  truthy:
+    check-keys: false
diff --git a/Makefile b/Makefile
index b30a6b0..2c1b2a8 100644
--- a/Makefile
+++ b/Makefile
@@ -53,7 +53,7 @@ upgrade: ## update the requirements/*.txt files with the latest packages satisfy
 	sed '/^[dD]jango==/d' requirements/test.txt > requirements/test.tmp
 	mv requirements/test.tmp requirements/test.txt
 
-quality: ## check coding style with pycodestyle and pylint
+quality: ## check coding style with pycodestyle, pylint, ruff and yamllint
 	tox -e quality
 
 pii_check: ## check for PII annotations on all Django models
diff --git a/catalog-info.yaml b/catalog-info.yaml
index d6909a4..245a558 100644
--- a/catalog-info.yaml
+++ b/catalog-info.yaml
@@ -4,10 +4,14 @@
 apiVersion: backstage.io/v1alpha1
 kind: ""
 metadata:
-  name: 'learning-paths-plugin'
-  description: "Learning Paths plugin"
+  name: learning-paths-plugin
+  description: Learning Paths plugin
   annotations:
     # (Optional) Annotation keys and values can be whatever you want.
+    # We use it in Open edX repos to have a comma-separated list of GitHub user
+    # names that might be interested in changes to the architecture of this
+    # component.
+    openedx.org/arch-interest-groups: ""
 spec:
 
   # (Required) This can be a group(`group:<group_name>` or a user(`user:<github_username>`)
@@ -17,12 +21,12 @@ spec:
   type: ''
 
   # (Required) Acceptable Lifecycle Values: experimental, production, deprecated
-  lifecycle: 'experimental'
+  lifecycle: experimental
 
   # (Optional) The value can be the name of any known component.
-  subcomponentOf: '<name_of_a_component>'
+  subcomponentOf: <name_of_a_component>
 
   # (Optional) An array of different components or resources.
   dependsOn:
-  - '<component_or_resource>'
-  - '<another_component_or_resource>'
+    - <component_or_resource>
+    - <another_component_or_resource>
diff --git a/codecov.yml b/codecov.yml
index 5ccf75a..e2f06bf 100644
--- a/codecov.yml
+++ b/codecov.yml
@@ -2,11 +2,11 @@ coverage:
   status:
     project:
       default:
-        enabled: yes
+        enabled: true
         target: 85%
     patch:
       default:
-        enabled: yes
+        enabled: true
         target: 90%
 
 comment: false
diff --git a/learning_paths/api/v1/tests/test_views.py b/learning_paths/api/v1/tests/test_views.py
index c7b00ad..f6b42a9 100644
--- a/learning_paths/api/v1/tests/test_views.py
+++ b/learning_paths/api/v1/tests/test_views.py
@@ -102,7 +102,6 @@ def learning_paths_with_steps():  # pylint: disable=missing-function-docstring
 
 @pytest.mark.django_db
 class TestLearningPathAsProgram:
-
     def test_list_learning_paths_as_programs(self, user, learning_paths):
         """Test listing LearningPaths as Programs."""
         url = reverse("learning-path-as-program-list")
@@ -119,7 +118,6 @@ def test_list_learning_paths_as_programs(self, user, learning_paths):
 
 @pytest.mark.django_db
 class TestLearningPathUserProgress:
-
     @patch("learning_paths.api.v1.views.get_aggregate_progress", return_value=0.75)
     def test_learning_path_progress_success(self, _mock_get_aggregate_progress, user, learning_path):
         """Test retrieving progress for a learning path."""
@@ -155,7 +153,6 @@ def test_invite_only_learning_path_progress_404(self, authenticated_client, lear
 
 @pytest.mark.django_db
 class TestLearningPathUserGrade:
-
     def test_learning_path_grade_grading_criteria_not_found(self, authenticated_client, learning_path):
         """Test that the grade view returns 404 if grading criteria are not found."""
         learning_path.grading_criteria.delete()
@@ -200,7 +197,6 @@ def test_invite_only_learning_path_grade_404(self, authenticated_client, learnin
 
 @pytest.mark.django_db
 class TestLearningPathViewSet:
-
     @pytest.fixture(autouse=True)
     def setup_mock_course_dates(self):
         """Mock course dates that are retrieved from edx-platform."""
@@ -332,7 +328,6 @@ def test_invite_only_learning_path_detail_hidden_from_non_enrolled_users(
 
 @pytest.mark.django_db
 class TestLearningPathEnrollment:
-
     @pytest.fixture
     def enrollment_url(self, learning_path):
         return f"/api/learning_paths/v1/{learning_path.key}/enrollments/"
@@ -540,7 +535,6 @@ def test_staff_can_enroll_users_in_invite_only_learning_path(
 
 @pytest.mark.django_db
 class TestListEnrollmentsView:
-
     @pytest.fixture
     def enrollments_url(self):
         return "/api/learning_paths/v1/enrollments/"
@@ -584,7 +578,6 @@ def test_fetch_enrollments_no_enrollments(self, api_client, enrollments_url):
 
 @pytest.mark.django_db
 class TestBulkEnrollAPI:
-
     @pytest.fixture
     def bulk_enroll_url(self):
         return "/api/learning_paths/v1/enrollments/bulk-enroll/"
@@ -839,7 +832,6 @@ def test_unenroll_empty_parameters(self, staff_client, bulk_enroll_url):
 
 @pytest.mark.django_db
 class TestLearningPathCourseEnrollment:
-
     @pytest.fixture
     def course_enrollment_url(self, learning_path_with_steps):
         return reverse(
diff --git a/pyproject.toml b/pyproject.toml
index e53d233..5f03522 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -1,16 +1,3 @@
-[tool.black]
+[tool.ruff]
 line-length = 120
-exclude = '''
-/(
-    \.git
-  | \.hg
-  | \.mypy_cache
-  | \.tox
-  | \.venv
-  | _build
-  | buck-out
-  | build
-  | dist
-  | migrations
-)/
-'''
+exclude = ['migrations', 'docs', 'manage.py']
diff --git a/requirements/base.txt b/requirements/base.txt
index e99a441..41d537d 100644
--- a/requirements/base.txt
+++ b/requirements/base.txt
@@ -8,30 +8,30 @@ amqp==5.3.1
     # via kombu
 aniso8601==10.0.1
     # via tincan
-apache-libcloud==3.8.0
+apache-libcloud==3.9.1
     # via edx-event-routing-backends
 appdirs==1.4.4
     # via fs
-asgiref==3.11.0
+asgiref==3.11.1
     # via django
-attrs==25.4.0
+attrs==26.1.0
     # via openedx-events
-billiard==4.2.3
+billiard==4.2.4
     # via celery
-celery==5.5.3
+celery==5.6.3
     # via
     #   edx-celeryutils
     #   event-tracking
     #   openedx-completion-aggregator
-certifi==2025.11.12
+certifi==2026.5.20
     # via requests
 cffi==2.0.0
     # via
     #   cryptography
     #   pynacl
-charset-normalizer==3.4.4
+charset-normalizer==3.4.7
     # via requests
-click==8.3.1
+click==8.4.1
     # via
     #   celery
     #   click-didyoumean
@@ -45,13 +45,13 @@ click-plugins==1.1.1.2
     # via celery
 click-repl==0.3.0
     # via celery
-code-annotations==2.3.0
+code-annotations==2.3.2
     # via edx-toggles
-cryptography==46.0.3
+cryptography==48.0.1
     # via
     #   django-fernet-fields-v2
     #   pyjwt
-django==5.2.8
+django==5.2.15
     # via
     #   -c https://raw.githubusercontent.com/edx/edx-lint/master/edx_lint/files/common_constraints.txt
     #   -r requirements/base.in
@@ -74,7 +74,7 @@ django==5.2.8
     #   openedx-completion-aggregator
     #   openedx-events
     #   openedx-filters
-django-config-models==2.9.0
+django-config-models==3.0.0
     # via edx-event-routing-backends
 django-crum==0.7.9
     # via
@@ -88,16 +88,16 @@ django-model-utils==5.0.0
     #   edx-celeryutils
     #   edx-completion
     #   openedx-completion-aggregator
-django-object-actions==5.0.0
+django-object-actions==5.1.2
     # via -r requirements/base.in
-django-redis==6.0.0
+django-redis==7.0.0
     # via edx-event-routing-backends
 django-waffle==5.0.0
     # via
     #   edx-django-utils
     #   edx-drf-extensions
     #   edx-toggles
-djangorestframework==3.16.1
+djangorestframework==3.17.1
     # via
     #   -r requirements/base.in
     #   django-config-models
@@ -111,11 +111,11 @@ drf-jwt==1.19.2
     # via edx-drf-extensions
 edx-ccx-keys==2.0.2
     # via openedx-events
-edx-celeryutils==1.4.0
+edx-celeryutils==2.0.0
     # via
     #   edx-event-routing-backends
     #   openedx-completion-aggregator
-edx-completion==4.9
+edx-completion==5.0.0
     # via openedx-completion-aggregator
 edx-django-utils==8.0.1
     # via
@@ -129,7 +129,7 @@ edx-drf-extensions==10.6.0
     # via edx-completion
 edx-event-routing-backends==9.3.8
     # via openedx-completion-aggregator
-edx-opaque-keys[django]==3.0.0
+edx-opaque-keys[django]==4.0.0
     # via
     #   -r requirements/base.in
     #   edx-ccx-keys
@@ -138,24 +138,24 @@ edx-opaque-keys[django]==3.0.0
     #   openedx-completion-aggregator
     #   openedx-events
     #   openedx-filters
-edx-toggles==5.4.1
+edx-toggles==6.0.0
     # via
     #   edx-completion
     #   edx-event-routing-backends
     #   event-tracking
     #   openedx-completion-aggregator
-event-tracking==3.3.0
+event-tracking==4.0.2
     # via
     #   edx-completion
     #   edx-event-routing-backends
     #   openedx-completion-aggregator
-fastavro==1.12.1
+fastavro==1.12.2
     # via openedx-events
 fasteners==0.20
     # via edx-event-routing-backends
 fs==2.4.16
     # via xblock
-idna==3.11
+idna==3.18
     # via requests
 isodate==0.7.2
     # via edx-event-routing-backends
@@ -165,11 +165,11 @@ jsonfield==3.2.0
     # via
     #   edx-celeryutils
     #   edx-event-routing-backends
-kombu==5.5.4
+kombu==5.6.2
     # via celery
-lxml==6.0.2
+lxml==6.1.1
     # via xblock
-mako==1.3.10
+mako==1.3.12
     # via xblock
 markupsafe==3.0.3
     # via
@@ -178,31 +178,31 @@ markupsafe==3.0.3
     #   xblock
 openedx-atlas==0.7.0
     # via -r requirements/base.in
-openedx-completion-aggregator==4.2.0
+openedx-completion-aggregator==4.5.0
     # via -r requirements/base.in
 openedx-events==10.5.0
     # via event-tracking
-openedx-filters==2.1.0
+openedx-filters==3.4.1
     # via edx-event-routing-backends
-packaging==25.0
+packaging==26.2
     # via kombu
-pillow==12.0.0
+pillow==12.2.0
     # via -r requirements/base.in
 prompt-toolkit==3.0.52
     # via click-repl
-psutil==7.1.3
+psutil==7.2.2
     # via edx-django-utils
-pycparser==2.23
+pycparser==3.0
     # via cffi
-pyjwt[crypto]==2.10.1
+pyjwt[crypto]==2.13.0
     # via
     #   drf-jwt
     #   edx-drf-extensions
-pymongo==4.15.4
+pymongo==4.17.0
     # via
     #   edx-opaque-keys
     #   event-tracking
-pynacl==1.6.1
+pynacl==1.6.2
     # via edx-django-utils
 python-dateutil==2.9.0.post0
     # via
@@ -211,7 +211,7 @@ python-dateutil==2.9.0.post0
     #   xblock
 python-slugify==8.0.4
     # via code-annotations
-pytz==2025.2
+pytz==2026.2
     # via
     #   edx-completion
     #   edx-event-routing-backends
@@ -222,27 +222,26 @@ pyyaml==6.0.3
     # via
     #   code-annotations
     #   xblock
-redis==7.1.0
+redis==8.0.0
     # via django-redis
-requests==2.32.5
+requests==2.34.2
     # via
     #   apache-libcloud
     #   edx-drf-extensions
     #   edx-event-routing-backends
 semantic-version==2.10.0
     # via edx-drf-extensions
-simplejson==3.20.2
+simplejson==4.1.1
     # via xblock
 six==1.17.0
     # via
     #   edx-ccx-keys
     #   event-tracking
     #   fs
-    #   openedx-completion-aggregator
     #   python-dateutil
-sqlparse==0.5.3
+sqlparse==0.5.5
     # via django
-stevedore==5.6.0
+stevedore==5.8.0
     # via
     #   code-annotations
     #   edx-django-utils
@@ -252,23 +251,27 @@ text-unidecode==1.3
 tincan==1.0.0
     # via edx-event-routing-backends
 typing-extensions==4.15.0
-    # via edx-opaque-keys
-tzdata==2025.2
+    # via
+    #   django-redis
+    #   edx-opaque-keys
+tzdata==2026.2
     # via kombu
-urllib3==2.5.0
+tzlocal==5.3.1
+    # via celery
+urllib3==2.7.0
     # via requests
 vine==5.1.0
     # via
     #   amqp
     #   celery
     #   kombu
-wcwidth==0.2.14
+wcwidth==0.8.1
     # via prompt-toolkit
-web-fragments==3.1.0
+web-fragments==4.0.0
     # via xblock
-webob==1.8.9
+webob==1.8.10
     # via xblock
-xblock==5.2.0
+xblock==6.1.0
     # via
     #   edx-completion
     #   openedx-completion-aggregator
diff --git a/requirements/ci.txt b/requirements/ci.txt
index 735409a..2dcc175 100644
--- a/requirements/ci.txt
+++ b/requirements/ci.txt
@@ -4,31 +4,37 @@
 #
 #    make upgrade
 #
-cachetools==6.2.2
-    # via tox
-chardet==5.2.0
+cachetools==7.1.4
     # via tox
 colorama==0.4.6
     # via tox
-distlib==0.4.0
+distlib==0.4.3
     # via virtualenv
-filelock==3.20.0
+filelock==3.29.3
     # via
+    #   python-discovery
     #   tox
     #   virtualenv
-packaging==25.0
+packaging==26.2
     # via
     #   pyproject-api
     #   tox
-platformdirs==4.5.0
+platformdirs==4.10.0
     # via
+    #   python-discovery
     #   tox
     #   virtualenv
 pluggy==1.6.0
     # via tox
-pyproject-api==1.10.0
+pyproject-api==1.10.1
+    # via tox
+python-discovery==1.4.2
+    # via
+    #   tox
+    #   virtualenv
+tomli-w==1.2.0
     # via tox
-tox==4.32.0
+tox==4.55.1
     # via -r requirements/ci.in
-virtualenv==20.35.4
+virtualenv==21.4.3
     # via tox
diff --git a/requirements/dev.txt b/requirements/dev.txt
index b3b9fd8..cef1bde 100644
--- a/requirements/dev.txt
+++ b/requirements/dev.txt
@@ -12,7 +12,7 @@ aniso8601==10.0.1
     # via
     #   -r requirements/quality.txt
     #   tincan
-apache-libcloud==3.8.0
+apache-libcloud==3.9.1
     # via
     #   -r requirements/quality.txt
     #   edx-event-routing-backends
@@ -20,38 +20,38 @@ appdirs==1.4.4
     # via
     #   -r requirements/quality.txt
     #   fs
-asgiref==3.11.0
+asgiref==3.11.1
     # via
     #   -r requirements/quality.txt
     #   django
-astroid==3.3.11
+astroid==4.0.4
     # via
     #   -r requirements/quality.txt
     #   pylint
     #   pylint-celery
-attrs==25.4.0
+attrs==26.1.0
     # via
     #   -r requirements/quality.txt
     #   openedx-events
-billiard==4.2.3
+billiard==4.2.4
     # via
     #   -r requirements/quality.txt
     #   celery
-build==1.3.0
+build==1.5.0
     # via
     #   -r requirements/pip-tools.txt
     #   pip-tools
-cachetools==6.2.2
+cachetools==7.1.4
     # via
     #   -r requirements/ci.txt
     #   tox
-celery==5.5.3
+celery==5.6.3
     # via
     #   -r requirements/quality.txt
     #   edx-celeryutils
     #   event-tracking
     #   openedx-completion-aggregator
-certifi==2025.11.12
+certifi==2026.5.20
     # via
     #   -r requirements/quality.txt
     #   requests
@@ -60,16 +60,13 @@ cffi==2.0.0
     #   -r requirements/quality.txt
     #   cryptography
     #   pynacl
-chardet==5.2.0
-    # via
-    #   -r requirements/ci.txt
-    #   diff-cover
-    #   tox
-charset-normalizer==3.4.4
+chardet==7.4.3
+    # via diff-cover
+charset-normalizer==3.4.7
     # via
     #   -r requirements/quality.txt
     #   requests
-click==8.3.1
+click==8.4.1
     # via
     #   -r requirements/pip-tools.txt
     #   -r requirements/quality.txt
@@ -98,7 +95,7 @@ click-repl==0.3.0
     # via
     #   -r requirements/quality.txt
     #   celery
-code-annotations==2.3.0
+code-annotations==2.3.2
     # via
     #   -r requirements/quality.txt
     #   edx-lint
@@ -107,26 +104,26 @@ colorama==0.4.6
     # via
     #   -r requirements/ci.txt
     #   tox
-coverage[toml]==7.12.0
+coverage[toml]==7.14.1
     # via
     #   -r requirements/quality.txt
     #   pytest-cov
-cryptography==46.0.3
+cryptography==48.0.1
     # via
     #   -r requirements/quality.txt
     #   django-fernet-fields-v2
     #   pyjwt
-diff-cover==9.7.2
+diff-cover==10.3.0
     # via -r requirements/dev.in
-dill==0.4.0
+dill==0.4.1
     # via
     #   -r requirements/quality.txt
     #   pylint
-distlib==0.4.0
+distlib==0.4.3
     # via
     #   -r requirements/ci.txt
     #   virtualenv
-django==5.2.8
+django==5.2.15
     # via
     #   -c https://raw.githubusercontent.com/edx/edx-lint/master/edx_lint/files/common_constraints.txt
     #   -r requirements/quality.txt
@@ -150,7 +147,7 @@ django==5.2.8
     #   openedx-completion-aggregator
     #   openedx-events
     #   openedx-filters
-django-config-models==2.9.0
+django-config-models==3.0.0
     # via
     #   -r requirements/quality.txt
     #   edx-event-routing-backends
@@ -169,9 +166,9 @@ django-model-utils==5.0.0
     #   edx-celeryutils
     #   edx-completion
     #   openedx-completion-aggregator
-django-object-actions==5.0.0
+django-object-actions==5.1.2
     # via -r requirements/quality.txt
-django-redis==6.0.0
+django-redis==7.0.0
     # via
     #   -r requirements/quality.txt
     #   edx-event-routing-backends
@@ -181,7 +178,7 @@ django-waffle==5.0.0
     #   edx-django-utils
     #   edx-drf-extensions
     #   edx-toggles
-djangorestframework==3.16.1
+djangorestframework==3.17.1
     # via
     #   -r requirements/quality.txt
     #   django-config-models
@@ -201,12 +198,12 @@ edx-ccx-keys==2.0.2
     # via
     #   -r requirements/quality.txt
     #   openedx-events
-edx-celeryutils==1.4.0
+edx-celeryutils==2.0.0
     # via
     #   -r requirements/quality.txt
     #   edx-event-routing-backends
     #   openedx-completion-aggregator
-edx-completion==4.9
+edx-completion==5.0.0
     # via
     #   -r requirements/quality.txt
     #   openedx-completion-aggregator
@@ -226,11 +223,11 @@ edx-event-routing-backends==9.3.8
     # via
     #   -r requirements/quality.txt
     #   openedx-completion-aggregator
-edx-i18n-tools==1.9.0
+edx-i18n-tools==2.0.0
     # via -r requirements/dev.in
-edx-lint==5.6.0
+edx-lint==6.1.0
     # via -r requirements/quality.txt
-edx-opaque-keys[django]==3.0.0
+edx-opaque-keys[django]==4.0.0
     # via
     #   -r requirements/quality.txt
     #   edx-ccx-keys
@@ -239,14 +236,14 @@ edx-opaque-keys[django]==3.0.0
     #   openedx-completion-aggregator
     #   openedx-events
     #   openedx-filters
-edx-toggles==5.4.1
+edx-toggles==6.0.0
     # via
     #   -r requirements/quality.txt
     #   edx-completion
     #   edx-event-routing-backends
     #   event-tracking
     #   openedx-completion-aggregator
-event-tracking==3.3.0
+event-tracking==4.0.2
     # via
     #   -r requirements/quality.txt
     #   edx-completion
@@ -258,11 +255,11 @@ execnet==2.1.2
     #   pytest-xdist
 factory-boy==3.3.3
     # via -r requirements/quality.txt
-faker==38.2.0
+faker==40.23.0
     # via
     #   -r requirements/quality.txt
     #   factory-boy
-fastavro==1.12.1
+fastavro==1.12.2
     # via
     #   -r requirements/quality.txt
     #   openedx-events
@@ -270,16 +267,17 @@ fasteners==0.20
     # via
     #   -r requirements/quality.txt
     #   edx-event-routing-backends
-filelock==3.20.0
+filelock==3.29.3
     # via
     #   -r requirements/ci.txt
+    #   python-discovery
     #   tox
     #   virtualenv
 fs==2.4.16
     # via
     #   -r requirements/quality.txt
     #   xblock
-idna==3.11
+idna==3.18
     # via
     #   -r requirements/quality.txt
     #   requests
@@ -291,7 +289,7 @@ isodate==0.7.2
     # via
     #   -r requirements/quality.txt
     #   edx-event-routing-backends
-isort==6.1.0
+isort==8.0.1
     # via
     #   -r requirements/quality.txt
     #   pylint
@@ -305,19 +303,19 @@ jsonfield==3.2.0
     #   -r requirements/quality.txt
     #   edx-celeryutils
     #   edx-event-routing-backends
-kombu==5.5.4
+kombu==5.6.2
     # via
     #   -r requirements/quality.txt
     #   celery
-lxml[html-clean]==6.0.2
+lxml[html-clean]==6.1.1
     # via
     #   -r requirements/quality.txt
     #   edx-i18n-tools
     #   lxml-html-clean
     #   xblock
-lxml-html-clean==0.4.3
+lxml-html-clean==0.4.5
     # via lxml
-mako==1.3.10
+mako==1.3.12
     # via
     #   -r requirements/quality.txt
     #   xblock
@@ -333,17 +331,17 @@ mccabe==0.7.0
     #   pylint
 openedx-atlas==0.7.0
     # via -r requirements/quality.txt
-openedx-completion-aggregator==4.2.0
+openedx-completion-aggregator==4.5.0
     # via -r requirements/quality.txt
 openedx-events==10.5.0
     # via
     #   -r requirements/quality.txt
     #   event-tracking
-openedx-filters==2.1.0
+openedx-filters==3.4.1
     # via
     #   -r requirements/quality.txt
     #   edx-event-routing-backends
-packaging==25.0
+packaging==26.2
     # via
     #   -r requirements/ci.txt
     #   -r requirements/pip-tools.txt
@@ -353,17 +351,23 @@ packaging==25.0
     #   pyproject-api
     #   pytest
     #   tox
+    #   wheel
 path==16.16.0
     # via edx-i18n-tools
-pillow==12.0.0
+pathspec==1.1.1
+    # via
+    #   -r requirements/quality.txt
+    #   yamllint
+pillow==12.2.0
     # via -r requirements/quality.txt
-pip-tools==7.5.2
+pip-tools==7.5.3
     # via -r requirements/pip-tools.txt
-platformdirs==4.5.0
+platformdirs==4.10.0
     # via
     #   -r requirements/ci.txt
     #   -r requirements/quality.txt
     #   pylint
+    #   python-discovery
     #   tox
     #   virtualenv
 pluggy==1.6.0
@@ -380,29 +384,29 @@ prompt-toolkit==3.0.52
     # via
     #   -r requirements/quality.txt
     #   click-repl
-psutil==7.1.3
+psutil==7.2.2
     # via
     #   -r requirements/quality.txt
     #   edx-django-utils
 pycodestyle==2.14.0
     # via -r requirements/quality.txt
-pycparser==2.23
+pycparser==3.0
     # via
     #   -r requirements/quality.txt
     #   cffi
 pydocstyle==6.3.0
     # via -r requirements/quality.txt
-pygments==2.19.2
+pygments==2.20.0
     # via
     #   -r requirements/quality.txt
     #   diff-cover
     #   pytest
-pyjwt[crypto]==2.10.1
+pyjwt[crypto]==2.13.0
     # via
     #   -r requirements/quality.txt
     #   drf-jwt
     #   edx-drf-extensions
-pylint==3.3.9
+pylint==4.0.5
     # via
     #   -r requirements/quality.txt
     #   edx-lint
@@ -413,7 +417,7 @@ pylint-celery==0.3
     # via
     #   -r requirements/quality.txt
     #   edx-lint
-pylint-django==2.6.1
+pylint-django==2.7.0
     # via
     #   -r requirements/quality.txt
     #   edx-lint
@@ -422,16 +426,16 @@ pylint-plugin-utils==0.9.0
     #   -r requirements/quality.txt
     #   pylint-celery
     #   pylint-django
-pymongo==4.15.4
+pymongo==4.17.0
     # via
     #   -r requirements/quality.txt
     #   edx-opaque-keys
     #   event-tracking
-pynacl==1.6.1
+pynacl==1.6.2
     # via
     #   -r requirements/quality.txt
     #   edx-django-utils
-pyproject-api==1.10.0
+pyproject-api==1.10.1
     # via
     #   -r requirements/ci.txt
     #   tox
@@ -440,15 +444,15 @@ pyproject-hooks==1.2.0
     #   -r requirements/pip-tools.txt
     #   build
     #   pip-tools
-pytest==9.0.1
+pytest==9.0.3
     # via
     #   -r requirements/quality.txt
     #   pytest-cov
     #   pytest-django
     #   pytest-xdist
-pytest-cov==7.0.0
+pytest-cov==7.1.0
     # via -r requirements/quality.txt
-pytest-django==4.11.1
+pytest-django==4.12.0
     # via -r requirements/quality.txt
 pytest-xdist==3.8.0
     # via -r requirements/quality.txt
@@ -458,11 +462,16 @@ python-dateutil==2.9.0.post0
     #   celery
     #   edx-event-routing-backends
     #   xblock
+python-discovery==1.4.2
+    # via
+    #   -r requirements/ci.txt
+    #   tox
+    #   virtualenv
 python-slugify==8.0.4
     # via
     #   -r requirements/quality.txt
     #   code-annotations
-pytz==2025.2
+pytz==2026.2
     # via
     #   -r requirements/quality.txt
     #   edx-completion
@@ -476,21 +485,24 @@ pyyaml==6.0.3
     #   code-annotations
     #   edx-i18n-tools
     #   xblock
-redis==7.1.0
+    #   yamllint
+redis==8.0.0
     # via
     #   -r requirements/quality.txt
     #   django-redis
-requests==2.32.5
+requests==2.34.2
     # via
     #   -r requirements/quality.txt
     #   apache-libcloud
     #   edx-drf-extensions
     #   edx-event-routing-backends
+ruff==0.15.17
+    # via -r requirements/quality.txt
 semantic-version==2.10.0
     # via
     #   -r requirements/quality.txt
     #   edx-drf-extensions
-simplejson==3.20.2
+simplejson==4.1.1
     # via
     #   -r requirements/quality.txt
     #   xblock
@@ -501,17 +513,16 @@ six==1.17.0
     #   edx-lint
     #   event-tracking
     #   fs
-    #   openedx-completion-aggregator
     #   python-dateutil
-snowballstemmer==3.0.1
+snowballstemmer==3.1.1
     # via
     #   -r requirements/quality.txt
     #   pydocstyle
-sqlparse==0.5.3
+sqlparse==0.5.5
     # via
     #   -r requirements/quality.txt
     #   django
-stevedore==5.6.0
+stevedore==5.8.0
     # via
     #   -r requirements/quality.txt
     #   code-annotations
@@ -525,22 +536,31 @@ tincan==1.0.0
     # via
     #   -r requirements/quality.txt
     #   edx-event-routing-backends
-tomlkit==0.13.3
+tomli-w==1.2.0
+    # via
+    #   -r requirements/ci.txt
+    #   tox
+tomlkit==0.15.0
     # via
     #   -r requirements/quality.txt
+    #   edx-lint
     #   pylint
-tox==4.32.0
+tox==4.55.1
     # via -r requirements/ci.txt
 typing-extensions==4.15.0
     # via
     #   -r requirements/quality.txt
+    #   django-redis
     #   edx-opaque-keys
-tzdata==2025.2
+tzdata==2026.2
     # via
     #   -r requirements/quality.txt
-    #   faker
     #   kombu
-urllib3==2.5.0
+tzlocal==5.3.1
+    # via
+    #   -r requirements/quality.txt
+    #   celery
+urllib3==2.7.0
     # via
     #   -r requirements/quality.txt
     #   requests
@@ -550,31 +570,33 @@ vine==5.1.0
     #   amqp
     #   celery
     #   kombu
-virtualenv==20.35.4
+virtualenv==21.4.3
     # via
     #   -r requirements/ci.txt
     #   tox
-wcwidth==0.2.14
+wcwidth==0.8.1
     # via
     #   -r requirements/quality.txt
     #   prompt-toolkit
-web-fragments==3.1.0
+web-fragments==4.0.0
     # via
     #   -r requirements/quality.txt
     #   xblock
-webob==1.8.9
+webob==1.8.10
     # via
     #   -r requirements/quality.txt
     #   xblock
-wheel==0.45.1
+wheel==0.47.0
     # via
     #   -r requirements/pip-tools.txt
     #   pip-tools
-xblock==5.2.0
+xblock==6.1.0
     # via
     #   -r requirements/quality.txt
     #   edx-completion
     #   openedx-completion-aggregator
+yamllint==1.38.0
+    # via -r requirements/quality.txt
 
 # The following packages are considered to be unsafe in a requirements file:
 # pip
diff --git a/requirements/doc.txt b/requirements/doc.txt
index 9540695..5f6af86 100644
--- a/requirements/doc.txt
+++ b/requirements/doc.txt
@@ -16,7 +16,7 @@ aniso8601==10.0.1
     # via
     #   -r requirements/test.txt
     #   tincan
-apache-libcloud==3.8.0
+apache-libcloud==3.9.1
     # via
     #   -r requirements/test.txt
     #   edx-event-routing-backends
@@ -24,35 +24,35 @@ appdirs==1.4.4
     # via
     #   -r requirements/test.txt
     #   fs
-asgiref==3.11.0
+asgiref==3.11.1
     # via
     #   -r requirements/test.txt
     #   django
-attrs==25.4.0
+attrs==26.1.0
     # via
     #   -r requirements/test.txt
     #   openedx-events
-babel==2.17.0
+babel==2.18.0
     # via
     #   pydata-sphinx-theme
     #   sphinx
 backports-tarfile==1.2.0
     # via jaraco-context
-beautifulsoup4==4.14.2
+beautifulsoup4==4.15.0
     # via pydata-sphinx-theme
-billiard==4.2.3
+billiard==4.2.4
     # via
     #   -r requirements/test.txt
     #   celery
-build==1.3.0
+build==1.5.0
     # via -r requirements/doc.in
-celery==5.5.3
+celery==5.6.3
     # via
     #   -r requirements/test.txt
     #   edx-celeryutils
     #   event-tracking
     #   openedx-completion-aggregator
-certifi==2025.11.12
+certifi==2026.5.20
     # via
     #   -r requirements/test.txt
     #   requests
@@ -61,11 +61,11 @@ cffi==2.0.0
     #   -r requirements/test.txt
     #   cryptography
     #   pynacl
-charset-normalizer==3.4.4
+charset-normalizer==3.4.7
     # via
     #   -r requirements/test.txt
     #   requests
-click==8.3.1
+click==8.4.1
     # via
     #   -r requirements/test.txt
     #   celery
@@ -86,21 +86,21 @@ click-repl==0.3.0
     # via
     #   -r requirements/test.txt
     #   celery
-code-annotations==2.3.0
+code-annotations==2.3.2
     # via
     #   -r requirements/test.txt
     #   edx-toggles
-coverage[toml]==7.12.0
+coverage[toml]==7.14.1
     # via
     #   -r requirements/test.txt
     #   pytest-cov
-cryptography==46.0.3
+cryptography==48.0.1
     # via
     #   -r requirements/test.txt
     #   django-fernet-fields-v2
     #   pyjwt
     #   secretstorage
-django==5.2.8
+django==5.2.15
     # via
     #   -c https://raw.githubusercontent.com/edx/edx-lint/master/edx_lint/files/common_constraints.txt
     #   -r requirements/test.txt
@@ -123,7 +123,7 @@ django==5.2.8
     #   openedx-completion-aggregator
     #   openedx-events
     #   openedx-filters
-django-config-models==2.9.0
+django-config-models==3.0.0
     # via
     #   -r requirements/test.txt
     #   edx-event-routing-backends
@@ -142,9 +142,9 @@ django-model-utils==5.0.0
     #   edx-celeryutils
     #   edx-completion
     #   openedx-completion-aggregator
-django-object-actions==5.0.0
+django-object-actions==5.1.2
     # via -r requirements/test.txt
-django-redis==6.0.0
+django-redis==7.0.0
     # via
     #   -r requirements/test.txt
     #   edx-event-routing-backends
@@ -154,7 +154,7 @@ django-waffle==5.0.0
     #   edx-django-utils
     #   edx-drf-extensions
     #   edx-toggles
-djangorestframework==3.16.1
+djangorestframework==3.17.1
     # via
     #   -r requirements/test.txt
     #   django-config-models
@@ -183,12 +183,12 @@ edx-ccx-keys==2.0.2
     # via
     #   -r requirements/test.txt
     #   openedx-events
-edx-celeryutils==1.4.0
+edx-celeryutils==2.0.0
     # via
     #   -r requirements/test.txt
     #   edx-event-routing-backends
     #   openedx-completion-aggregator
-edx-completion==4.9
+edx-completion==5.0.0
     # via
     #   -r requirements/test.txt
     #   openedx-completion-aggregator
@@ -208,7 +208,7 @@ edx-event-routing-backends==9.3.8
     # via
     #   -r requirements/test.txt
     #   openedx-completion-aggregator
-edx-opaque-keys[django]==3.0.0
+edx-opaque-keys[django]==4.0.0
     # via
     #   -r requirements/test.txt
     #   edx-ccx-keys
@@ -217,14 +217,14 @@ edx-opaque-keys[django]==3.0.0
     #   openedx-completion-aggregator
     #   openedx-events
     #   openedx-filters
-edx-toggles==5.4.1
+edx-toggles==6.0.0
     # via
     #   -r requirements/test.txt
     #   edx-completion
     #   edx-event-routing-backends
     #   event-tracking
     #   openedx-completion-aggregator
-event-tracking==3.3.0
+event-tracking==4.0.2
     # via
     #   -r requirements/test.txt
     #   edx-completion
@@ -236,11 +236,11 @@ execnet==2.1.2
     #   pytest-xdist
 factory-boy==3.3.3
     # via -r requirements/test.txt
-faker==38.2.0
+faker==40.23.0
     # via
     #   -r requirements/test.txt
     #   factory-boy
-fastavro==1.12.1
+fastavro==1.12.2
     # via
     #   -r requirements/test.txt
     #   openedx-events
@@ -252,15 +252,15 @@ fs==2.4.16
     # via
     #   -r requirements/test.txt
     #   xblock
-id==1.5.0
+id==1.6.1
     # via twine
-idna==3.11
+idna==3.18
     # via
     #   -r requirements/test.txt
     #   requests
-imagesize==1.4.1
+imagesize==2.0.0
     # via sphinx
-importlib-metadata==8.7.0
+importlib-metadata==9.0.0
     # via keyring
 iniconfig==2.3.0
     # via
@@ -272,9 +272,9 @@ isodate==0.7.2
     #   edx-event-routing-backends
 jaraco-classes==3.4.0
     # via keyring
-jaraco-context==6.0.1
+jaraco-context==6.1.2
     # via keyring
-jaraco-functools==4.3.0
+jaraco-functools==4.5.0
     # via keyring
 jeepney==0.9.0
     # via
@@ -292,19 +292,19 @@ jsonfield==3.2.0
     #   edx-event-routing-backends
 keyring==25.7.0
     # via twine
-kombu==5.5.4
+kombu==5.6.2
     # via
     #   -r requirements/test.txt
     #   celery
-lxml==6.0.2
+lxml==6.1.1
     # via
     #   -r requirements/test.txt
     #   xblock
-mako==1.3.10
+mako==1.3.12
     # via
     #   -r requirements/test.txt
     #   xblock
-markdown-it-py==4.0.0
+markdown-it-py==4.2.0
     # via rich
 markupsafe==3.0.3
     # via
@@ -314,34 +314,33 @@ markupsafe==3.0.3
     #   xblock
 mdurl==0.1.2
     # via markdown-it-py
-more-itertools==10.8.0
+more-itertools==11.1.0
     # via
     #   jaraco-classes
     #   jaraco-functools
-nh3==0.3.2
+nh3==0.3.5
     # via readme-renderer
 openedx-atlas==0.7.0
     # via -r requirements/test.txt
-openedx-completion-aggregator==4.2.0
+openedx-completion-aggregator==4.5.0
     # via -r requirements/test.txt
 openedx-events==10.5.0
     # via
     #   -r requirements/test.txt
     #   event-tracking
-openedx-filters==2.1.0
+openedx-filters==3.4.1
     # via
     #   -r requirements/test.txt
     #   edx-event-routing-backends
-packaging==25.0
+packaging==26.2
     # via
     #   -r requirements/test.txt
     #   build
     #   kombu
-    #   pydata-sphinx-theme
     #   pytest
     #   sphinx
     #   twine
-pillow==12.0.0
+pillow==12.2.0
     # via -r requirements/test.txt
 pluggy==1.6.0
     # via
@@ -352,17 +351,17 @@ prompt-toolkit==3.0.52
     # via
     #   -r requirements/test.txt
     #   click-repl
-psutil==7.1.3
+psutil==7.2.2
     # via
     #   -r requirements/test.txt
     #   edx-django-utils
-pycparser==2.23
+pycparser==3.0
     # via
     #   -r requirements/test.txt
     #   cffi
-pydata-sphinx-theme==0.15.4
+pydata-sphinx-theme==0.16.1
     # via sphinx-book-theme
-pygments==2.19.2
+pygments==2.20.0
     # via
     #   -r requirements/test.txt
     #   accessible-pygments
@@ -372,31 +371,31 @@ pygments==2.19.2
     #   readme-renderer
     #   rich
     #   sphinx
-pyjwt[crypto]==2.10.1
+pyjwt[crypto]==2.13.0
     # via
     #   -r requirements/test.txt
     #   drf-jwt
     #   edx-drf-extensions
-pymongo==4.15.4
+pymongo==4.17.0
     # via
     #   -r requirements/test.txt
     #   edx-opaque-keys
     #   event-tracking
-pynacl==1.6.1
+pynacl==1.6.2
     # via
     #   -r requirements/test.txt
     #   edx-django-utils
 pyproject-hooks==1.2.0
     # via build
-pytest==9.0.1
+pytest==9.0.3
     # via
     #   -r requirements/test.txt
     #   pytest-cov
     #   pytest-django
     #   pytest-xdist
-pytest-cov==7.0.0
+pytest-cov==7.1.0
     # via -r requirements/test.txt
-pytest-django==4.11.1
+pytest-django==4.12.0
     # via -r requirements/test.txt
 pytest-xdist==3.8.0
     # via -r requirements/test.txt
@@ -410,7 +409,7 @@ python-slugify==8.0.4
     # via
     #   -r requirements/test.txt
     #   code-annotations
-pytz==2025.2
+pytz==2026.2
     # via
     #   -r requirements/test.txt
     #   edx-completion
@@ -423,19 +422,18 @@ pyyaml==6.0.3
     #   -r requirements/test.txt
     #   code-annotations
     #   xblock
-readme-renderer==44.0
+readme-renderer==45.0
     # via twine
-redis==7.1.0
+redis==8.0.0
     # via
     #   -r requirements/test.txt
     #   django-redis
-requests==2.32.5
+requests==2.34.2
     # via
     #   -r requirements/test.txt
     #   apache-libcloud
     #   edx-drf-extensions
     #   edx-event-routing-backends
-    #   id
     #   requests-toolbelt
     #   sphinx
     #   twine
@@ -445,9 +443,9 @@ restructuredtext-lint==2.0.2
     # via doc8
 rfc3986==2.0.0
     # via twine
-rich==14.2.0
+rich==15.0.0
     # via twine
-roman-numerals-py==3.1.0
+roman-numerals==4.1.0
     # via sphinx
 secretstorage==3.5.0
     # via keyring
@@ -455,7 +453,7 @@ semantic-version==2.10.0
     # via
     #   -r requirements/test.txt
     #   edx-drf-extensions
-simplejson==3.20.2
+simplejson==4.1.1
     # via
     #   -r requirements/test.txt
     #   xblock
@@ -465,18 +463,17 @@ six==1.17.0
     #   edx-ccx-keys
     #   event-tracking
     #   fs
-    #   openedx-completion-aggregator
     #   python-dateutil
-snowballstemmer==3.0.1
+snowballstemmer==3.1.1
     # via sphinx
-soupsieve==2.8
+soupsieve==2.8.4
     # via beautifulsoup4
-sphinx==8.2.3
+sphinx==9.0.4
     # via
     #   -r requirements/doc.in
     #   pydata-sphinx-theme
     #   sphinx-book-theme
-sphinx-book-theme==1.1.4
+sphinx-book-theme==1.2.0
     # via -r requirements/doc.in
 sphinxcontrib-applehelp==2.0.0
     # via sphinx
@@ -490,11 +487,11 @@ sphinxcontrib-qthelp==2.0.0
     # via sphinx
 sphinxcontrib-serializinghtml==2.0.0
     # via sphinx
-sqlparse==0.5.3
+sqlparse==0.5.5
     # via
     #   -r requirements/test.txt
     #   django
-stevedore==5.6.0
+stevedore==5.8.0
     # via
     #   -r requirements/test.txt
     #   code-annotations
@@ -515,16 +512,21 @@ typing-extensions==4.15.0
     # via
     #   -r requirements/test.txt
     #   beautifulsoup4
+    #   django-redis
     #   edx-opaque-keys
     #   pydata-sphinx-theme
-tzdata==2025.2
+tzdata==2026.2
     # via
     #   -r requirements/test.txt
-    #   faker
     #   kombu
-urllib3==2.5.0
+tzlocal==5.3.1
     # via
     #   -r requirements/test.txt
+    #   celery
+urllib3==2.7.0
+    # via
+    #   -r requirements/test.txt
+    #   id
     #   requests
     #   twine
 vine==5.1.0
@@ -533,24 +535,24 @@ vine==5.1.0
     #   amqp
     #   celery
     #   kombu
-wcwidth==0.2.14
+wcwidth==0.8.1
     # via
     #   -r requirements/test.txt
     #   prompt-toolkit
-web-fragments==3.1.0
+web-fragments==4.0.0
     # via
     #   -r requirements/test.txt
     #   xblock
-webob==1.8.9
+webob==1.8.10
     # via
     #   -r requirements/test.txt
     #   xblock
-xblock==5.2.0
+xblock==6.1.0
     # via
     #   -r requirements/test.txt
     #   edx-completion
     #   openedx-completion-aggregator
-zipp==3.23.0
+zipp==4.1.0
     # via importlib-metadata
 
 # The following packages are considered to be unsafe in a requirements file:
diff --git a/requirements/pip-tools.txt b/requirements/pip-tools.txt
index 383d2a0..a577156 100644
--- a/requirements/pip-tools.txt
+++ b/requirements/pip-tools.txt
@@ -4,19 +4,21 @@
 #
 #    make upgrade
 #
-build==1.3.0
+build==1.5.0
     # via pip-tools
-click==8.3.1
+click==8.4.1
     # via pip-tools
-packaging==25.0
-    # via build
-pip-tools==7.5.2
+packaging==26.2
+    # via
+    #   build
+    #   wheel
+pip-tools==7.5.3
     # via -r requirements/pip-tools.in
 pyproject-hooks==1.2.0
     # via
     #   build
     #   pip-tools
-wheel==0.45.1
+wheel==0.47.0
     # via pip-tools
 
 # The following packages are considered to be unsafe in a requirements file:
diff --git a/requirements/pip.txt b/requirements/pip.txt
index 172b7cc..404e409 100644
--- a/requirements/pip.txt
+++ b/requirements/pip.txt
@@ -4,13 +4,13 @@
 #
 #    make upgrade
 #
-wheel==0.45.1
+packaging==26.2
+    # via wheel
+wheel==0.47.0
     # via -r requirements/pip.in
 
 # The following packages are considered to be unsafe in a requirements file:
-pip==25.2
-    # via
-    #   -c https://raw.githubusercontent.com/edx/edx-lint/master/edx_lint/files/common_constraints.txt
-    #   -r requirements/pip.in
-setuptools==80.9.0
+pip==26.1.2
+    # via -r requirements/pip.in
+setuptools==82.0.1
     # via -r requirements/pip.in
diff --git a/requirements/quality.in b/requirements/quality.in
index 93661d9..f82e0c4 100644
--- a/requirements/quality.in
+++ b/requirements/quality.in
@@ -8,3 +8,5 @@ edx-lint                  # edX pylint rules and plugins
 isort                     # to standardize order of imports
 pycodestyle               # PEP 8 compliance validation
 pydocstyle                # PEP 257 compliance validation
+ruff                      # Check the code for style and quality issues.
+yamllint                  # Check YAML files for syntax and style issues.
diff --git a/requirements/quality.txt b/requirements/quality.txt
index 4babf69..15bfe57 100644
--- a/requirements/quality.txt
+++ b/requirements/quality.txt
@@ -12,7 +12,7 @@ aniso8601==10.0.1
     # via
     #   -r requirements/test.txt
     #   tincan
-apache-libcloud==3.8.0
+apache-libcloud==3.9.1
     # via
     #   -r requirements/test.txt
     #   edx-event-routing-backends
@@ -20,29 +20,29 @@ appdirs==1.4.4
     # via
     #   -r requirements/test.txt
     #   fs
-asgiref==3.11.0
+asgiref==3.11.1
     # via
     #   -r requirements/test.txt
     #   django
-astroid==3.3.11
+astroid==4.0.4
     # via
     #   pylint
     #   pylint-celery
-attrs==25.4.0
+attrs==26.1.0
     # via
     #   -r requirements/test.txt
     #   openedx-events
-billiard==4.2.3
+billiard==4.2.4
     # via
     #   -r requirements/test.txt
     #   celery
-celery==5.5.3
+celery==5.6.3
     # via
     #   -r requirements/test.txt
     #   edx-celeryutils
     #   event-tracking
     #   openedx-completion-aggregator
-certifi==2025.11.12
+certifi==2026.5.20
     # via
     #   -r requirements/test.txt
     #   requests
@@ -51,11 +51,11 @@ cffi==2.0.0
     #   -r requirements/test.txt
     #   cryptography
     #   pynacl
-charset-normalizer==3.4.4
+charset-normalizer==3.4.7
     # via
     #   -r requirements/test.txt
     #   requests
-click==8.3.1
+click==8.4.1
     # via
     #   -r requirements/test.txt
     #   celery
@@ -80,23 +80,23 @@ click-repl==0.3.0
     # via
     #   -r requirements/test.txt
     #   celery
-code-annotations==2.3.0
+code-annotations==2.3.2
     # via
     #   -r requirements/test.txt
     #   edx-lint
     #   edx-toggles
-coverage[toml]==7.12.0
+coverage[toml]==7.14.1
     # via
     #   -r requirements/test.txt
     #   pytest-cov
-cryptography==46.0.3
+cryptography==48.0.1
     # via
     #   -r requirements/test.txt
     #   django-fernet-fields-v2
     #   pyjwt
-dill==0.4.0
+dill==0.4.1
     # via pylint
-django==5.2.8
+django==5.2.15
     # via
     #   -c https://raw.githubusercontent.com/edx/edx-lint/master/edx_lint/files/common_constraints.txt
     #   -r requirements/test.txt
@@ -119,7 +119,7 @@ django==5.2.8
     #   openedx-completion-aggregator
     #   openedx-events
     #   openedx-filters
-django-config-models==2.9.0
+django-config-models==3.0.0
     # via
     #   -r requirements/test.txt
     #   edx-event-routing-backends
@@ -138,9 +138,9 @@ django-model-utils==5.0.0
     #   edx-celeryutils
     #   edx-completion
     #   openedx-completion-aggregator
-django-object-actions==5.0.0
+django-object-actions==5.1.2
     # via -r requirements/test.txt
-django-redis==6.0.0
+django-redis==7.0.0
     # via
     #   -r requirements/test.txt
     #   edx-event-routing-backends
@@ -150,7 +150,7 @@ django-waffle==5.0.0
     #   edx-django-utils
     #   edx-drf-extensions
     #   edx-toggles
-djangorestframework==3.16.1
+djangorestframework==3.17.1
     # via
     #   -r requirements/test.txt
     #   django-config-models
@@ -170,12 +170,12 @@ edx-ccx-keys==2.0.2
     # via
     #   -r requirements/test.txt
     #   openedx-events
-edx-celeryutils==1.4.0
+edx-celeryutils==2.0.0
     # via
     #   -r requirements/test.txt
     #   edx-event-routing-backends
     #   openedx-completion-aggregator
-edx-completion==4.9
+edx-completion==5.0.0
     # via
     #   -r requirements/test.txt
     #   openedx-completion-aggregator
@@ -195,9 +195,9 @@ edx-event-routing-backends==9.3.8
     # via
     #   -r requirements/test.txt
     #   openedx-completion-aggregator
-edx-lint==5.6.0
+edx-lint==6.1.0
     # via -r requirements/quality.in
-edx-opaque-keys[django]==3.0.0
+edx-opaque-keys[django]==4.0.0
     # via
     #   -r requirements/test.txt
     #   edx-ccx-keys
@@ -206,14 +206,14 @@ edx-opaque-keys[django]==3.0.0
     #   openedx-completion-aggregator
     #   openedx-events
     #   openedx-filters
-edx-toggles==5.4.1
+edx-toggles==6.0.0
     # via
     #   -r requirements/test.txt
     #   edx-completion
     #   edx-event-routing-backends
     #   event-tracking
     #   openedx-completion-aggregator
-event-tracking==3.3.0
+event-tracking==4.0.2
     # via
     #   -r requirements/test.txt
     #   edx-completion
@@ -225,11 +225,11 @@ execnet==2.1.2
     #   pytest-xdist
 factory-boy==3.3.3
     # via -r requirements/test.txt
-faker==38.2.0
+faker==40.23.0
     # via
     #   -r requirements/test.txt
     #   factory-boy
-fastavro==1.12.1
+fastavro==1.12.2
     # via
     #   -r requirements/test.txt
     #   openedx-events
@@ -241,7 +241,7 @@ fs==2.4.16
     # via
     #   -r requirements/test.txt
     #   xblock
-idna==3.11
+idna==3.18
     # via
     #   -r requirements/test.txt
     #   requests
@@ -253,7 +253,7 @@ isodate==0.7.2
     # via
     #   -r requirements/test.txt
     #   edx-event-routing-backends
-isort==6.1.0
+isort==8.0.1
     # via
     #   -r requirements/quality.in
     #   pylint
@@ -266,15 +266,15 @@ jsonfield==3.2.0
     #   -r requirements/test.txt
     #   edx-celeryutils
     #   edx-event-routing-backends
-kombu==5.5.4
+kombu==5.6.2
     # via
     #   -r requirements/test.txt
     #   celery
-lxml==6.0.2
+lxml==6.1.1
     # via
     #   -r requirements/test.txt
     #   xblock
-mako==1.3.10
+mako==1.3.12
     # via
     #   -r requirements/test.txt
     #   xblock
@@ -288,24 +288,26 @@ mccabe==0.7.0
     # via pylint
 openedx-atlas==0.7.0
     # via -r requirements/test.txt
-openedx-completion-aggregator==4.2.0
+openedx-completion-aggregator==4.5.0
     # via -r requirements/test.txt
 openedx-events==10.5.0
     # via
     #   -r requirements/test.txt
     #   event-tracking
-openedx-filters==2.1.0
+openedx-filters==3.4.1
     # via
     #   -r requirements/test.txt
     #   edx-event-routing-backends
-packaging==25.0
+packaging==26.2
     # via
     #   -r requirements/test.txt
     #   kombu
     #   pytest
-pillow==12.0.0
+pathspec==1.1.1
+    # via yamllint
+pillow==12.2.0
     # via -r requirements/test.txt
-platformdirs==4.5.0
+platformdirs==4.10.0
     # via pylint
 pluggy==1.6.0
     # via
@@ -316,28 +318,28 @@ prompt-toolkit==3.0.52
     # via
     #   -r requirements/test.txt
     #   click-repl
-psutil==7.1.3
+psutil==7.2.2
     # via
     #   -r requirements/test.txt
     #   edx-django-utils
 pycodestyle==2.14.0
     # via -r requirements/quality.in
-pycparser==2.23
+pycparser==3.0
     # via
     #   -r requirements/test.txt
     #   cffi
 pydocstyle==6.3.0
     # via -r requirements/quality.in
-pygments==2.19.2
+pygments==2.20.0
     # via
     #   -r requirements/test.txt
     #   pytest
-pyjwt[crypto]==2.10.1
+pyjwt[crypto]==2.13.0
     # via
     #   -r requirements/test.txt
     #   drf-jwt
     #   edx-drf-extensions
-pylint==3.3.9
+pylint==4.0.5
     # via
     #   edx-lint
     #   pylint-celery
@@ -345,30 +347,30 @@ pylint==3.3.9
     #   pylint-plugin-utils
 pylint-celery==0.3
     # via edx-lint
-pylint-django==2.6.1
+pylint-django==2.7.0
     # via edx-lint
 pylint-plugin-utils==0.9.0
     # via
     #   pylint-celery
     #   pylint-django
-pymongo==4.15.4
+pymongo==4.17.0
     # via
     #   -r requirements/test.txt
     #   edx-opaque-keys
     #   event-tracking
-pynacl==1.6.1
+pynacl==1.6.2
     # via
     #   -r requirements/test.txt
     #   edx-django-utils
-pytest==9.0.1
+pytest==9.0.3
     # via
     #   -r requirements/test.txt
     #   pytest-cov
     #   pytest-django
     #   pytest-xdist
-pytest-cov==7.0.0
+pytest-cov==7.1.0
     # via -r requirements/test.txt
-pytest-django==4.11.1
+pytest-django==4.12.0
     # via -r requirements/test.txt
 pytest-xdist==3.8.0
     # via -r requirements/test.txt
@@ -382,7 +384,7 @@ python-slugify==8.0.4
     # via
     #   -r requirements/test.txt
     #   code-annotations
-pytz==2025.2
+pytz==2026.2
     # via
     #   -r requirements/test.txt
     #   edx-completion
@@ -395,21 +397,24 @@ pyyaml==6.0.3
     #   -r requirements/test.txt
     #   code-annotations
     #   xblock
-redis==7.1.0
+    #   yamllint
+redis==8.0.0
     # via
     #   -r requirements/test.txt
     #   django-redis
-requests==2.32.5
+requests==2.34.2
     # via
     #   -r requirements/test.txt
     #   apache-libcloud
     #   edx-drf-extensions
     #   edx-event-routing-backends
+ruff==0.15.17
+    # via -r requirements/quality.in
 semantic-version==2.10.0
     # via
     #   -r requirements/test.txt
     #   edx-drf-extensions
-simplejson==3.20.2
+simplejson==4.1.1
     # via
     #   -r requirements/test.txt
     #   xblock
@@ -420,15 +425,14 @@ six==1.17.0
     #   edx-lint
     #   event-tracking
     #   fs
-    #   openedx-completion-aggregator
     #   python-dateutil
-snowballstemmer==3.0.1
+snowballstemmer==3.1.1
     # via pydocstyle
-sqlparse==0.5.3
+sqlparse==0.5.5
     # via
     #   -r requirements/test.txt
     #   django
-stevedore==5.6.0
+stevedore==5.8.0
     # via
     #   -r requirements/test.txt
     #   code-annotations
@@ -442,18 +446,24 @@ tincan==1.0.0
     # via
     #   -r requirements/test.txt
     #   edx-event-routing-backends
-tomlkit==0.13.3
-    # via pylint
+tomlkit==0.15.0
+    # via
+    #   edx-lint
+    #   pylint
 typing-extensions==4.15.0
     # via
     #   -r requirements/test.txt
+    #   django-redis
     #   edx-opaque-keys
-tzdata==2025.2
+tzdata==2026.2
     # via
     #   -r requirements/test.txt
-    #   faker
     #   kombu
-urllib3==2.5.0
+tzlocal==5.3.1
+    # via
+    #   -r requirements/test.txt
+    #   celery
+urllib3==2.7.0
     # via
     #   -r requirements/test.txt
     #   requests
@@ -463,23 +473,25 @@ vine==5.1.0
     #   amqp
     #   celery
     #   kombu
-wcwidth==0.2.14
+wcwidth==0.8.1
     # via
     #   -r requirements/test.txt
     #   prompt-toolkit
-web-fragments==3.1.0
+web-fragments==4.0.0
     # via
     #   -r requirements/test.txt
     #   xblock
-webob==1.8.9
+webob==1.8.10
     # via
     #   -r requirements/test.txt
     #   xblock
-xblock==5.2.0
+xblock==6.1.0
     # via
     #   -r requirements/test.txt
     #   edx-completion
     #   openedx-completion-aggregator
+yamllint==1.38.0
+    # via -r requirements/quality.in
 
 # The following packages are considered to be unsafe in a requirements file:
 # setuptools
diff --git a/requirements/test.txt b/requirements/test.txt
index deee3d4..3a72cec 100644
--- a/requirements/test.txt
+++ b/requirements/test.txt
@@ -12,7 +12,7 @@ aniso8601==10.0.1
     # via
     #   -r requirements/base.txt
     #   tincan
-apache-libcloud==3.8.0
+apache-libcloud==3.9.1
     # via
     #   -r requirements/base.txt
     #   edx-event-routing-backends
@@ -20,25 +20,25 @@ appdirs==1.4.4
     # via
     #   -r requirements/base.txt
     #   fs
-asgiref==3.11.0
+asgiref==3.11.1
     # via
     #   -r requirements/base.txt
     #   django
-attrs==25.4.0
+attrs==26.1.0
     # via
     #   -r requirements/base.txt
     #   openedx-events
-billiard==4.2.3
+billiard==4.2.4
     # via
     #   -r requirements/base.txt
     #   celery
-celery==5.5.3
+celery==5.6.3
     # via
     #   -r requirements/base.txt
     #   edx-celeryutils
     #   event-tracking
     #   openedx-completion-aggregator
-certifi==2025.11.12
+certifi==2026.5.20
     # via
     #   -r requirements/base.txt
     #   requests
@@ -47,11 +47,11 @@ cffi==2.0.0
     #   -r requirements/base.txt
     #   cryptography
     #   pynacl
-charset-normalizer==3.4.4
+charset-normalizer==3.4.7
     # via
     #   -r requirements/base.txt
     #   requests
-click==8.3.1
+click==8.4.1
     # via
     #   -r requirements/base.txt
     #   celery
@@ -72,14 +72,14 @@ click-repl==0.3.0
     # via
     #   -r requirements/base.txt
     #   celery
-code-annotations==2.3.0
+code-annotations==2.3.2
     # via
     #   -r requirements/base.txt
     #   -r requirements/test.in
     #   edx-toggles
-coverage[toml]==7.12.0
+coverage[toml]==7.14.1
     # via pytest-cov
-cryptography==46.0.3
+cryptography==48.0.1
     # via
     #   -r requirements/base.txt
     #   django-fernet-fields-v2
@@ -106,7 +106,7 @@ cryptography==46.0.3
     #   openedx-completion-aggregator
     #   openedx-events
     #   openedx-filters
-django-config-models==2.9.0
+django-config-models==3.0.0
     # via
     #   -r requirements/base.txt
     #   edx-event-routing-backends
@@ -125,9 +125,9 @@ django-model-utils==5.0.0
     #   edx-celeryutils
     #   edx-completion
     #   openedx-completion-aggregator
-django-object-actions==5.0.0
+django-object-actions==5.1.2
     # via -r requirements/base.txt
-django-redis==6.0.0
+django-redis==7.0.0
     # via
     #   -r requirements/base.txt
     #   edx-event-routing-backends
@@ -137,7 +137,7 @@ django-waffle==5.0.0
     #   edx-django-utils
     #   edx-drf-extensions
     #   edx-toggles
-djangorestframework==3.16.1
+djangorestframework==3.17.1
     # via
     #   -r requirements/base.txt
     #   django-config-models
@@ -157,12 +157,12 @@ edx-ccx-keys==2.0.2
     # via
     #   -r requirements/base.txt
     #   openedx-events
-edx-celeryutils==1.4.0
+edx-celeryutils==2.0.0
     # via
     #   -r requirements/base.txt
     #   edx-event-routing-backends
     #   openedx-completion-aggregator
-edx-completion==4.9
+edx-completion==5.0.0
     # via
     #   -r requirements/base.txt
     #   openedx-completion-aggregator
@@ -182,7 +182,7 @@ edx-event-routing-backends==9.3.8
     # via
     #   -r requirements/base.txt
     #   openedx-completion-aggregator
-edx-opaque-keys[django]==3.0.0
+edx-opaque-keys[django]==4.0.0
     # via
     #   -r requirements/base.txt
     #   edx-ccx-keys
@@ -191,14 +191,14 @@ edx-opaque-keys[django]==3.0.0
     #   openedx-completion-aggregator
     #   openedx-events
     #   openedx-filters
-edx-toggles==5.4.1
+edx-toggles==6.0.0
     # via
     #   -r requirements/base.txt
     #   edx-completion
     #   edx-event-routing-backends
     #   event-tracking
     #   openedx-completion-aggregator
-event-tracking==3.3.0
+event-tracking==4.0.2
     # via
     #   -r requirements/base.txt
     #   edx-completion
@@ -208,9 +208,9 @@ execnet==2.1.2
     # via pytest-xdist
 factory-boy==3.3.3
     # via -r requirements/test.in
-faker==38.2.0
+faker==40.23.0
     # via factory-boy
-fastavro==1.12.1
+fastavro==1.12.2
     # via
     #   -r requirements/base.txt
     #   openedx-events
@@ -222,7 +222,7 @@ fs==2.4.16
     # via
     #   -r requirements/base.txt
     #   xblock
-idna==3.11
+idna==3.18
     # via
     #   -r requirements/base.txt
     #   requests
@@ -241,15 +241,15 @@ jsonfield==3.2.0
     #   -r requirements/base.txt
     #   edx-celeryutils
     #   edx-event-routing-backends
-kombu==5.5.4
+kombu==5.6.2
     # via
     #   -r requirements/base.txt
     #   celery
-lxml==6.0.2
+lxml==6.1.1
     # via
     #   -r requirements/base.txt
     #   xblock
-mako==1.3.10
+mako==1.3.12
     # via
     #   -r requirements/base.txt
     #   xblock
@@ -261,22 +261,22 @@ markupsafe==3.0.3
     #   xblock
 openedx-atlas==0.7.0
     # via -r requirements/base.txt
-openedx-completion-aggregator==4.2.0
+openedx-completion-aggregator==4.5.0
     # via -r requirements/base.txt
 openedx-events==10.5.0
     # via
     #   -r requirements/base.txt
     #   event-tracking
-openedx-filters==2.1.0
+openedx-filters==3.4.1
     # via
     #   -r requirements/base.txt
     #   edx-event-routing-backends
-packaging==25.0
+packaging==26.2
     # via
     #   -r requirements/base.txt
     #   kombu
     #   pytest
-pillow==12.0.0
+pillow==12.2.0
     # via -r requirements/base.txt
 pluggy==1.6.0
     # via
@@ -286,38 +286,38 @@ prompt-toolkit==3.0.52
     # via
     #   -r requirements/base.txt
     #   click-repl
-psutil==7.1.3
+psutil==7.2.2
     # via
     #   -r requirements/base.txt
     #   edx-django-utils
-pycparser==2.23
+pycparser==3.0
     # via
     #   -r requirements/base.txt
     #   cffi
-pygments==2.19.2
+pygments==2.20.0
     # via pytest
-pyjwt[crypto]==2.10.1
+pyjwt[crypto]==2.13.0
     # via
     #   -r requirements/base.txt
     #   drf-jwt
     #   edx-drf-extensions
-pymongo==4.15.4
+pymongo==4.17.0
     # via
     #   -r requirements/base.txt
     #   edx-opaque-keys
     #   event-tracking
-pynacl==1.6.1
+pynacl==1.6.2
     # via
     #   -r requirements/base.txt
     #   edx-django-utils
-pytest==9.0.1
+pytest==9.0.3
     # via
     #   pytest-cov
     #   pytest-django
     #   pytest-xdist
-pytest-cov==7.0.0
+pytest-cov==7.1.0
     # via -r requirements/test.in
-pytest-django==4.11.1
+pytest-django==4.12.0
     # via -r requirements/test.in
 pytest-xdist==3.8.0
     # via -r requirements/test.in
@@ -331,7 +331,7 @@ python-slugify==8.0.4
     # via
     #   -r requirements/base.txt
     #   code-annotations
-pytz==2025.2
+pytz==2026.2
     # via
     #   -r requirements/base.txt
     #   edx-completion
@@ -344,11 +344,11 @@ pyyaml==6.0.3
     #   -r requirements/base.txt
     #   code-annotations
     #   xblock
-redis==7.1.0
+redis==8.0.0
     # via
     #   -r requirements/base.txt
     #   django-redis
-requests==2.32.5
+requests==2.34.2
     # via
     #   -r requirements/base.txt
     #   apache-libcloud
@@ -358,7 +358,7 @@ semantic-version==2.10.0
     # via
     #   -r requirements/base.txt
     #   edx-drf-extensions
-simplejson==3.20.2
+simplejson==4.1.1
     # via
     #   -r requirements/base.txt
     #   xblock
@@ -368,13 +368,12 @@ six==1.17.0
     #   edx-ccx-keys
     #   event-tracking
     #   fs
-    #   openedx-completion-aggregator
     #   python-dateutil
-sqlparse==0.5.3
+sqlparse==0.5.5
     # via
     #   -r requirements/base.txt
     #   django
-stevedore==5.6.0
+stevedore==5.8.0
     # via
     #   -r requirements/base.txt
     #   code-annotations
@@ -391,13 +390,17 @@ tincan==1.0.0
 typing-extensions==4.15.0
     # via
     #   -r requirements/base.txt
+    #   django-redis
     #   edx-opaque-keys
-tzdata==2025.2
+tzdata==2026.2
     # via
     #   -r requirements/base.txt
-    #   faker
     #   kombu
-urllib3==2.5.0
+tzlocal==5.3.1
+    # via
+    #   -r requirements/base.txt
+    #   celery
+urllib3==2.7.0
     # via
     #   -r requirements/base.txt
     #   requests
@@ -407,19 +410,19 @@ vine==5.1.0
     #   amqp
     #   celery
     #   kombu
-wcwidth==0.2.14
+wcwidth==0.8.1
     # via
     #   -r requirements/base.txt
     #   prompt-toolkit
-web-fragments==3.1.0
+web-fragments==4.0.0
     # via
     #   -r requirements/base.txt
     #   xblock
-webob==1.8.9
+webob==1.8.10
     # via
     #   -r requirements/base.txt
     #   xblock
-xblock==5.2.0
+xblock==6.1.0
     # via
     #   -r requirements/base.txt
     #   edx-completion
diff --git a/setup.py b/setup.py
index ef8c990..ce0617c 100755
--- a/setup.py
+++ b/setup.py
@@ -2,6 +2,7 @@
 """
 Package metadata for learning_paths.
 """
+
 import os
 import re
 import sys
@@ -102,7 +103,7 @@ def add_version_constraint_or_raise(current_line, current_requirements, add_if_n
                     add_version_constraint_or_raise(line, requirements, False)
 
     # process back into list of pkg><=constraints strings
-    constrained_requirements = [f'{pkg}{version or ""}' for (pkg, version) in sorted(requirements.items())]
+    constrained_requirements = [f"{pkg}{version or ''}" for (pkg, version) in sorted(requirements.items())]
     return constrained_requirements
 
 
diff --git a/tox.ini b/tox.ini
index 5225ce9..442792b 100644
--- a/tox.ini
+++ b/tox.ini
@@ -76,6 +76,8 @@ commands =
     pycodestyle learning_paths manage.py setup.py
     pydocstyle learning_paths manage.py setup.py
     isort --check-only --diff learning_paths manage.py setup.py test_settings.py
+    ruff format --check
+    yamllint --strict --format parsable .
     make selfcheck
 
 [testenv:pii_check]

From 8acbaea5d43e69ff87a21c391cbab32df60d7bb5 Mon Sep 17 00:00:00 2001
From: Agrendalath <piotr@surowiec.it>
Date: Fri, 12 Jun 2026 15:45:42 +0200
Subject: [PATCH 3/5] chore: drop Django 4.2 support

---
 .github/workflows/ci.yml | 4 ++--
 docs/conf.py             | 4 ++--
 setup.py                 | 3 ++-
 tox.ini                  | 3 +--
 4 files changed, 7 insertions(+), 7 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 096f582..b2f2733 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -16,7 +16,7 @@ jobs:
       matrix:
         os: [ubuntu-latest]
         python-version: [3.11, 3.12]
-        toxenv: [django42, django52, quality, docs, pii_check]
+        toxenv: [django52, quality, docs, pii_check]
 
     steps:
       - uses: actions/checkout@v3
@@ -37,7 +37,7 @@ jobs:
         run: tox
 
       - name: Run coverage
-        if: matrix.python-version == '3.11' && matrix.toxenv == 'django42'
+        if: matrix.python-version == '3.11' && matrix.toxenv == 'django52'
         uses: codecov/codecov-action@v3
         env:
           CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
diff --git a/docs/conf.py b/docs/conf.py
index b0b9c23..e2c95a9 100644
--- a/docs/conf.py
+++ b/docs/conf.py
@@ -518,8 +518,8 @@ def get_version(*file_paths):
 intersphinx_mapping = {
     "python": ("https://docs.python.org/3.11", None),
     "django": (
-        "https://docs.djangoproject.com/en/4.2/",
-        "https://docs.djangoproject.com/en/4.2/_objects/",
+        "https://docs.djangoproject.com/en/5.2/",
+        "https://docs.djangoproject.com/en/5.2/_objects/",
     ),
     "model_utils": ("https://django-model-utils.readthedocs.io/en/latest/", None),
 }
diff --git a/setup.py b/setup.py
index ce0617c..c5e7fea 100755
--- a/setup.py
+++ b/setup.py
@@ -157,11 +157,12 @@ def is_requirement(line):
     classifiers=[
         "Development Status :: 3 - Alpha",
         "Framework :: Django",
-        "Framework :: Django :: 4.2",
+        "Framework :: Django :: 5.2",
         "Intended Audience :: Developers",
         "License :: OSI Approved :: GNU Affero General Public License v3",
         "Natural Language :: English",
         "Programming Language :: Python :: 3",
         "Programming Language :: Python :: 3.11",
+        "Programming Language :: Python :: 3.12",
     ],
 )
diff --git a/tox.ini b/tox.ini
index 442792b..37b655d 100644
--- a/tox.ini
+++ b/tox.ini
@@ -1,5 +1,5 @@
 [tox]
-envlist = py{311,312}-django{42,52},quality,docs,pii_check
+envlist = py{311,312}-django{52},quality,docs,pii_check
 
 [doc8]
 ; D001 = Line too long
@@ -36,7 +36,6 @@ norecursedirs = .* docs requirements site-packages
 
 [testenv]
 deps =
-    django42: Django>=4.2,<4.3
     django52: Django>=5.2,<5.3
     -r{toxinidir}/requirements/test.txt
 commands =

From 5a1a0b5bbe66b565e67500b6cd362c9bcd8d7a6d Mon Sep 17 00:00:00 2001
From: Agrendalath <piotr@surowiec.it>
Date: Fri, 12 Jun 2026 16:06:10 +0200
Subject: [PATCH 4/5] docs: do not evaluate DB queries when building the docs

---
 docs/conf.py | 16 ++++++++++++++++
 1 file changed, 16 insertions(+)

diff --git a/docs/conf.py b/docs/conf.py
index e2c95a9..7e206cd 100644
--- a/docs/conf.py
+++ b/docs/conf.py
@@ -550,7 +550,23 @@ def on_init(app):  # pylint: disable=unused-argument
     )
 
 
+def skip_lazy_db_attributes(app, what, name, obj, skip, options):  # pylint: disable=unused-argument
+    """
+    Skip documenting attributes backed by a lazy database query.
+
+    Sphinx autodoc calls ``repr()`` on every documented attribute. For class attributes, such as a DRF
+    view's ``queryset = Model.objects.all()``, this forces the lazy QuerySet to hit the database, which fails
+    during the docs build because no tables exist. Their runtime value is not useful documentation anyway.
+    """
+    from django.db.models import Manager, QuerySet  # pylint: disable=import-outside-toplevel
+
+    if isinstance(obj, (QuerySet, Manager)):
+        return True
+    return skip
+
+
 def setup(app):
     """Sphinx extension: run sphinx-apidoc."""
     event = "builder-inited"
     app.connect(event, on_init)
+    app.connect("autodoc-skip-member", skip_lazy_db_attributes)

From 37a6f21c7f21a5712e39d36a5ab1bdfde4ec0912 Mon Sep 17 00:00:00 2001
From: Agrendalath <piotr@surowiec.it>
Date: Fri, 12 Jun 2026 16:09:44 +0200
Subject: [PATCH 5/5] chore: bump version

---
 CHANGELOG.rst              | 14 ++++++++++++++
 learning_paths/__init__.py |  2 +-
 2 files changed, 15 insertions(+), 1 deletion(-)

diff --git a/CHANGELOG.rst b/CHANGELOG.rst
index 1b70094..e4b8948 100644
--- a/CHANGELOG.rst
+++ b/CHANGELOG.rst
@@ -16,6 +16,20 @@ Unreleased
 
 *
 
+0.4.0 - 2026-06-12
+******************
+
+Fixed
+=====
+
+* Mark course key admin widget as safe (Django 5.2 automatically escapes this code).
+* Do not evaluate DB queries when building the docs.
+
+Removed
+=======
+
+* Django 4.2 support.
+
 0.3.5 - 2025-09-01
 ******************
 
diff --git a/learning_paths/__init__.py b/learning_paths/__init__.py
index f90c958..efc2392 100644
--- a/learning_paths/__init__.py
+++ b/learning_paths/__init__.py
@@ -2,4 +2,4 @@
 Learning Paths plugin.
 """
 
-__version__ = "0.3.5"
+__version__ = "0.4.0"