build: Adding constraints to avoid multiple major upgrades. (#31551)

* build: Adding constraints to avoid multiple major upgrades

.github/workflows/static-assets-check.yml

@@ -26,6 +26,11 @@ jobs:
       with:
         python-version: ${{ matrix.python-version }}
 
+    - name: Install system Packages
+      run: |
+        sudo apt-get update
+        sudo apt-get install libxmlsec1-dev pkg-config
+
     - name: Setup Node
       uses: actions/setup-node@v2
       with:

requirements/common_constraints.txt

@@ -34,3 +34,8 @@ django-simple-history==3.0.0
 # tox>4.0.0 isn't yet compatible with many tox plugins, causing CI failures in almost all repos.
 # Details can be found in this discussion: https://github.com/tox-dev/tox/discussions/1810
 tox<4.0.0
+
+# edx-sphinx-theme is not compatible with latest Sphinx==6.0.0 version 
+# Pinning Sphinx version unless the compatibility issue gets resolved
+# For details, see issue https://github.com/openedx/edx-sphinx-theme/issues/197
+sphinx<6.0.0

requirements/constraints.txt

@@ -88,3 +88,16 @@ pytz==2022.2.1
 # docutils==0.19 has removed the docutils.core.ErrorString which is required by the sphinxcontrib-openapi
 # This constraint can be removed once sphinxcontrib-openapi is updated to resolve this issue.
 docutils<0.19
+
+# right now lots of packages have major upgrades and lots of tests failing.
+# so adding following constraints and will unpin one by one.
+
+django-ratelimit<4.0.0
+django-classy-tags<4.0.0
+edx-event-bus-kafka<3.0.0
+python-slugify<7.0.0
+django-countries==7.4.2
+sphinxcontrib-openapi[markdown]==0.7.0
+icalendar==5.0.1
+cryptography==38.0.4 # greater version has some issues.
+importlib-metadata==5.1.0

requirements/edx-sandbox/py38.txt

@@ -1,6 +1,6 @@
 #
-# This file is autogenerated by pip-compile with Python 3.8
-# by the following command:
+# This file is autogenerated by pip-compile with python 3.8
+# To update, run:
 #
 #    make upgrade
 #
@@ -14,15 +14,17 @@ click==8.1.3
     #   nltk
 codejail-includes==1.0.0
     # via -r requirements/edx-sandbox/py38.in
-cryptography==38.0.3
-    # via -r requirements/edx-sandbox/py38.in
+cryptography==38.0.4
+    # via
+    #   -c requirements/edx-sandbox/../constraints.txt
+    #   -r requirements/edx-sandbox/py38.in
 cycler==0.11.0
     # via matplotlib
 joblib==1.2.0
     # via nltk
 kiwisolver==1.4.4
     # via matplotlib
-lxml==4.9.1
+lxml==4.9.2
     # via
     #   -r requirements/edx-sandbox/py38.in
     #   openedx-calc
@@ -36,9 +38,9 @@ matplotlib==3.3.4
     #   -r requirements/edx-sandbox/py38.in
 mpmath==1.2.1
     # via sympy
-networkx==2.8.8
+networkx==3.0
     # via -r requirements/edx-sandbox/py38.in
-nltk==3.7
+nltk==3.8.1
     # via
     #   -r requirements/edx-sandbox/py38.in
     #   chem
@@ -50,7 +52,7 @@ numpy==1.22.4
     #   scipy
 openedx-calc==3.0.1
     # via -r requirements/edx-sandbox/py38.in
-pillow==9.3.0
+pillow==9.4.0
     # via matplotlib
 pycparser==2.21
     # via cffi