tutor 23.0.0.dev3205__tar.gz → 23.0.0.dev3210__tar.gz

{tutor-23.0.0.dev3205 → tutor-23.0.0.dev3210}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: tutor
-Version: 23.0.0.dev3205
+Version: 23.0.0.dev3210
 Summary: The Docker-based Open edX distribution designed for peace of mind
 Project-URL: Homepage, https://docs.tutor.edly.io/
 Project-URL: Documentation, https://docs.tutor.edly.io/
@@ -42,7 +42,7 @@ Requires-Dist: attrs==26.1.0; extra == 'dev'
 Requires-Dist: backports-tarfile==1.2.0; extra == 'dev'
 Requires-Dist: build==1.4.4; extra == 'dev'
 Requires-Dist: cachetools==5.5.2; extra == 'dev'
-Requires-Dist: certifi==2025.8.3; extra == 'dev'
+Requires-Dist: certifi==2026.10.19; extra == 'dev'
 Requires-Dist: charset-normalizer==3.4.7; extra == 'dev'
 Requires-Dist: click-log==0.4.0; extra == 'dev'
 Requires-Dist: click==8.5.0; extra == 'dev'

{tutor-23.0.0.dev3205 → tutor-23.0.0.dev3210}/requirements/dev.txt

@@ -20,7 +20,7 @@ cachetools==5.5.2
     # via
     #   -r requirements/base.txt
     #   google-auth
-certifi==2025.8.3
+certifi==2026.10.19
     # via
     #   -r requirements/base.txt
     #   kubernetes

{tutor-23.0.0.dev3205 → tutor-23.0.0.dev3210}/tutor/__about__.py

@@ -2,7 +2,7 @@ import os
 
 # Increment this version number to trigger a new release. See
 # docs/tutor.html#versioning for information on the versioning scheme.
-__version__ = "22.0.2"
+__version__ = "22.0.3"
 
 # The version suffix will be appended to the actual version, separated by a
 # dash. Use this suffix to differentiate between the actual released version and

{tutor-23.0.0.dev3205 → tutor-23.0.0.dev3210}/tutor/templates/build/openedx/Dockerfile

@@ -8,10 +8,10 @@ ENV DEBIAN_FRONTEND=noninteractive
 RUN --mount=type=cache,target=/var/cache/apt,sharing=locked \
     --mount=type=cache,target=/var/lib/apt,sharing=locked \
     apt update && \
-    apt install -y build-essential curl git language-pack-en
+    apt install -y build-essential ca-certificates curl git language-pack-en
 ENV LC_ALL=en_US.UTF-8
 
-COPY --from=ghcr.io/astral-sh/uv:0.9.18 /uv /usr/local/bin/uv
+COPY --from=ghcr.io/astral-sh/uv:0.13.5 /uv /usr/local/bin/uv
 ARG PIP_COMMAND="uv pip"
 
 # Constrain the build-time setuptools used in the isolated (PEP 517) build
@@ -23,6 +23,8 @@ ARG PIP_COMMAND="uv pip"
 RUN echo "setuptools==80.9.0" > /etc/openedx-build-constraints.txt
 ENV UV_BUILD_CONSTRAINT=/etc/openedx-build-constraints.txt
 ENV PIP_CONSTRAINT=/etc/openedx-build-constraints.txt
+# pip 26 no longer applies PIP_CONSTRAINT to build dependencies
+ENV PIP_BUILD_CONSTRAINT=/etc/openedx-build-constraints.txt
 
 {{ patch("openedx-dockerfile-minimal") }}
 
@@ -110,7 +112,7 @@ RUN --mount=type=cache,target=/openedx/.cache/pip,sharing=shared \
     # https://pypi.org/project/setuptools/
     # https://pypi.org/project/pip/
     # https://pypi.org/project/wheel/
-    setuptools pip==24.0 wheel==0.43.0
+    setuptools pip==26.2.2 wheel==0.43.0
 
 # Install base requirements and asset-building requirements
 RUN --mount=type=bind,from=edx-platform,source=/pyproject.toml,target=/openedx/edx-platform/pyproject.toml \
@@ -118,6 +120,11 @@ RUN --mount=type=bind,from=edx-platform,source=/pyproject.toml,target=/openedx/e
     --mount=type=cache,target=/openedx/.cache/pip,sharing=shared \
     cd /openedx/edx-platform && uv sync --frozen --no-default-groups --group bundled --group assets --no-install-project --active
 
+# Upgrade certifi until edx-platform pins a version without the compromised emSign roots
+# https://emudhra.we-have-a-problem.com/
+RUN --mount=type=cache,target=/openedx/.cache/pip,sharing=shared \
+    $PIP_COMMAND install "certifi>=2026.10.19"
+
 # Install extra requirements
 RUN --mount=type=cache,target=/openedx/.cache/pip,sharing=shared \
     $PIP_COMMAND install \
@@ -146,7 +153,7 @@ ENV PATH=/openedx/nodeenv/bin:/openedx/venv/bin:${PATH}
 # Install nodeenv with the version provided by edx-platform
 # https://github.com/openedx/edx-platform/blob/master/requirements/edx/assets.txt
 RUN $PIP_COMMAND install nodeenv==1.9.1
-RUN nodeenv /openedx/nodeenv --node=24.16.0 --prebuilt
+RUN nodeenv /openedx/nodeenv --node=24.22.1 --prebuilt
 
 # Install nodejs requirements
 ARG NPM_REGISTRY={{ NPM_REGISTRY }}
@@ -293,6 +300,9 @@ USER app
 RUN --mount=type=cache,target=/openedx/.cache/pip,sharing=shared \
     uv export --frozen --no-hashes --no-default-groups --group development | \
     $PIP_COMMAND install -r /dev/stdin
+# The development dependency group pins the old certifi again, so upgrade it one more time
+RUN --mount=type=cache,target=/openedx/.cache/pip,sharing=shared \
+    $PIP_COMMAND install "certifi>=2026.10.19"
 # https://pypi.org/project/ipdb/
 # https://pypi.org/project/ipython (>=Python 3.10 started with 8.20)
 RUN --mount=type=cache,target=/openedx/.cache/pip,sharing=shared \

{tutor-23.0.0.dev3205 → tutor-23.0.0.dev3210}/tutor/templates/config/defaults.yml

@@ -15,7 +15,7 @@ DOCKER_REGISTRY: "docker.io/"
 DOCKER_IMAGE_OPENEDX: "{{ DOCKER_REGISTRY }}overhangio/openedx:{{ TUTOR_VERSION }}"
 DOCKER_IMAGE_OPENEDX_DEV: "openedx-dev:{{ TUTOR_VERSION }}"
 # https://hub.docker.com/_/caddy/tags
-DOCKER_IMAGE_CADDY: "docker.io/caddy:2.11.4"
+DOCKER_IMAGE_CADDY: "docker.io/caddy:2.11.7"
 # https://hub.docker.com/r/getmeili/meilisearch/tags
 DOCKER_IMAGE_MEILISEARCH: "docker.io/getmeili/meilisearch:v1.36.0"
 # https://hub.docker.com/_/mongo/tags