fix: make upgrade to reinstall pip before running pip-compile

Makefile

@@ -19,6 +19,7 @@ PIP_COMPILE = pip-compile --upgrade $(PIP_COMPILE_OPTS)
 upgrade: export CUSTOM_COMPILE_COMMAND=make upgrade
 upgrade: ## update the requirements/*.txt files with the latest packages satisfying requirements/*.in
 	pip install -qr requirements/pip-tools.txt
+	pip install -qr requirements/pip.txt
 	# Make sure to compile files after any other files they include!
 	$(PIP_COMPILE) --allow-unsafe -o requirements/pip.txt requirements/pip.in
 	$(PIP_COMPILE) -o requirements/pip-tools.txt requirements/pip-tools.in

requirements/base.txt

@@ -8,13 +8,13 @@ appdirs==1.4.4
     # via fs
 asgiref==3.10.0
     # via django
-boto3==1.40.55
+boto3==1.40.68
     # via fs-s3fs
-botocore==1.40.55
+botocore==1.40.68
     # via
     #   boto3
     #   s3transfer
-django==4.2.25
+django==5.2.8
     # via
     #   -c https://raw.githubusercontent.com/edx/edx-lint/master/edx_lint/files/common_constraints.txt
     #   django-appconf
@@ -55,7 +55,7 @@ markupsafe==3.0.3
     # via
     #   mako
     #   xblock
-nh3==0.3.1
+nh3==0.3.2
     # via -r requirements/base.in
 oauthlib==3.3.1
     # via -r requirements/base.in

requirements/dev.txt

@@ -29,12 +29,12 @@ binaryornot==0.4.4
     #   -r requirements/quality.txt
     #   -r requirements/test.txt
     #   cookiecutter
-boto3==1.40.55
+boto3==1.40.68
     # via
     #   -r requirements/quality.txt
     #   -r requirements/test.txt
     #   fs-s3fs
-botocore==1.40.55
+botocore==1.40.68
     # via
     #   -r requirements/quality.txt
     #   -r requirements/test.txt
@@ -95,7 +95,7 @@ cookiecutter==2.6.0
     #   -r requirements/quality.txt
     #   -r requirements/test.txt
     #   xblock-sdk
-coverage[toml]==7.11.0
+coverage[toml]==7.11.1
     # via
     #   -r requirements/quality.txt
     #   -r requirements/test.txt
@@ -115,7 +115,7 @@ distlib==0.4.0
     #   -r requirements/quality.txt
     #   -r requirements/test.txt
     #   virtualenv
-django==4.2.25
+django==5.2.8
     # via
     #   -c https://raw.githubusercontent.com/edx/edx-lint/master/edx_lint/files/common_constraints.txt
     #   -r requirements/quality.txt
@@ -235,7 +235,7 @@ mdurl==0.1.2
     #   -r requirements/quality.txt
     #   -r requirements/test.txt
     #   markdown-it-py
-nh3==0.3.1
+nh3==0.3.2
     # via
     #   -r requirements/quality.txt
     #   -r requirements/test.txt
@@ -428,7 +428,7 @@ tomlkit==0.13.3
     # via
     #   -r requirements/quality.txt
     #   pylint
-tox==4.31.0
+tox==4.32.0
     # via
     #   -r requirements/quality.txt
     #   -r requirements/test.txt
@@ -448,7 +448,7 @@ urllib3==2.5.0
     #   -r requirements/test.txt
     #   botocore
     #   requests
-virtualenv==20.35.3
+virtualenv==20.35.4
     # via
     #   -r requirements/quality.txt
     #   -r requirements/test.txt

requirements/doc.txt

@@ -32,11 +32,11 @@ binaryornot==0.4.4
     # via
     #   -r requirements/test.txt
     #   cookiecutter
-boto3==1.40.55
+boto3==1.40.68
     # via
     #   -r requirements/test.txt
     #   fs-s3fs
-botocore==1.40.55
+botocore==1.40.68
     # via
     #   -r requirements/test.txt
     #   boto3
@@ -51,8 +51,6 @@ certifi==2025.10.5
     # via
     #   -r requirements/test.txt
     #   requests
-cffi==2.0.0
-    # via cryptography
 chardet==5.2.0
     # via
     #   -r requirements/test.txt
@@ -77,19 +75,17 @@ cookiecutter==2.6.0
     # via
     #   -r requirements/test.txt
     #   xblock-sdk
-coverage[toml]==7.11.0
+coverage[toml]==7.11.1
     # via
     #   -r requirements/test.txt
     #   pytest-cov
-cryptography==46.0.3
-    # via secretstorage
 ddt==1.7.2
     # via -r requirements/test.txt
 distlib==0.4.0
     # via
     #   -r requirements/test.txt
     #   virtualenv
-django==4.2.25
+django==5.2.8
     # via
     #   -c https://raw.githubusercontent.com/edx/edx-lint/master/edx_lint/files/common_constraints.txt
     #   -r requirements/test.txt
@@ -157,10 +153,6 @@ jaraco-context==6.0.1
     # via keyring
 jaraco-functools==4.3.0
     # via keyring
-jeepney==0.9.0
-    # via
-    #   keyring
-    #   secretstorage
 jinja2==3.1.6
     # via
     #   -r requirements/test.txt
@@ -207,7 +199,7 @@ more-itertools==10.8.0
     # via
     #   jaraco-classes
     #   jaraco-functools
-nh3==0.3.1
+nh3==0.3.2
     # via
     #   -r requirements/test.txt
     #   readme-renderer
@@ -244,8 +236,6 @@ polib==1.2.0
     # via
     #   -r requirements/test.txt
     #   edx-i18n-tools
-pycparser==2.23
-    # via cffi
 pydata-sphinx-theme==0.15.4
     # via sphinx-book-theme
 pygments==2.19.2
@@ -331,8 +321,6 @@ s3transfer==0.14.0
     # via
     #   -r requirements/test.txt
     #   boto3
-secretstorage==3.4.0
-    # via keyring
 simplejson==3.20.2
     # via
     #   -r requirements/test.txt
@@ -381,7 +369,7 @@ text-unidecode==1.3
     # via
     #   -r requirements/test.txt
     #   python-slugify
-tox==4.31.0
+tox==4.32.0
     # via -r requirements/test.txt
 twine==6.2.0
     # via -r requirements/doc.in
@@ -401,7 +389,7 @@ urllib3==2.5.0
     #   botocore
     #   requests
     #   twine
-virtualenv==20.35.3
+virtualenv==20.35.4
     # via
     #   -r requirements/test.txt
     #   tox

requirements/pip.txt

@@ -9,6 +9,8 @@ wheel==0.45.1
 
 # The following packages are considered to be unsafe in a requirements file:
 pip==25.2
-    # via -r requirements/pip.in
+    # via
+    #   -c https://raw.githubusercontent.com/edx/edx-lint/master/edx_lint/files/common_constraints.txt
+    #   -r requirements/pip.in
 setuptools==80.9.0
     # via -r requirements/pip.in

requirements/quality.txt

@@ -24,11 +24,11 @@ binaryornot==0.4.4
     # via
     #   -r requirements/test.txt
     #   cookiecutter
-boto3==1.40.55
+boto3==1.40.68
     # via
     #   -r requirements/test.txt
     #   fs-s3fs
-botocore==1.40.55
+botocore==1.40.68
     # via
     #   -r requirements/test.txt
     #   boto3
@@ -71,7 +71,7 @@ cookiecutter==2.6.0
     # via
     #   -r requirements/test.txt
     #   xblock-sdk
-coverage[toml]==7.11.0
+coverage[toml]==7.11.1
     # via
     #   -r requirements/test.txt
     #   pytest-cov
@@ -83,7 +83,7 @@ distlib==0.4.0
     # via
     #   -r requirements/test.txt
     #   virtualenv
-django==4.2.25
+django==5.2.8
     # via
     #   -c https://raw.githubusercontent.com/edx/edx-lint/master/edx_lint/files/common_constraints.txt
     #   -r requirements/test.txt
@@ -177,7 +177,7 @@ mdurl==0.1.2
     # via
     #   -r requirements/test.txt
     #   markdown-it-py
-nh3==0.3.1
+nh3==0.3.2
     # via -r requirements/test.txt
 oauthlib==3.3.1
     # via -r requirements/test.txt
@@ -317,7 +317,7 @@ text-unidecode==1.3
     #   python-slugify
 tomlkit==0.13.3
     # via pylint
-tox==4.31.0
+tox==4.32.0
     # via -r requirements/test.txt
 typing-extensions==4.15.0
     # via
@@ -332,7 +332,7 @@ urllib3==2.5.0
     #   -r requirements/test.txt
     #   botocore
     #   requests
-virtualenv==20.35.3
+virtualenv==20.35.4
     # via
     #   -r requirements/test.txt
     #   tox

requirements/test.txt

@@ -16,11 +16,11 @@ asgiref==3.10.0
     #   django
 binaryornot==0.4.4
     # via cookiecutter
-boto3==1.40.55
+boto3==1.40.68
     # via
     #   -r requirements/base.txt
     #   fs-s3fs
-botocore==1.40.55
+botocore==1.40.68
     # via
     #   -r requirements/base.txt
     #   boto3
@@ -45,7 +45,7 @@ colorama==0.4.6
     # via tox
 cookiecutter==2.6.0
     # via xblock-sdk
-coverage[toml]==7.11.0
+coverage[toml]==7.11.1
     # via pytest-cov
 ddt==1.7.2
     # via -r requirements/test.in
@@ -128,7 +128,7 @@ markupsafe==3.0.3
     #   xblock
 mdurl==0.1.2
     # via markdown-it-py
-nh3==0.3.1
+nh3==0.3.2
     # via -r requirements/base.txt
 oauthlib==3.3.1
     # via -r requirements/base.txt
@@ -229,7 +229,7 @@ stevedore==5.5.0
     #   edx-opaque-keys
 text-unidecode==1.3
     # via python-slugify
-tox==4.31.0
+tox==4.32.0
     # via -r requirements/test.in
 typing-extensions==4.15.0
     # via
@@ -242,7 +242,7 @@ urllib3==2.5.0
     #   -r requirements/base.txt
     #   botocore
     #   requests
-virtualenv==20.35.3
+virtualenv==20.35.4
     # via tox
 web-fragments==3.1.0
     # via