Revert "fix: update Python version to 3.11 and use latest setup-python action in workflows"

.github/workflows/playbook-test.yml

@@ -13,12 +13,12 @@ jobs:
     strategy:
       max-parallel: 4
       matrix:
-        python-version: ['3.11']
+        python-version: [3.9]
 
     steps:
     - uses: actions/checkout@v2
     - name: Set up Python ${{ matrix.python-version }}
-      uses: actions/setup-python@v5
+      uses: actions/setup-python@v1
       with:
         python-version: ${{ matrix.python-version }}
     - name: Install Dependencies

.github/workflows/syntax-test.yml

@@ -13,12 +13,12 @@ jobs:
     strategy:
       max-parallel: 4
       matrix:
-        python-version: ['3.11']
+        python-version: [3.9]
 
     steps:
     - uses: actions/checkout@v2
     - name: Set up Python ${{ matrix.python-version }}
-      uses: actions/setup-python@v5
+      uses: actions/setup-python@v1
       with:
         python-version: ${{ matrix.python-version }}
     - name: Install Dependencies

Makefile

@@ -36,6 +36,7 @@ upgrade: $(COMMON_CONSTRAINTS_TXT)
 	pip install -qr requirements/pip.txt
 	pip install -qr requirements/pip-tools.txt
 	pip-compile --upgrade -o requirements.txt requirements/base.in
+	pip-compile --upgrade -o requirements3_12.txt requirements/base3_12.in 
 	pip-compile --upgrade -o playbooks/roles/aws/templates/requirements.txt.j2 requirements/aws.in
 	pip-compile --upgrade -o util/elasticsearch/requirements.txt requirements/elasticsearch.in
 	pip-compile --upgrade -o util/jenkins/requirements-cloudflare.txt requirements/cloudflare.in
@@ -46,6 +47,7 @@ upgrade: $(COMMON_CONSTRAINTS_TXT)
 	util/post-pip-compile.sh \
 	    requirements/pip-tools.txt \
 	    requirements.txt \
+	    requirements3_12.txt \
 	    playbooks/roles/aws/templates/requirements.txt.j2 \
 	    util/elasticsearch/requirements.txt \
 	    util/jenkins/requirements-cloudflare.txt \

playbooks/roles/aws/templates/requirements.txt.j2

@@ -4,26 +4,26 @@
 #
 #    make upgrade
 #
-awscli==1.44.43
+awscli==1.38.8
     # via -r requirements/aws.in
 boto==2.49.0
     # via -r requirements/aws.in
-boto3==1.42.53
+boto3==1.37.8
     # via -r requirements/aws.in
-botocore==1.42.53
+botocore==1.37.8
     # via
     #   awscli
     #   boto3
     #   s3transfer
 colorama==0.4.6
     # via awscli
-docutils==0.19
+docutils==0.16
     # via awscli
-jmespath==1.1.0
+jmespath==1.0.1
     # via
     #   boto3
     #   botocore
-pyasn1==0.6.2
+pyasn1==0.6.1
     # via rsa
 python-dateutil==2.9.0.post0
     # via
@@ -39,7 +39,7 @@ rsa==4.7.2
     # via awscli
 s3cmd==2.4.0
     # via -r requirements/aws.in
-s3transfer==0.16.0
+s3transfer==0.11.4
     # via
     #   awscli
     #   boto3

requirements.txt

@@ -4,41 +4,39 @@
 #
 #    make upgrade
 #
-ansible==8.7.0
-    # via
-    #   -c requirements/constraints.txt
-    #   -r requirements/base.in
-ansible-core==2.15.13
+ansible==2.10.7
+    # via -r requirements/base.in
+ansible-base==2.10.17
     # via ansible
-awscli==1.44.43
+awscli==1.38.8
     # via -r requirements/base.in
 bcrypt==3.1.7
     # via
     #   -c requirements/constraints.txt
     #   paramiko
 boto==2.49.0
     # via -r requirements/base.in
-boto3==1.42.53
+boto3==1.37.8
     # via -r requirements/base.in
-botocore==1.42.53
+botocore==1.37.8
     # via
     #   awscli
     #   boto3
     #   s3transfer
-certifi==2026.1.4
+certifi==2025.1.31
     # via requests
-cffi==2.0.0
+cffi==1.17.1
     # via
     #   bcrypt
     #   cryptography
     #   pynacl
-charset-normalizer==3.4.4
+charset-normalizer==3.4.1
     # via requests
 colorama==0.4.6
     # via awscli
-cryptography==46.0.5
+cryptography==44.0.2
     # via
-    #   ansible-core
+    #   ansible-base
     #   paramiko
 datadog==0.8.0
     # via -r requirements/base.in
@@ -48,64 +46,62 @@ decorator==5.2.1
     #   networkx
 docopt==0.6.2
     # via -r requirements/base.in
-docutils==0.19
+docutils==0.16
     # via awscli
 ecdsa==0.13.3
     # via -r requirements/base.in
-idna==3.11
+idna==3.10
     # via requests
-jinja2==3.1.2
+jinja2==2.8
     # via
     #   -r requirements/base.in
-    #   ansible-core
-jmespath==1.1.0
+    #   ansible-base
+jmespath==1.0.1
     # via
     #   boto3
     #   botocore
-markupsafe==2.1.1
+markupsafe==2.0.1
     # via
     #   -r requirements/base.in
     #   jinja2
 mysqlclient==1.4.6
     # via -r requirements/base.in
 networkx==1.11
     # via -r requirements/base.in
-packaging==26.0
-    # via ansible-core
+packaging==24.2
+    # via ansible-base
 paramiko==2.4.2
     # via -r requirements/base.in
 pathlib2==2.3.0
     # via -r requirements/base.in
 prettytable==0.7.2
     # via -r requirements/base.in
-pyasn1==0.6.2
+pyasn1==0.6.1
     # via
     #   paramiko
     #   rsa
-pycparser==3.0
+pycparser==2.22
     # via cffi
-pycryptodome==3.23.0
+pycryptodome==3.21.0
     # via -r requirements/base.in
 pymongo==3.9.0
     # via -r requirements/base.in
-pynacl==1.6.2
+pynacl==1.5.0
     # via paramiko
 python-dateutil==2.9.0.post0
     # via botocore
-pyyaml==6.0.3
+pyyaml==6.0.2
     # via
     #   -r requirements/base.in
-    #   ansible-core
+    #   ansible-base
     #   awscli
-requests==2.32.5
+requests==2.32.3
     # via
     #   -r requirements/base.in
     #   datadog
-resolvelib==1.0.1
-    # via ansible-core
 rsa==4.7.2
     # via awscli
-s3transfer==0.16.0
+s3transfer==0.11.4
     # via
     #   awscli
     #   boto3
@@ -116,6 +112,7 @@ six==1.17.0
     #   python-dateutil
 urllib3==1.26.18
     # via
+    #   -c requirements/common_constraints.txt
     #   -r requirements/base.in
     #   botocore
     #   requests

requirements/base.in

@@ -1,16 +1,16 @@
 -c constraints.txt
 # Standard dependencies for Ansible runs
 
-ansible<9.0.0
+ansible<3.0.0
 awscli
 boto
 boto3
 urllib3==1.26.18
 datadog==0.8.0
 docopt==0.6.2
 ecdsa==0.13.3
-Jinja2==3.1.2
-markupsafe==2.1.1
+Jinja2==2.8
+markupsafe==2.0.1                  # Pining this until we upgrade jinja2, as in newer version on markupsafe soft_unicode is removed and jinja2==2.8 use this pkg
 mysqlclient==1.4.6                 # Needed for the mysql_db module, 1,4,6 is the newest version that support python 2 which we really need to stop using
 networkx==1.11
 paramiko==2.4.2

requirements/base3_12.in

@@ -0,0 +1,22 @@
+-c constraints.txt
+# Standard dependencies for Ansible runs
+
+ansible<10.0.0
+awscli
+boto
+boto3
+urllib3==1.26.18
+datadog==0.8.0
+docopt==0.6.2
+ecdsa==0.13.3
+Jinja2==3.1.2
+markupsafe==2.1.1
+mysqlclient==1.4.6                 # Needed for the mysql_db module, 1,4,6 is the newest version that support python 2 which we really need to stop using
+networkx==1.11
+paramiko==2.4.2
+pathlib2==2.3.0
+prettytable==0.7.2
+pycryptodome
+pymongo==3.9.0                      # Needed for the mongo_* modules (playbooks/library/mongo_*)
+PyYAML
+requests

requirements/common_constraints.txt

@@ -12,15 +12,27 @@
 #  this file from Github directly. It does not require packaging in edx-lint.
 
 # using LTS django version
-Django<6.0
+Django<5.0
 
 # elasticsearch>=7.14.0 includes breaking changes in it which caused issues in discovery upgrade process.
 # elastic search changelog: https://www.elastic.co/guide/en/enterprise-search/master/release-notes-7.14.0.html
 # See https://github.com/openedx/edx-platform/issues/35126 for more info
 elasticsearch<7.14.0
 
-# pip 26 is incompatible with pip-tools hence causing failures during the build process
-# Make upgrade command and all requirements upgrade jobs are broken due to this.
-# The constraint can be removed once a release (pip-tools > 7.5.2) is available with support for pip 26
-# Issue to track this dependency and unpin later on: https://github.com/jazzband/pip-tools/issues/2319
-pip<26.0
+# django-simple-history>3.0.0 adds indexing and causes a lot of migrations to be affected
+django-simple-history==3.0.0
+
+# Cause: https://github.com/openedx/event-tracking/pull/290
+# event-tracking 2.4.1 upgrades to pymongo 4.4.0 which is not supported on edx-platform.
+# We will pin event-tracking to do not break existing installations
+# This can be unpinned once https://github.com/openedx/edx-platform/issues/34586
+# has been resolved and edx-platform is running with pymongo>=4.4.0
+event-tracking<2.4.1
+
+# Cause: https://github.com/openedx/edx-lint/issues/458
+# This can be unpinned once https://github.com/openedx/edx-lint/issues/459 has been resolved.
+pip<24.3
+
+# Cause: https://github.com/openedx/edx-lint/issues/475
+# This can be unpinned once https://github.com/openedx/edx-lint/issues/476 has been resolved.
+urllib3<2.3.0

requirements/constraints.txt

@@ -1,11 +1,3 @@
 -c common_constraints.txt
 
 bcrypt<3.2.0 # 3.2.0 dropped support for python 2.7
-
-# Python 3.9 reached EOL in October 2025 and was removed from GitHub Actions runners
-# GitHub Actions workflows now use Python 3.11
-# Ansible 9+ supports Python 3.11+ but removed the deprecated 'include' syntax causing playbook failures
-# Ansible 8.7.0 is the latest version that supports both Python 3.11 AND the deprecated 'include' syntax
-# The constraint can be removed once all 63 instances of 'include' are migrated to 'include_tasks' or 'import_tasks'
-# Issue to track this dependency and unpin later on: https://2u-internal.atlassian.net/browse/GSRE-2248
-ansible<9.0.0

requirements/pip-tools.txt

@@ -4,21 +4,19 @@
 #
 #    make upgrade
 #
-build==1.4.0
+build==1.2.2.post1
     # via pip-tools
-click==8.3.1
+click==8.1.8
     # via pip-tools
-packaging==26.0
-    # via
-    #   build
-    #   wheel
-pip-tools==7.5.3
+packaging==24.2
+    # via build
+pip-tools==7.4.1
     # via -r requirements/pip-tools.in
 pyproject-hooks==1.2.0
     # via
     #   build
     #   pip-tools
-wheel==0.46.3
+wheel==0.45.1
     # via pip-tools
 
 # The following packages are considered to be unsafe in a requirements file:

requirements/pip.txt

@@ -8,7 +8,7 @@ wheel==0.44.0
     # via -r requirements/pip.in
 
 # The following packages are considered to be unsafe in a requirements file:
-pip==25.3
+pip==24.2
     # via
     #   -c requirements/common_constraints.txt
     #   -r requirements/pip.in