chore(deps): update dependency tutor to v21

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
tutor (changelog)	<19 → <22

---

Release Notes

overhangio/tutor (tutor)

v21.0.2

Compare Source

• [Feature] Upgrade to Open edX Ulmo.2 (by @​ahmed-arb)

v21.0.1

Compare Source

• [Feature] Add support for mounting openedx-platform, the which is new name of edx-platform. Mounting by the old name, edx-platform, will continue to work for now as well (by @​kdmccormick).

• [Bugfix] Upgrade edx-search to 4.4.0 to fix Catalog MFE (by @​kdmccormick)

• [Security] Upgrade Django from 5.2.7 to 5.2.11 (by @​kdmccormick)

• [Bugfix] Upgrade ora2 to address pkg_resources build failure (by @​kdmccormick)

v21.0.0

Compare Source

• [Improvement] Use uv as a replacement for
  pip for installing and resolving packages. uv provides a faster package
  resolution and installation steps, reducing the python-requirements layer
  build time by about ~2-5x.

  For the most part uv is a drop-in replacement for main pip functionality with
  the exception of VCS editable requirements. The main use of VCS editable
  requirements is to copy all the files in the VCS repository when installing
  the package. This can be avoided by making proper use of a MANIFEST.in file.
  It's possible to also use the PIP_COMMAND=pip build argument to keep using
  pip.

• 💥[Deprecation] Remove preview page configuration as the page has been migrated to the learning MFE. (by @​Danyal-Faheem)

💥[Deprecation] Remove deprecated WebUI plugin in favor of Tutor Deck. (by @​Abdul-Muqadim-Arbisoft)

💥[Feature] Upgrade to Ulmo. (by @​ahmed-arb)

• [Feature] Add authorization policy loading functionality to LMS/CMS services. (by @​mariajgrimaldi)

• 💥[Improvement] Replacing "patchesStrategicMerge" key with "patches" key in the main Kustomization file (by @​jfavellar90). patchesStrategicMerge was deprecated in the release v5.0.0 of the Kustomization API. It is replaced by the patches key which is more powerful and allows defining different patch types. This has the following consequences:

  • The patch "kustomization-patches-strategic-merge" was renamed to "kustomization-patches"
  • Extra Kustomization patches added via the "kustomization-patches" Tutor patch must respect the format specified here. It implies moving old "patchesStrategicMerge" extra patches to the "patches" format.

• [Feature] Add tutor livedeps to the list of plugins available by default. (by @​mlabeeb03)

• [Bugfix] Add correct EVENT_BUS_REDIS_CONNECTION_URL settings for event-bus. (by @​Faraz32123)

• [Bugfix] Update Node.js to version 24. Python remains at 3.11 as upstream edx-platform does not fully support it yet.

v20.0.5

Compare Source

• [Bugfix] Fix duplicate volume mounts error caused by same repo/package name(e.g. openedx-scorm-xblock) matching multiple expressions(("openedx", r".[xX][bB]lock."), ("openedx", r"openedx-.*")) in MOUNTED_DIRECTORIES. (by @​Faraz32123)

• [BugFix] Update MongoDB to v7.0.28, resolving a critical upstream security issue https://jira.mongodb.org/browse/SERVER-115508. (by @​Faraz32123)

v20.0.4

Compare Source

• [Chore] Update hatch definition for version. (by @​mlabeeb03)

• [Improvement] Add ability to not delete namespace while running tutor k8s delete command. (by @​mlabeeb03)

• [Security] Add upstream security fix as patch in Open edX image (by @​ahmed-arb)

[Security] Bump urllib3 from 2.5.0 to 2.6.0 to address Dependabot alerts.

v20.0.3

Compare Source

• [Bugfix] Fix packaging issue where a stray venv/ directory was included in the source distribution (sdist)
  for previous releases. The build configuration now correctly excludes the venv/ folder from package archives. (by @​ahmed-arb)

• [Feature] Add tutor livedeps to the list of plugins available by default. (by @​mlabeeb03)

• [Feature] Update OPENEDX_COMMON_VERSION to teak.3 tag (by @​ahmed-arb)

v20.0.2

Compare Source

• [Feature] Add support for pruning unused Kubernetes ConfigMaps with --prune-configmaps via the Tutor CLI. (by @​dkaliberda)

• [Security] Switch to a cryptographically secure number generator for the random_string function. (by @​samuelallan72)

• [Improvement] Upgrade node to v20.19.5 in Open edX Docker image. (by @​dawoudsheraz)

• [Improvement] Migrate from pylint and black to ruff. (by @​ahmed-arb)

v20.0.1

Compare Source

• [Feature] Add max-log-requests parameter for command tutor k8s logs. (by @​mlabeeb03)

• [Improvement] Redis version upgraded to 7.4.5. (by @​CodeWithEmad)

• [Feature] Update OPENEDX_COMMON_VERSION to teak.2 tag (by @​ahmed-arb)

v20.0.0

Compare Source

• 💥[Depreciation] Remove the unnecessary site-configuration script in favour of the create_or_update_site_configuration management command provided in edx-platform. (by @​Danyal-Faheem)

• 💥[Feature] Upgrade to Teak. (by @​ahmed-arb)

v19.0.5

Compare Source

• [Feature] Enable the "contrib" plugin index by default. This enables platform users to view 3rd party plugins without having to run tutor plugins index add contrib. (by @​regisb)
• [Feature] Automatically update the plugin index cache on all commands that need it. Including: plugins install/upgrade/search. This makes it slightly easier for end users to use plugins. (by @​regisb)

v19.0.4

Compare Source

• [Improvement] When running local/dev start/run, run dev/local stop less frequently. Also, make sure that we detect only running docker compose projects associated to Tutor. (by @​regisb)
• [Improvement] Do not wait for non-tutor jobs while running k8s. (by @​mlabeeb03)
• [Bugfix] Support plugin installation with unexpected pip path and/or uv. (by @​regisb)

v19.0.3

Compare Source

• [Improvement] Migrate packaging from setup.py/setuptools to pyproject.toml/hatch. This should not be a breaking change for most users. (by @​regisb)

• [Improvement] Add hatch_build.py in sdist target to fix the installation issues (by @​dawoudsheraz)

• [Improvement] MEILISEARCH_HOST enables Tutor to configure meilisearch host
  and expose it to be used by other plugins. For example MEILISEARCH_HOST can be
  optionally used to configure ingress controller in openedx-k8s-harmony like
  LMS_HOST etc.

• [Bugfix] Update lms and cms dev jobs to use correct django settings (by @​dawoudsheraz)

• [Improvement] Add support for docker-compose.prod.override.yml when using
  tutor local commands

• [Feature] Add tutor deck to the list of plugins installed by default. (by @​mlabeeb03)

• [Improvement] Stop dev platform on local run commands. Trigger COMPOSE_PROJECT_STARTED only once per tutor runtime. (by @​mlabeeb03)

• [Feature] Add new command tutor dev hosts that displays status of services. (by @​mlabeeb03)

• [Feature] Update OPENEDX_COMMON_VERSION to sumac.3 tag (by @​dawoudsheraz)

v19.0.2

Compare Source

• [Improvement] Add a do command to update the authentication plugin of existing MySQL users from mysql_native_password to caching_sha2_password for compatibility with MySQL v8.4.0 and above. (by @​Danyal-Faheem)

• [Improvement] Move the openedx-auth patch to the bottom of the auth.yml file to allow patching DATABASES, EMAIL and XQUEUE options. (by @​Danyal-Faheem)

• [Improvement] Allow installing custom openedx-scorm-xblock using the openedx-dockerfile-post-python-requirements patch. (by @​Danyal-Faheem)

• [Feature] Update OPENEDX_COMMON_VERSION to sumac.2 tag (by @​dawoudsheraz)

v19.0.1

Compare Source

• [Bugfix] Add meilisearch as a dependency on lms-job to avoid meilisearch init job crashing when the platform is stopped. (by @​Danyal-Faheem)
• [Improvement] Silence "imghdr" warning in edx-platform. (by @​regisb)
• [Bugfix] Properly reload a plugin module on enable/disable/enable. This is an edge case that should not have affected anyone. (by @​regisb)

v19.0.0

Compare Source

• 💥[Feature] Upgrade default charset and collation of mysql to utf8mb4 and utf8mb4_unicode_ci respectively (by @​Danyal-Faheem)

  • Add do command to upgrade the charset and collation of tables in mysql.
  • The command will perform the following upgrades:
    • Upgrade all utf8mb3 charset to utf8mb4
    • Upgrade collation utf8mb3_general_ci to utf8mb4_unicode_ci
    • Upgrade collation utf8mb3_bin to utf8mb4_bin
    • Upgrade collation utf8mb3_* to utf8mb4_*

• [Feature] Create a new /data/openedx-media-private volume to store media files that are not publicly accessible via the browser, and create configuration that Learning Core (openedx-learning) will use to access this storage space. Learning Core will use a sub-directory of /data/openedx-media-private to store Content Library file uploads, but other apps can create their own sub-directories for their own use. (by @​ormsbee)

• 💥[Feature] Update Open edX Image to use Ubuntu 22.04 as base OS. (by @​dawoudsheraz)

  • Adds xmlsec related dependencies to fix xmlsec import issues during translations build

• 💥[Feature] Migrate from local.edly.io to local.openedx.io. (by @​regisb)

• 💥[Feature] Upgrade to Sumac. (by @​dawoudsheraz)

• 💥[Feature] Replace Elasticsearch by Meilisearch. Elasticsearch was both a source of complexity and high resource usage. With this change, we no longer run Elasticsearch to perform common search queries across Open edX. This includes: course discovery, courseware search and studio search. Instead, we index all these documents in a Meilisearch instance, which is much more lightweight in terms of memory consumption. (by @​regisb)

• [Bugfix] Don't build uwsgi with XML support (by @​feanil)

• [Feature] With the new forum v2 application, users have a choice to use MongoDB or MySQL as a storage backend, course per course. New users will automatically start using MySQL, while existing users will be responsible for migrating their data themselves (before the Teak release). Upgrade instructions are available here: https://github.com/overhangio/tutor-forum/#installation. (by @​regisb)

• 💥[Improvement] Get rid of the is_docker_rootless template filter, which was used only by Elasticsearch. (by @​regisb)

[Improvement] Forcefully enable the Learning MFE's navigation sidebar when upgrading to Sumac. (by @​arbrandes)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.