chore: enrollment_date added to csv report and add custom fields method

feat: removed spaces check for spam urls (openedx#37238)

fix: remove CSRF_TRUSTED_ORIGINS_WITH_SCHEME variable (openedx#37195)

fix: Passing unsaved model instances to related filters is no longer … (openedx#37227)

* fix: Passing unsaved model instances to related filters is no longer allowed.

fix: sidebar completion for completable XBlocks with children

It is possible to create a completable XBlock with children.
An example is the Library Content Block with the
`MARK_LIBRARY_CONTENT_BLOCK_COMPLETE_ON_VIEW` feature toggle.
The sidebar should use the same mechanism as the `BlockCompletionTransformer`
and the `edx-completion` library. It means that we should treat:
1. An aggregator XBlock as completed only when all its children are completed.
2. A completable XBlock as completed when it is directly marked as completed
   (without checking the completion of its children).

fix: show correct icons in the sidebar for units with custom XBlocks

Currently, the sidebar relies only on the XBlock's `category` class attribute
(called `type` in the transformers). This behavior is inconsistent with the
legacy subsection navigation, which relies on the `XModuleMixin.get_icon_class`
method. This commit adds the `icon_class` to the fields collected by the
transformers and uses it to determine whether the "problem" or "video" icon
should be displayed for a unit in the sidebar.

feat: Use dropdown for units when more then 15

When dealing with subsections that have a lot of units, show a dropdown for
unit selection to simplify navigation.

feat: add a POST endpoint for listing courses (openedx#35586)

* feat: add a POST endpoint for listing courses

feat: reindex course and recreate upstream links post import and course re-run (openedx#37237)

Index the newly created course after import and course re-run. Also recreate upstream links after course re-run.

We make use of newly created COURSE_RERUN_COMPLETED signal to run post re-run processes.

feat: Add the top-level parent logic to the ready_to_sync value in the UpstreamLink (openedx#37217)

- Updates `UpstreamLink.ready_to_sync` with the top-level parent logic: In a container, `ready_to_sync` is `True` if the container or any children have changes.
- Updates `decline_sync` to decline children recursively.

fix!: session ID stability while maintaining inactivity timeout (openedx#36896)

This change modifies the SessionInactivityTimeout middleware to prevent
the session ID from changing on every request while still enforcing the
inactivity timeout.

Key improvements:
- Store datetime values as ISO strings for proper serialization
- Implement hybrid session save approach that only allows full session
  saves periodically (controlled by SESSION_SAVE_FREQUENCY_SECONDS)
- Preserve session ID between requests while still tracking user activity

This resolves the issue where lms_sessionid was changing on every user
interaction, which caused problems.

BREAKING CHANGE: The breaking change is that SESSION_ACTIVITY_SAVE_DELAY_SECONDS was introduced with a 15 minute default, which will change the current behavior. It is not necessarily breaking (since it actually fixes an issue), but this is to bring more attention to the new setting because the default is reasonable, but also somewhat arbitrary.

feat: Add DOI-specific headers for link validation (openedx#37246)

feat: Upgrade Python dependency edx-enterprise (openedx#37261)

fix: bump edx-enterprise version to bump django-simple-history

Commit generated by workflow `openedx/edx-platform/.github/workflows/upgrade-one-python-dependency.yml@refs/heads/master`

Co-authored-by: UsamaSadiq <[email protected]>

chore: Upgrade Python requirements (openedx#37229)

chore: Upgrade Python requirements (openedx#37263)

chore!: remove Proctortrack dependency

Remove all Proctortrack dependencies from the project, including:
- Python package dependencies in requirements files
- JavaScript package dependency in package.json
- Translation configuration in conf/locale/config.yaml

BREAKING CHANGE: Proctortrack proctoring provider is no longer available as a dependency.
This change removes the Proctortrack Dependency while preserving code references.

feat: Update the package lock

chore: Updating the requirements

fix: Discussion xblock error when loading for the first time
This PR fixes the user not being created when accessing the discussion xblock as the course_key was missing in some of the api calls and that lead to the forum backend not being fetched correctly.

feat!: Drop import_from_modulestore app (1/3 -- code only) (openedx#37239)

Part of: openedx#37242

feat: Allow adding custom LTI parameters via LTI_CUSTOM_PARAMS django setting

Adds a new Django setting called `LTI_CUSTOM_PARAMS` that allows extending the
list of optional LTI parameters processed by the platform. These parameters can
be used by plugins for deeper platform integration.

fix: intermittent "utils attribute not found" issue in webpack_loader (openedx#37109)

chore: Upgrade Python requirements

feat: Remove the `SEND_CATALOG_INFO_SIGNAL`

This setting controls an additive feature to send a signal on catalog
changes.  The signal is documented as a part of the list of supported
events in our openedx-events reference. It has also been running live in
the edx.org deployment for some time.

This change removes the signal and defaults to the behavior as if it is
net to true.

OPERATORS NOTE: If you override the `SEND_CATALOG_INFO_SIGNAL` in your
settings overrides for the edx-platform, you can remove that override.
This signal will always fire on catalog changes now.  The performance
impact of this change should be negligible.

chore: Updating the requirements2

fix: django52 tightened consistency around delete ordering and signal/delete() method invocation. (openedx#37250)

fix: added thread id in comment/response reported event (openedx#37276)

Co-authored-by: Ayesha Waris <[email protected]>

feat: added rate limit on one click unsubscribe api (openedx#37272)

* feat: added rate limit on one click unsubscribe api

* fix: fixed failing test

* chore: raise 400 error on invalid username

* fix: fixed pylint

chore: remove edx.notifications.preferences.viewed event (openedx#37285)

fix: Updated tuple unpacking of signal receivers to match current structure in django52. (openedx#37249)

fix: ensure _get_user returns saved user (with id) (openedx#37290)

Django 5.2 tightened model handling: unsaved User objects (no primary key) no longer pass through in some checks.

feat: implement course access role history table (openedx#37260)

Co-authored-by: Muhammad Faraz  Maqsood <[email protected]>

chore: Upgrade Python requirements (openedx#37292)

fix: fix timezone for Django 5.2 (openedx#37293)

fix: fix test_html_tags_removal (openedx#37209)

chore: Clean up comments in github.in

Remove comment about django42 support pending release.

feat!: Drop import_from_modulestore app (2/3 -- models) (openedx#37240)

Part of: openedx#37242

fix: fix script tag quot escaped (openedx#37296)

feat: Add `unlinkable` to xblock actions and update `top_level_parent_key` on unlink [FC-0097] (openedx#37215)

- Adds the `unlinkable` action to the XBlock object sent to the frontend
- Updates the `top_level_parent_key` reference when unlinking containers. If you unlink a Section with Subsections and Units, this updates the `top_level_parent_key` for the Subsections to `None` (they are the top level now), and the `top_level_parent_key` for the Units to the corresponding parent Subsection.

fix: exception while trying to check sync status of deleted upstream (openedx#37298)

Use `Upstream.try_get_for_block` instead of `Upstream.get_for_block` which raises `BadUpstream` if upstream block is deleted.

test: Disable the Django Debug Toolbar by default.

Disable the toolbar by default but make it easy to turn back on as
needed.  This is in response to the discussion here:
    https://discuss.openedx.org/t/lets-remove-django-debug-toolbar/16847

fix: added info in notification preferences (openedx#37295)

feat: Added pluggable override on financial_assistance (openedx#37303)

chore: Upgrade Python requirements

chore: removing ENABLE_V2_CERT_DISPLAY_SETTINGS (openedx#37302)

the remnants of the logic that used this setting has been gone for a long time.
This removes the toggle.

FIXES: APER-1405

feat: Add support for using LTI data to populate user profile

Currently the LTI provider implementation auto-creates a random user when
logging in, however, the LTI launch can include relevant user details such as
their email, full name and even a username. This change makes the LTI code
use the provided details if the "Use lti pii" setting is set in the Django
admin.

chore: upgrade social-auth-core

chore: Management command to update preferences (openedx#37297)

feat: tpa automatic logout with a single redirect

feat: enhance Course Optimizer to update previous course links via API (openedx#37206)

* feat: API to update previous-run course links

* feat: handle edge cases and update tests for prev-run links API

chore: Upgrade Python requirements

feat!: Drop import_from_modulestore app (3/3 -- uninstall app) (openedx#37241)

openedx#37242

feat: Upgrade Python dependency edx-enterprise

fix: [edx-enterprise] upgrade djangorestframework and skip automatic validators

Commit generated by workflow `openedx/edx-platform/.github/workflows/upgrade-one-python-dependency.yml@refs/heads/master`

chore: geoip2: update maxmind geolite country database

feat: add custom attributes to moniter export course task (openedx#37314)

fix: Update SAMLProviderConfig for site-specific configurations (openedx#37294)

Fixes minor bugs in new SAMLProviderConfig signal
handlers.

chore: Update openedx-forum version (openedx#37320)

feat: added api for mobile configs (openedx#37323)

feat: extend courseware api with new fields

refactor: add some fields to serailizer for FE & update API docstring

refactor: fix prerequisites source

refactor: add missing docstrings, rename * remove some fields

fix: remove redundant test which breaks everything

docs: update docstring for prerequisite course serializer

docs: update docstring for course info serializer

refactor: move import inside testcase

refactor: fix unused imports

docs: add comment for skip_unless_lms

fix: remove unused fields 'prerequisites', 'ocw_links'

chore: remove deprecated DEFAULT_FILE_STORAGE and STATICFILES_STORAGE settings (openedx#37002)

Revert "feat: added api for mobile configs (openedx#37323)" (openedx#37332)

This reverts commit 3d46524.

fix: Invalid read param in forum thread api
This PR fixes the invalid read parameter being passed in forum update_thread api.
this was somehow introduced in this commit openedx@6f522f3#diff-b9d08209a02c673887f6ca72b0018758174e95508539adbcb6885f22c7844eb8L292

fix: unlink broken link (openedx#37329)

This fixes a bug that occurs when unlinking a block from a downstream block that has a broken link

fix: program details dashboard (openedx#37203)

Co-authored-by: Deborah Kaplan <[email protected]>

fix: fix bad serialization of courseware metadata (openedx#37338)

* Formats single_paid_mode as a dict, rather than named tuple which couldn't be serialized to DictField
* Allow ecommerce_checkout_link to be empty

Co-authored-by: Copilot <[email protected]>

fix: [FC-0092] fix 500 when return_type is list (openedx#36969)

There was problem in filter_discussion_xblocks_from_response(). This
function was breaking the list response for the BlocksInCourseView by
returning a dict instead of list.

chore: Upgrade Python requirements

build: Upgrade to Node 24 (openedx#37166)

Upgrade node and re-build package-lock.json

feat: Upgrade Python dependency edx-enterprise (openedx#37346)

New version adds a missed migration for Django 5.2 support

Commit generated by workflow `openedx/edx-platform/.github/workflows/upgrade-one-python-dependency.yml@refs/heads/master`

Co-authored-by: UsamaSadiq <[email protected]>

chore!: removing of pyjwkest dependency from edx-platform (openedx#37159)

feat: automatically follow post when creating comments/responses (openedx#37318)

* feat: automatically follow  post while createing comments/responses

* feat: follow post when a comment or response is created

* test: updated tests

---------

Co-authored-by: Ayesha Waris <[email protected]>
Co-authored-by: Muhammad Adeel Tajamul <[email protected]>

feat: added configurable param to rate limit email change in account settings (openedx#37349)

chore: Upgrade to django-pipeline to its latest. It has django52 support. (openedx#37355)

feat: added feature to rate limit secondary email change (openedx#37356)

feat!: remove cs_comments_service support for forum's content APIs

- This will force the use of the new v2 forum's APIs for Threads & Comment.
- Update params for get_user_subscription function. It uses the same structure as we have in the get_user_threads.

feat: Upgrade Python dependency edx-enterprise

gracefully decouples enterprise from ecommerce

Commit generated by workflow `openedx/edx-platform/.github/workflows/upgrade-one-python-dependency.yml@refs/heads/master`

feat: Upgrade Python dependency enterprise-integrated-channels

Commit generated by workflow `openedx/edx-platform/.github/workflows/upgrade-one-python-dependency.yml@refs/heads/master`

Fix: CORS issues in third-party auth disconnect by adding JSON endpoint (openedx#37100)

Add a json auth endpoint where previously there was only an HTML redirect version. This will make it easier to work with MFEs.

---------

Co-authored-by: Feanil Patel <[email protected]>

docs: Fix the docs build.

With the settings re-organization the docs settings file was missing a
setting needed to properly run django.  This wasn't caught in CI because
the docs build is slow enough that we don't run it on every PR.

docs: Update the checked-in lms-openapi docs.

These are checked-in because there are some downstream users that
depend on them being checked-in.  They are also used to generate sphinx
docs based on the openapi spec.

build: Parallize the docs build.

There is no technical issue that prevents us from running this build in
parallel as far as I can tell. We can see if this will sufficiently
speed up the build for us to turn it on for PRs.

test: running tests with django52. (openedx#37357)

feat: Upgrade Python dependency edx-enterprise (openedx#37360)

fix: Moodle configuration updates were not being saved correctly

Commit generated by workflow `openedx/edx-platform/.github/workflows/upgrade-one-python-dependency.yml@refs/heads/master`

Co-authored-by: zamanafzal <[email protected]>
Co-authored-by: Zaman Afzal <[email protected]>

chore: Upgrade Python requirements

feat: allow editing imported text blocks (openedx#37124)

* feat: allow editing html block imported from upstream

The modified field is left untouched in future sync while storing the
upstream values in hidden fields to allow authors to revert to upstream
version at any point.

* fix: sync downstream_customized field for copy-pasted modified block

* test: add more tests

* fix: lint issues

* test: copy paste

* feat: skip sync if html data is modified

* feat: update upstream fields only when modified

* refactor: use version_synced field to skip sync

* feat: edit title inplace for library source components

* fixup! feat: edit title inplace for library source components

* fix: edit title button style

* fix: test case

* fix: lint issue

* refactor: don't show different icon for modified upstream blocks

* Revert "refactor: use version_synced field to skip sync"

This reverts commit 8b784ff.

* feat: only skip sync for modified blocks if updated as part of container

* refactor: update sync behaviour when synced individually and as part of parent

* feat: include ready to sync children info in downstream link get api

* test: fix failing tests

* fix: lint issues

* feat: new tests and update api to allow overriding modified fields in sync

* test: api changes

* refactor: edit options should be visible for individual imports

* docs: update api docs

* chore: remove old comments

chore: update @edx/brand dependency to new package @openedx/brand-openedx (openedx#37244)

feat: update saml management command (openedx#37330)

The SAML management command has been refactored from
an auto-update tool to a comprehensive report-only audit system.
The changes introduce a new --run-checks option that provides
detailed reporting on SAML configuration issues without making
any automatic changes.

feat: add ability to override middlewares for recurring nudges

* feat: add ability to override middlewares for recurring nudges

* feat: add ability to run command for all sites

fix: styles for share video functionality of the video xblock

fix: visual and progress score display enhancement

fix: add missing styles

build: Unpin pip and pip-tools.

Test with unpinning both pip and pip-tools. The latest versions have
fixed the pathing issues with `make upgrade` and the dependency
resolution issues reported in openedx/edx-lint#458

chore: Run `make upgrade`

refactor: flatten FEATURES dictionary with backward compatible proxy

feat: [AXM-2398] Add short label to assignment (openedx#36970)

Rationale: The instructor may create short labels that are longer than
3 characters, and they can be hard to work with in the mobile UI. Thus,
on mobile, it was decided to add short labels to the api response by
getting them from section breakdown, which ensures they are consistent
with the labels the user sees in the Grading section.

fix(deps): update dependency webpack-bundle-tracker to v3

fix: Upgrade django-webpack-loader to match webpack-bundle-tracker

The versions of these two tools is now kept in sync.  As a part of the
migration, the method signature for render_bundle changes which we
needed to update in our Mako templates where it doesn't automatically
pass context.

test: Fix test monkeypatches for render_bundle

Now that the signature has changed, update the testing monkeypatches as well.

fix: Use CI oriented FakeWebpackLoader

This was added in a newer version of django-webpack loader to be used in
CI.  Previously we had some monkey patches to deal with this but they
could break when changes happen to the upstream django-webpack-loader
library.

This should be a more robust solution to keep CI working and to reduce
complexity on future upgrades.

docs: Document what MFEs are on by default

Document which MFEs are currently on by default in the edx-platform code
and where the code expects those MFEs to be running including the
settings that can be overridden to change those default locations.

Consolidate common settings to platform wide settings module (openedx#37337)

* refactor: lift same settings up to openedx common module

feat!: Remove Proctortrack dependency (openedx#37284)

* chore!: remove Proctortrack dependency

Remove all Proctortrack dependencies from the project, including:
- Python package dependencies in requirements files
- JavaScript package dependency in package.json
- Translation configuration in conf/locale/config.yaml

BREAKING CHANGE: Proctortrack proctoring provider is no longer available as a dependency.
This change removes the Proctortrack Dependency while preserving code references.

* feat: Update the package lock

* chore: Updating the requirements

* chore: Updating the requirements2

* chore: Clean up comments in github.in

Remove comment about django42 support pending release.

feat: Upgrade Python dependency edx-enterprise (openedx#37372)

* feat: Upgrade Python dependency edx-enterprise

Commit generated by workflow `openedx/edx-platform/.github/workflows/upgrade-one-python-dependency.yml@refs/heads/master`

* fix: typo fix to trigger tests

---------

Co-authored-by: kiram15 <[email protected]>
Co-authored-by: Kira Miller <[email protected]>

chore: remove outdated JWT auth related settings

fix(deps): update dependency webpack-merge to v6

fix: Use the default merge for webpack config.

The smart merge feature has been dropped from the webpack-merge library
that we were using. Use the basic merge feature instead since we're not
actually doing anything too complicated.

Also don't return null from the WorkerConfig as it can't be correctly
merged.

fix: Inconsistent update state in Course Optimizer API (openedx#37369)

* fix: Inconsistent update state in Course Optimizer API

* fix: update re-run link issue

docs: add DEPR ticket for some mfe_config settings (openedx#37370)

refactor: course container children api [FC-0097] (openedx#37375)

* feat: course container children view

* refactor: rename

* refactor: include children info in upstream info of container children

* fix: tests

* fix: test

* refactor: children check

chore: remove unused mockprock devDependency

feat!: modulestore_migrator (openedx#36873)

This introduces the modulestore_migrator app, which can be
used to copy content (courses and libraries) from modulestore
into Learning Core. It is currently aimed to work on the legacy
library -> v2 library migration, but it will be used in the future
for course->library and course->course migrations.

This includes an initial REST API, Django admin interface,
and Python API.

Closes: openedx#37211

Requires some follow-up work before this is production-ready:
openedx#37259

Co-authored-by: Andrii <[email protected]>
Co-authored-by: Maksim Sokolskiy <[email protected]>

feat: updates legacy libraries list API to include migration info [FC-0097] (openedx#37286)

Adds migration info like `migrated_to_title`, `migrated_to_key` and `is_migrated` fields indicating whether the legacy library was migrated to library v2. If yes, it includes the new library name and key.

Users can also filter by migration status using `is_migrated` query param.

fix: update Course Highlights help URL (openedx#37388)

build(deps): bump codecov/codecov-action from 4 to 5

Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 4 to 5.
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](codecov/codecov-action@v4...v5)

---
updated-dependencies:
- dependency-name: codecov/codecov-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>

build(deps): bump actions/checkout from 4 to 5

Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 5.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v4...v5)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>

build(deps): bump actions/download-artifact from 4 to 5

Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 4 to 5.
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](actions/download-artifact@v4...v5)

---
updated-dependencies:
- dependency-name: actions/download-artifact
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>

chore(deps): bump peter-evans/create-pull-request from 6 to 7

Bumps [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request) from 6 to 7.
- [Release notes](https://github.com/peter-evans/create-pull-request/releases)
- [Commits](peter-evans/create-pull-request@v6...v7)

---
updated-dependencies:
- dependency-name: peter-evans/create-pull-request
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>

fix: always generate block structure from "published-only" branch (openedx#37335)

Block structures are meant to be an optimization for the LMS, meaning
that they should always be collecting from the published branch of
modulestore. This is what happens by default when it's run from the LMS
celery process, but this code is sometimes invoked from a Studio worker
(e.g. development mode celery, running in immediate in-proc mode).

---------

Co-authored-by: Peter Pinch <[email protected]>

docs: ADR for Visually Configuring Course Components (openedx#36856)

---------

Co-authored-by: Maksim Sokolskiy <[email protected]>

build: use ubuntu-lts-latest in readthedocs build (openedx#37392)

feat: Upgrade Python dependency edx-enterprise (openedx#37390)

Upgrade python requirements

Commit generated by workflow `openedx/edx-platform/.github/workflows/upgrade-one-python-dependency.yml@refs/heads/master`

Co-authored-by: brobro10000 <[email protected]>
Co-authored-by: Hamzah Ullah <[email protected]>

feat: update course_about & catalog link generation

refactor: switch to global mfe state check

chore: updated settings for mfes

fix: fix gettings ENABLE_CATALOG_MICROFRONTEND FEATURE

fix: append /catalog to CATALOG_MICROFRONTEND_URL

test: fix ddt in test_link_with_new_catalog_page

fix: put CATALOG_MICROFRONTEND_URL with the other mfe urls

fix: look up ENABLE_CATALOG_MICROFRONTEND in settings directly, adjust tests

refactor: move filter out of if, extract about_base_url

test: fix ENABLE_CATALOG_MICROFRONTEND look up in tests

fix: use getattr in use_catalog_mfe

test: fix test overrides

feat: Add `blockType` to xblockPreview & title to xblock_iframe [FC-0097] (openedx#37362)

- Adds `blockType` and `is_modified` to the `showXBlockLibraryChangesPreview` iframe message.
- Add title to the `xblock_iframe`
- Add `is-modified` to `studio_xblock_wrapper`
- Add `disable_staff_debug_info` as a query param in `render_xblock`
- `downstream_is_modified` added to ComponentLink and ContainerLink

feat: add redirects to mfe for catalog-related legacy pages

refactor: switch to global mfe state check

refactor: use get_link_for_about_page, remove duplicate function

test: use ENABLE_CATALOG_MICROFRONTEND from settings

feat: extend program dash endpoint to b2c (openedx#37387)

chore: geoip2: update maxmind geolite country database

chore: Upgrade Django to 4.2.25 to pick up security patch (openedx#37418)

This is from running `make upgrade-package package=Django`

feat: adds new fork migration strategy (openedx#37408)

Implements the `fork` strategy, allowing the user to create new copies while migrating courses/legacy libraries to v2 libraries.

fix: reindex_studio could crash if an XBlock child isn't loadable (openedx#37177)

Co-authored-by: Chris Chávez <[email protected]>

fix: survey questions options alignment in mobile view

fix: Fix the docs build.

The docs settings file needed an update for a new djangoapp that was
added. Long term we need to probably think more deeply about how we want
the LMS/CMS docs builds to work.  Do we want to separate them, or make
it easier to have a django settings file that will work with both.  For
now, we have a single settings file that is referenced for the docs
build so it needs to have all the installed apps from both.

feat: add unified certificate task API with toggle, generate, and regenerate support

fix: support parsing the pointer-tag OLX for external XBlocks (openedx#37133)

Previously, the built-in XBlocks (problem, video, etc) could be parsed
from pointer tag syntax, but externally-defined XBlocks (drag-and-drop,
ORA, etc.) could only be parsed from inline syntax. This is because the
built-in blocks have special parsing logic, defined in XmlMixin,
which is not available to external blocks.

This PR shifts the pointer tag parsing "up a level" such that the parent
blocks parse the pointer tag, regardless of whether the child is built-in
or external:
* vertical (aka unit)
* split_test (aka content experiment)
* itembank (aka problem bank)
* library_content (aka randomized legacy library)

The following parent blocks still lack support for external pointer-tag children;
we will fix this in a follow-up PR:
* randomize
* all externally defined container blocks

Part of: openedx/XBlock#823

revert: fix: support parsing the pointer-tag OLX for external XBlocks (openedx#37426)

This reverts commit d382721,
which seems to break edx-platform's ability to load the content of externally-
defined xblocks (e.g. lti_consumer) from course exports.

fix: make ALLOWED_HOSTS configurable through YAML

refactor: move ALLOWED_HOSTS to openedx/envs/common

fix: add '*' wild card in common ALLOWED_HOSTS

refactor: Move user_util library to edx-platform

The library consisted of this set of utilities and a cli and was only
being used in the edx-platform repo.  The CLI will be DEPRed along with
the repo but the code that is being used for retirement will be moved
here.

build: Drop the user-util dependency.

chore: Run `make upgrade`

build: Drop unused docker compose and sql files.

fix: Only update downstream_customized for upstream-linked blocks (openedx#37412)

We only need to track field customizations for upstream-linked (i.e.,
library-linked) blocks. Thd downstream_customized field is irrelevant for other
blocks. It would just add a ton of noise to the OLX.

Additionally, we now clear downstream_customized when severing an upstream
link.

Fixes: openedx#37411

fix: fix fork on multiple migrations (openedx#37422)

Fixes a bug where, when running a migration using the fork strategy, it was only looking at the last migration, resulting in a slug reuse, which would cause a component update instead of a new component creation.

fix: add default to `target_collection_slug` (openedx#37391)

adds a default `None` value to the `target_collection_slug` parameter of the migration rest API endpoint, to prevent a `KeyError`.

feat: Implementation of library v2 backup endpoints

Fix upgrade job pin cryptography (openedx#37436)

* fix: pin cryptography to fix the upgrade job
* fix: pin pact-python<3.0.0
---------

Co-authored-by: edX requirements bot <[email protected]>

feat: Upgrade Python dependency enterprise-integrated-channels

Commit generated by workflow `openedx/edx-platform/.github/workflows/upgrade-one-python-dependency.yml@refs/heads/master`

refactor: Update and migrate Video Block JS files into xmodule/assets

- Move Video Block JS files from xmodule/js/src/video/ to xmodule/assets/video/public/js/
- Update JavaScript files from  RequireJS to ES6 import/export
- test: Enable and fix Karma Js tests for Video XBlock (openedx#37351)

---------

Co-authored-by: salmannawaz <[email protected]>

fix: Profile MFE redirection issue (URL path override)

This error was occurring because the way the redirect URL was constructed caused the entire base path to be removed. This commit updates the URL construction method to correctly preserve the MFE's path.

feat!: Upgrading to `django52`.

chore: Run unit tests only pinned which is 5.2

Removed Django version '5.2' from the workflow.

fix: add Djang<6.0 local constraint

chore: python requirements upgrade

refactor: include container display name in children api (openedx#37429)

This helps us avoid additional API calls just to fetch display name of
the container block that is being previewed.

feat: Certificate sharing to linkedin (optionally) consider course level organization name (openedx#37331)

By adjusting social media sharing settings(specifically linkedin) certificate parameters are autopopulated to LinkedIn API. Additional setting parameters(such as CERTIFICATE_LINKEDIN_DEFAULTS_TO_COURSE_ORGANIZATION_NAME) are introduced to override existing(platform level parameter for organization name) parameters for an operator to configure course level organization name. This will enable learners to share certificate in to LinkedIn with an option for course associated organization to be autopopulated.

fix: prevent None entrance_exam_minimum_score_pct from breaking CourseOverview sync (openedx#37339)

* fix: prevent None entrance_exam_minimum_score_pct from breaking CourseOverview sync

When entrance exams are disabled in Studio, the field
`entrance_exam_minimum_score_pct` was set to `None`. This caused silent failures
when saving `CourseOverview` because the database column requires a float (NOT NULL).

This patch ensures that:
- CourseOverview sanitizes None values by falling back to
  `settings.ENTRANCE_EXAM_MIN_SCORE_PCT` (default=50).
- Studio avoids writing `None` and instead applies the configured default.

Impact:
- Prevents IntegrityErrors and silent failures when updating course settings.
- Restores proper syncing between modulestore (Mongo) and CourseOverview (MySQL).
- Fixes reported issues such as display name changes not persisting and course
  start dates not syncing.

Closes: openedx#37319

* refactor: clean up entrance_exam_minimum_score_pct handling

- Consolidate logic to avoid repeated assignments
- Centralize None fallback and int/float normalization
- Improve readability with inline comment and consistency with Open edX style

* test: update entrance exam deletion test to expect default min score

- Adjusted `test_entrance_exam_created_updated_and_deleted_successfully` to check for
  `settings.ENTRANCE_EXAM_MIN_SCORE_PCT` instead of `None` after exam deletion
- Added handling for both int and float defaults (`/100` for integer case)

feat!: remove last calls to cs_comments_service (openedx#37376)

This removes the last remaining code that called out to the
cs_comments_service. All forums backend logic now uses the v2 API from
the forum repo (https://github.com/openedx/forum). This does NOT remove
MongoDB support.

This also implements the endpoint to retrieve all comments for a user
using the new forum backend. This is not actually called from any known
frontend code, but it has not been formally deprecated as an endpoint,
and therefore needs to be supported.

As part of the cleanup, the ENABLE_FORUM_V2 course waffle flag has also
been removed, along with all remaining switching logic that used to
route between the Python API in the forum repo and service calls to the
cs_comments_service Ruby service.

Other endpoints affected (switching logic removed):

* get course commentable counts
* get/update course user stats
* update comment/thread/user
* delete thread (implementation moved to forum repo)
* follow
* retire user

This is part of the following overall DEPR ticket:
  https://github.com/openedx/cs_comments_service/issues/437

feat: api for shifting all relative past due dates

refactor: rename and refactor functions and view

refactor: use path instead of re_path

chore: upgrade jQuery UI to version 1.14.1 (openedx#37025)

revert: chore: upgrade jQuery UI to version 1.14.1 (openedx#37025) (openedx#37449)

This reverts commit e427078.

feat: query_feature_names extended by custom fields, siteconfig name changed

fix: pytlint issue

docs: docstring updated

docs: refine important notes in get_student_features_with_custom docstring

fix: use parameterized logging in extract_attr

refactor: use get_user_model() instead of

refactor: replace setattr/delattr with direct assignment

refactor: centralize get_badge_count in test class

test: remove unnecessary badge_count setup in non-matching org test

docs: add missing docstrings

fix: over-intended fix

test: similar test removed

test: another similar test removed

test: removed redundant test

test: improve enrollment_date test reliability using direct lookup

refactor!: use String field instead of Dict field to store top_level_downstream_parent_key (openedx#37448)

* refactor!: use String field instead of Dict field to store top_level_downstream_parent_key

Since this is a new field no production instance should have this field
yet. Developers need to delete their old courses as this change will
raise error in all course pages.

* chore: add `top_level_parent` field in ComponentLink and ContainerLink admin

* refactor: use ":" as separator

* refactor: block key parsing and tests

feat!: Remove Studio Maintenance & Announcements (openedx#37432)

The announcements editor was never ported to frontend-app-authoring, and
the announcements display was never ported to frontend-app-learner-dashboard.
This announcements feature is rarely used, undocumented, non-a11y-friendly, and
there were no volunteers to port it to the new frontends. It is the last
remaining part of the legacy Studio "Maintenance" dashboard. So, we are
removing it.

BREAKING CHANGE: This removes...
* Studio Maintenance dashboard legacy frontend
* Studio Edit Announcements legacy frontend
* The snippet of legacy learner dashboard which renders announcements
* openedx/features/announcements djangoapp
* The ENABLE_ANNOUNCEMENTS feature flag

Not removed:
* The announcements_announcement table from openedx/features/announcements .
  The table is most likely very small, as it is only populated by administrators. Removing
  it would be more labor for us and more risk of toil for operators than is worthwhile.

Closes: openedx#36263

 docs: ADR introducing mobile offline content support (openedx#35011)

Co-authored-by: Іван Нєдєльніцев <[email protected]>
Co-authored-by: Kyrylo Kholodenko <[email protected]>
Co-authored-by: Glib Glugovskiy <[email protected]>

feat: Upgrade Python dependency edx-enterprise

feat: add an endpoint to create a customer admin user

Commit generated by workflow `openedx/edx-platform/.github/workflows/upgrade-one-python-dependency.yml@refs/heads/master`

chore: Move sharing_sites into video_configuration app

- openedx#37456

feat: bulk modulestore migration [FC-0097] (openedx#37381)

- Adds the task, python api, and rest api view for bulk migration.
- Refactor the code to share code between single migration and bulk migration.

fix: formated_name updated

refactor: nested functions inside enrolled_students_features are now at the top of the module

Author: efortish

.github/workflows/check-consistent-dependencies.yml

@@ -34,7 +34,7 @@ jobs:
               echo "RELEVANT=true" >> "$GITHUB_ENV"
           fi
 
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         if: ${{ env.RELEVANT == 'true' }}
 
       - uses: actions/setup-python@v5

.github/workflows/check-for-tutorial-prs.yml

@@ -23,7 +23,7 @@ jobs:
     name: provide helpful bot comment
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
 
       - name: Comment PR
         uses: thollander/actions-comment-pull-request@v2

.github/workflows/check_python_dependencies.yml

@@ -13,7 +13,7 @@ jobs:
 
     steps:
       - name: Checkout Repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
 
       - name: Set up Python
         uses: actions/setup-python@v5

.github/workflows/ci-static-analysis.yml

@@ -13,7 +13,7 @@ jobs:
         os: ["ubuntu-24.04"]
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - name: Set up Python
         uses: actions/setup-python@v5
         with:

.github/workflows/compile-python-requirements.yml

@@ -19,7 +19,7 @@ jobs:
 
     steps:
       - name: Check out target branch
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           ref: "${{ inputs.branch }}"
 
@@ -44,7 +44,7 @@ jobs:
 
       - name: Make a PR
         id: make-pr
-        uses: peter-evans/create-pull-request@v6
+        uses: peter-evans/create-pull-request@v7
         with:
           branch: "${{ github.triggering_actor }}/compile-python-deps"
           branch-suffix: short-commit-hash

.github/workflows/docker-compose.yml.mysqldbdump

@@ -18,7 +18,7 @@ jobs:
           - "3.11"
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - name: Fetch master to compare coverage
         run: git fetch --depth=1 origin master
 

.github/workflows/init/01.sql

@@ -13,7 +13,7 @@ jobs:
 
     steps:
       - name: Check out branch
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
 
       - name: Set up Python
         uses: actions/setup-python@v5

.github/workflows/js-tests.yml

@@ -70,7 +70,7 @@ jobs:
           docker exec ${{ job.services.mongo.id }} mongosh --host 127.0.0.1 --username edxapp --password password --eval 'use edxapp; db.adminCommand("ping");' edxapp
 
       - name: Checkout repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
 
       - name: Setup Python ${{ matrix.python-version }}
         uses: actions/setup-python@v5