chore: Upgrade Python requirements

[edx-requirements-bot]

Python requirements update. Please review the changelogs for the upgraded packages.

Deleted obsolete pull_requests:
#430

[edx-requirements-bot]

List of packages in the PR without any issue.

• build changes from 1.4.3 to 1.5.0
• cachetools changes from 7.0.6 to 7.1.3
• certifi changes from 2026.2.25 to 2026.4.22
• click changes from 8.3.2 to 8.4.0
• coverage[toml] changes from 7.13.5 to 7.14.0
• django changes from 5.2.13 to 5.2.14
• edx-lint changes from 6.0.0 to 6.1.0
• faker changes from 40.15.0 to 40.18.0
• fastavro changes from 1.12.1 to 1.12.2
• idna changes from 3.12 to 3.15
• jaraco-functools changes from 4.4.0 to 4.5.0
• lxml changes from 6.1.0 to 6.1.1
• lxml[html-clean] changes from 6.1.0 to 6.1.1
• mako changes from 1.3.11 to 1.3.12
• markdown-it-py changes from 4.0.0 to 4.2.0
• nh3 changes from 0.3.4 to 0.3.5
• openedx-events changes from 11.1.1 to 11.2.0
• packaging changes from 26.1 to 26.2
• pip changes from 26.0.1 to 26.1.1
• python-discovery changes from 1.2.2 to 1.3.1
• pytz changes from 2026.1.post1 to 2026.2
• requests changes from 2.33.1 to 2.34.2
• simplejson changes from 4.0.1 to 4.1.1
• stevedore changes from 5.7.0 to 5.8.0
• tomlkit changes from 0.14.0 to 0.15.0
• tox changes from 4.53.0 to 4.54.0
• tzdata changes from 2026.1 to 2026.2
• urllib3 changes from 2.6.3 to 2.7.0
• virtualenv changes from 21.2.4 to 21.3.3
• wcwidth changes from 0.6.0 to 0.7.0
• wheel changes from 0.46.3 to 0.47.0

[edx-requirements-bot]

These Packages need manual review..

• [MAJOR] cryptography changes from 46.0.7 to 48.0.0

[pomegranited]

👍

• I tested this green CI is sufficient
• I read through the code and checked the dependencies updated for breaking changes. The cryptography breaking changes are mostly things we don't care about, and we dropped python3.8 a while back.