chore: Upgrade Python requirements (#38853)

* chore: Upgrade Python requirements

* fix: set session token in test helper for social-auth-core 5.0.2 compatibility

social-auth-core 5.0.2 requires the partial pipeline token in the
session to match the request token (session ownership check). The
do_complete test helper stored the partial data but did not set the
session token, causing 12 test failures across AzureAD, Google,
LinkedIn, and Twitter providers.

---------

Co-authored-by: Usama Sadiq <usama7274@gmail.com>

Author: edx-requirements-bot

common/djangoapps/third_party_auth/tests/specs/base.py

@@ -1124,6 +1124,7 @@ def do_complete(self, strategy, request, partial_pipeline_token, partial_data, u
         calling actions.do_complete
         """
         strategy.storage.partial.store(partial_data)
+        strategy.session_set("partial_pipeline_token", partial_pipeline_token)
         if not user:
             user = request.user
         return actions.do_complete(

requirements/edx-sandbox/base.txt

@@ -4,11 +4,11 @@
 #
 #    make upgrade
 #
-cffi==2.0.0
+cffi==2.1.0
     # via cryptography
 chem==2.0.0
     # via -r requirements/edx-sandbox/base.in
-click==8.4.1
+click==8.4.2
     # via nltk
 codejail-includes==2.0.0
     # via -r requirements/edx-sandbox/base.in
@@ -58,7 +58,7 @@ openedx-calc==5.0.0
     # via -r requirements/edx-sandbox/base.in
 packaging==26.2
     # via matplotlib
-pillow==12.2.0
+pillow==12.3.0
     # via matplotlib
 pycparser==3.0
     # via cffi
@@ -72,7 +72,7 @@ python-dateutil==2.9.0.post0
     # via matplotlib
 random2==1.0.2
     # via -r requirements/edx-sandbox/base.in
-regex==2026.5.9
+regex==2026.6.28
     # via nltk
 scipy==1.17.1
     # via
@@ -84,5 +84,5 @@ sympy==1.14.0
     # via
     #   -r requirements/edx-sandbox/base.in
     #   openedx-calc
-tqdm==4.68.2
+tqdm==4.68.3
     # via nltk

requirements/edx/assets.txt

@@ -4,7 +4,7 @@
 #
 #    make upgrade
 #
-click==8.4.1
+click==8.4.2
     # via -r requirements/edx/assets.in
 libsass==0.10.0
     # via