chore: updating edx-platform to ulmo.1

.github/CODEOWNERS

@@ -21,7 +21,11 @@ openedx/core/djangoapps/user_api/                                   @openedx/com
 openedx/core/djangoapps/user_authn/                                 @openedx/committers-edx-platform-2u-infinity
 openedx/core/djangoapps/verified_track_content/                     @openedx/committers-edx-platform-2u-infinity
 openedx/features/course_experience/
-xmodule/
+# The Aximprovements team is working on extracting all built-in XBlocks
+# to the external repository (xblocks-contrib). They need to be notified
+# about any changes within xmodule to stay aligned with this effort.
+# Ticket: https://github.com/openedx/edx-platform/issues/34827
+xmodule/                                                            @farhan @irtazaakram @salman2013
 
 # Core Extensions
 lms/djangoapps/discussion/

.github/workflows/check-consistent-dependencies.yml

@@ -7,6 +7,7 @@ name: Consistent Python dependencies
 
 on:
   pull_request:
+  merge_group:
 
 defaults:
   run:
@@ -18,26 +19,31 @@ jobs:
     runs-on: ubuntu-24.04
 
     steps:
+      # Always checkout the code because we don't always have a PR url.
+      - uses: actions/checkout@v5
+
       # Only run remaining steps if there are changes to requirements/**
+      # We do this instead of using path based short-circuiting.
+      # see https://stackoverflow.com/questions/77996177/how-can-i-handle-a-required-check-that-isnt-always-triggered
+      # for some more details.
       - name: "Decide whether to short-circuit"
-        env:
-          GH_TOKEN: "${{ github.token }}"
-          PR_URL: "${{ github.event.pull_request.html_url }}"
         run: |
-          paths=$(gh pr diff "$PR_URL" --name-only)
-          echo $'Paths touched in PR:\n'"$paths"
+          if [[ "${{ github.event_name }}" == "pull_request" ]]; then
+            BASE_SHA="${{ github.event.pull_request.base.sha }}"
+          else
+            BASE_SHA="${{ github.event.merge_group.base_sha }}"
+          fi
+
+          # Fetch the base sha so we can compare to it. It's not checked out by
+          # default.
+          git fetch origin "$BASE_SHA"
 
           # The ^"? is because git may quote weird file paths
-          matched="$(echo "$paths" | grep -P '^"?((requirements/)|(scripts/.*?/requirements/))' || true)"
-          echo $'Relevant paths:\n'"$matched"
-          if [[ -n "$matched" ]]; then
-              echo "RELEVANT=true" >> "$GITHUB_ENV"
+          if git diff --name-only "$BASE_SHA" | grep -P '^"?((requirements/)|(scripts/.*?/requirements/))'; then
+            echo "RELEVANT=true" >> "$GITHUB_ENV"
           fi
 
-      - uses: actions/checkout@v5
-        if: ${{ env.RELEVANT == 'true' }}
-
-      - uses: actions/setup-python@v5
+      - uses: actions/setup-python@v6
         if: ${{ env.RELEVANT == 'true' }}
         with:
           python-version: '3.11'

.github/workflows/check-for-tutorial-prs.yml

@@ -26,7 +26,7 @@ jobs:
         uses: actions/checkout@v5
 
       - name: Comment PR
-        uses: thollander/actions-comment-pull-request@v2
+        uses: thollander/actions-comment-pull-request@v3
         with:
           message: |
             Thank you for your pull request! Congratulations on completing the Open edX tutorial! A team member will be by to take a look shortly.

.github/workflows/check_python_dependencies.yml

@@ -2,6 +2,7 @@ name: Check Python Dependencies
 
 on:
   pull_request:
+  merge_group:
 
 jobs:
   check_dependencies:
@@ -16,7 +17,7 @@ jobs:
         uses: actions/checkout@v5
 
       - name: Set up Python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v6
         with:
           python-version: ${{ matrix.python-version }}
 

.github/workflows/ci-static-analysis.yml

@@ -1,6 +1,8 @@
 name: Static analysis
 
-on: pull_request
+on:
+  pull_request:
+  merge_group:
 
 jobs:
   tests:
@@ -15,7 +17,7 @@ jobs:
     steps:
       - uses: actions/checkout@v5
       - name: Set up Python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v6
         with:
           python-version: ${{ matrix.python-version }}
 

.github/workflows/commitlint.yml

@@ -3,7 +3,8 @@
 name: Lint Commit Messages
 
 on:
-  - pull_request
+  pull_request:
+  merge_group:
 
 jobs:
   commitlint:

.github/workflows/compile-python-requirements.yml

@@ -24,7 +24,7 @@ jobs:
           ref: "${{ inputs.branch }}"
 
       - name: Set up Python environment
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v6
         with:
           python-version: "3.11"
 

.github/workflows/js-tests.yml

@@ -2,6 +2,7 @@ name: Javascript tests
 
 on:
   pull_request:
+  merge_group:
   push:
     branches:
       - release-ulmo
@@ -23,7 +24,7 @@ jobs:
         run: git fetch --depth=1 origin master
 
       - name: Setup Node
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v5
         with:
           node-version: ${{ matrix.node-version }}
           cache: 'npm'
@@ -43,7 +44,7 @@ jobs:
         run: sudo apt-get update && sudo apt-get install libxmlsec1-dev ubuntu-restricted-extras xvfb
 
       - name: Setup Python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v6
         with:
           python-version: ${{ matrix.python-version }}
 

.github/workflows/lint-imports.yml

@@ -2,6 +2,7 @@ name: Lint Python Imports
 
 on:
   pull_request:
+  merge_group:
   push:
     branches:
       - release-ulmo
@@ -16,7 +17,7 @@ jobs:
         uses: actions/checkout@v5
 
       - name: Set up Python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v6
         with:
           python-version: "3.11"
 

.github/workflows/lockfileversion-check.yml

@@ -7,6 +7,7 @@ on:
     branches:
       - release-ulmo
   pull_request:
+  merge_group:
 
 jobs:
   version-check:

.github/workflows/migrations-check.yml

@@ -3,6 +3,7 @@ name: Check Django Migrations
 on:
   workflow_dispatch:
   pull_request:
+  merge_group:
   push:
     branches:
       - release-ulmo
@@ -73,7 +74,7 @@ jobs:
         uses: actions/checkout@v5
 
       - name: Setup Python ${{ matrix.python-version }}
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v6
         with:
           python-version: ${{ matrix.python-version }}
 

.github/workflows/pylint-checks.yml

@@ -2,6 +2,7 @@ name: Pylint Checks
 
 on:
   pull_request:
+  merge_group:
   push:
     branches:
       - master
@@ -37,7 +38,7 @@ jobs:
         run: sudo apt-get update && sudo apt-get install libxmlsec1-dev
 
       - name: Set up Python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v6
         with:
           python-version: 3.11
 

.github/workflows/quality-checks.yml

@@ -2,6 +2,7 @@ name: Quality checks
 
 on:
   pull_request:
+  merge_group:
   push:
     branches:
       - release-ulmo
@@ -29,12 +30,12 @@ jobs:
         run: sudo apt-get update && sudo apt-get install libxmlsec1-dev
 
       - name: Setup Python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v6
         with:
           python-version: ${{ matrix.python-version }}
 
       - name: Setup Node
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v5
         with:
           node-version: ${{ matrix.node-version }}
 

.github/workflows/semgrep.yml

@@ -7,6 +7,7 @@ name: Semgrep code quality
 
 on:
   pull_request:
+  merge_group:
   push:
     branches:
       - release-ulmo
@@ -26,7 +27,7 @@ jobs:
         with:
           fetch-depth: 1
 
-      - uses: actions/setup-python@v5
+      - uses: actions/setup-python@v6
         with:
           python-version: "${{ matrix.python-version }}"
 

.github/workflows/shellcheck.yml

@@ -7,6 +7,7 @@ name: ShellCheck
 
 on:
   pull_request:
+  merge_group:
   push:
     branches:
       - release-ulmo

.github/workflows/static-assets-check.yml

@@ -2,6 +2,7 @@ name: static assets check for lms and cms
 
 on:
   pull_request:
+  merge_group:
   push:
     branches:
       - release-ulmo
@@ -38,7 +39,7 @@ jobs:
         uses: actions/checkout@v5
 
       - name: Setup Python ${{ matrix.python-version }}
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v6
         with:
           python-version: ${{ matrix.python-version }}
 
@@ -48,7 +49,7 @@ jobs:
           sudo apt-get install libxmlsec1-dev pkg-config
 
       - name: Setup Node
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v5
         with:
           node-version: ${{ matrix.node-version }}
 

.github/workflows/unit-test-shards.json

@@ -239,7 +239,6 @@
       "cms/djangoapps/course_creators/",
       "cms/djangoapps/export_course_metadata/",
       "cms/djangoapps/modulestore_migrator/",
-      "cms/djangoapps/maintenance/",
       "cms/djangoapps/models/",
       "cms/djangoapps/pipeline_js/",
       "cms/djangoapps/xblock_config/",

.github/workflows/unit-tests.yml

@@ -1,7 +1,10 @@
 name: unit-tests
+permissions:
+  contents: read
 
 on:
   pull_request:
+  merge_group:
   push:
     branches:
       - release-ulmo
@@ -22,7 +25,6 @@ jobs:
           - "3.11"
         django-version:
           - "pinned"
-          - "5.2"
         # When updating the shards, remember to make the same changes in
         # .github/workflows/unit-tests-gh-hosted.yml
         shard_name:
@@ -95,7 +97,7 @@ jobs:
           docker ps
 
       - name: Setup Python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v6
         with:
           python-version: ${{ matrix.python-version }}
 
@@ -158,7 +160,7 @@ jobs:
     steps:
       - uses: actions/checkout@v5
       - name: Setup Python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v6
         with:
           python-version: 3.11
 
@@ -288,7 +290,7 @@ jobs:
         uses: actions/checkout@v5
 
       - name: Setup Python ${{ matrix.python-version }}
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v6
         with:
           python-version: ${{ matrix.python-version }}
 

.github/workflows/units-test-scripts-structures-pruning.yml

@@ -2,6 +2,7 @@ name: units-test-scripts-common
 
 on:
   pull_request:
+  merge_group:
   push:
     branches:
       - release-ulmo
@@ -20,7 +21,7 @@ jobs:
         uses: actions/checkout@v5
 
       - name: Set up Python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v6
         with:
           python-version: ${{ matrix.python-version }}
 

.github/workflows/units-test-scripts-user-retirement.yml

@@ -2,6 +2,7 @@ name: units-test-scripts-user-retirement
 
 on:
   pull_request:
+  merge_group:
   push:
     branches:
       - release-ulmo
@@ -20,7 +21,7 @@ jobs:
         uses: actions/checkout@v5
 
       - name: Set up Python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v6
         with:
           python-version: ${{ matrix.python-version }}
 

.github/workflows/upgrade-one-python-dependency.yml

@@ -37,7 +37,7 @@ jobs:
           ref: "${{ inputs.branch }}"
 
       - name: Set up Python environment
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v6
         with:
           python-version: "3.11"
 

.github/workflows/verify-dunder-init.yml

@@ -2,6 +2,8 @@ name: Verify Dunder __init__.py Files
 
 on:
   pull_request:
+  merge_group:
+  push:
     branches:
       - release-ulmo