Upgrade to Python 3.11, upgrade various dependencies

[wlach]

What type of PR is this?

• Refactor
• Feature
• Bug Fix
• New Query Runner (Data Source)
• New Alert Destination
• Other

Description

Runs redash on a supported version of Python (3.11) and upgrades various dependencies to fix security vulnerabilities. Continuation of work of #7510 from @wtfiwtz (removing changes that are not strictly related to the upgrade)

How is this tested?

• Unit tests (pytest, jest)
• E2E Tests (Cypress)
• Manually
• N/A

Ran redash locally, verified it still works.

Related Tickets & Documents

Mobile & Desktop Screenshots/Recordings (if there are UI changes)

[wlach]

Per discussion this dependency is pretty outdated. See also discussion: #7510 (comment)

[wlach]

Also recompiling this seems to take a really long time-- increasing the build times significantly (from 6 to 11 minutes), not sure if anything can really be done about it.

[eradman]

Thanks for picking this up @wlach! We will want to update packages that lead to this warning, which is printed when using manage.py

/usr/local/lib/python3.11/site-packages/databend_sqlalchemy/entry_points.py:4: UserWarning: pkg_resources is deprecated as an API. See https://setuptools.pypa.io/en/latest/pkg_resources.html. The pkg_resources package is slated for removal as early
as 2025-11-30. Refrain from using this package or pin to Setuptools<81.
  import pkg_resources

[wlach]

Thanks for picking this up @wlach! We will want to update packages that lead to this warning, which is printed when using manage.py

...

Right. Downgrading setuptools may also be an option?

[yoshiokatsuneo]

@wlach

Thank you for upgrading python !
Just a question, but is there any reason not to upgrade to the latest python like 3.14 ?

[wlach]

@wlach

Thank you for upgrading python ! Just a question, but is there any reason not to upgrade to the latest python like 3.14 ?

Mostly because I am ~certain that upgrading Python to an even later version will likely break more things (besides sasl) -- there's been lots of changes in behaviour and standard library support over the last 3 years or so. This discussion is relevant: #7601

[yoshiokatsuneo]

@wlach
Thank you for upgrading python ! Just a question, but is there any reason not to upgrade to the latest python like 3.14 ?

Mostly because I am ~certain that upgrading Python to an even later version will likely break more things (besides sasl) -- there's been lots of changes in behaviour and standard library support over the last 3 years or so. This discussion is relevant: #7601

@wlach

I see. Thanks !
It looks nice to upgrade step-by-step to make each step more simple !