Release 1.144.5

[odlbot]

James Kachel

• Add management command to check/repair B2B program enrollments (Add management command to check/repair B2B program enrollments #3449) (ca2c7871)
• Refactor program cert generation to support new cert requirements (Refactor program cert generation to support new cert requirements #3439) (9c73fb37)

Tobias Macey

• chore: add drf-lint pre-commit hook with baseline (chore: add drf-lint pre-commit hook with baseline #3453) (f8bfa011)

pre-commit-ci[bot]

• [pre-commit.ci] pre-commit autoupdate ([pre-commit.ci] pre-commit autoupdate #3438) (168c95fa)

annagav

• Add test to the program enrollment dialog (Add test to the program enrollment dialog #3445) (4a68740c)

Muhammad Anas

• fix: fall back to audit enrollment for non-upgradable runs in verified program enrollment API (fix: fall back to audit enrollment for non-upgradable runs in verified program enrollment API #3451) (1c1f5b77)

[github-actions]

OpenAPI Changes

Show/hide ## Changes for v0.yaml:

## Changes for v0.yaml:


## Changes for v1.yaml:


## Changes for v2.yaml:

Unexpected changes? Ensure your branch is up-to-date with main (consider rebasing).

[sentry]

Bug: The new check for a verified ProgramEnrollment prevents returning existing certificates for users whose enrollments were auto-created with the default 'audit' mode by the old system.
_{Severity: HIGH}

Suggested Fix

The logic should be reordered. First, check if a valid ProgramCertificate already exists for the user. If it does, return it. Only if no certificate exists should the code proceed to check for a verified ProgramEnrollment as a condition for creating a new certificate. This ensures backward compatibility for users with existing certificates.

Prompt for AI Agent

Review the code at the location below. A potential bug has been identified by an AI
agent.
Verify if this is a real issue. If it is, propose a fix; if not, explain why it's not
valid.

Location: courses/api.py#L1097-L1111

Potential issue: The function `generate_program_certificate` now checks for a
`ProgramEnrollment` with `enrollment_mode=EDX_ENROLLMENT_VERIFIED_MODE` before checking
for an existing `ProgramCertificate`. Previously, `ProgramEnrollment` records were
created without specifying a mode, defaulting to 'audit'. Consequently, users with
existing certificates and these default audit enrollments will now fail the new check,
causing the function to incorrectly return `(None, False)` instead of their valid,
existing certificate. This is a regression that affects users who earned certificates
under the old logic.

_{Did we get this right? 👍 / 👎 to inform future reviews.}