hawkpost
hawkpost copied to clipboard
Bump django-allauth from 0.47.0 to 0.54.0
Bumps django-allauth from 0.47.0 to 0.54.0.
Changelog
Sourced from django-allauth's changelog.
0.54.0 (2023-03-31)
Note worthy changes
- Dropped support for EOL Python versions (3.5, 3.6).
Security notice
- Even when account enumeration prevention was turned on, it was possible for an attacker to infer whether or not a given account exists based upon the response time of an authentication attempt. Fixed.
0.53.1 (2023-03-20)
Note worthy changes
- Example base template was missing
{% load i18n}, fixed.0.53.0 (2023-03-16)
Note worthy changes
You can now override the use of the
UserTokenFormover at thePasswordResetFromKeyViewby configuringACCOUNT_FORMS["user_token"]to allow the change of the password reset token generator.The Google API URLs are now configurable via the provider setting which enables use-cases such as overriding the endpoint during integration tests to talk to a mocked version of the API.
0.52.0 (2022-12-29)
Note worthy changes
Officially support Django 4.1.
New providers: OpenID Connect, Twitter (OAuth2), Wahoo, DingTalk.
... (truncated)
Commits
77368a8chore: Preparing release 0.54.06acb0dcfix(account): Account enumeration timing attack367865fdocs: Remove ACCOUNT_PREVENT_ENUMERATION warning64d2477chore: Run extra CI on Python 3.11da299f8chore: Run CI on Ubuntu 22632f37dchore!: Drop support for EOL Python 3.5 and 3.6, test on Python 3.11 tooafa3ea9docs(README): Reworded inspite54d7280chore(socialaccount): Remove hard-coded redirect URL0655cdffeat(accounts): add key to password reset template99b67e8chore: Preparing release 0.53.1- Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)