hawkpost
hawkpost copied to clipboard
Bump django-allauth from 0.47.0 to 0.54.0
Bumps django-allauth from 0.47.0 to 0.54.0.
Changelog
Sourced from django-allauth's changelog.
0.54.0 (2023-03-31)
Note worthy changes
- Dropped support for EOL Python versions (3.5, 3.6).
Security notice
- Even when account enumeration prevention was turned on, it was possible for an attacker to infer whether or not a given account exists based upon the response time of an authentication attempt. Fixed.
0.53.1 (2023-03-20)
Note worthy changes
- Example base template was missing
{% load i18n}
, fixed.0.53.0 (2023-03-16)
Note worthy changes
You can now override the use of the
UserTokenForm
over at thePasswordResetFromKeyView
by configuringACCOUNT_FORMS["user_token"]
to allow the change of the password reset token generator.The Google API URLs are now configurable via the provider setting which enables use-cases such as overriding the endpoint during integration tests to talk to a mocked version of the API.
0.52.0 (2022-12-29)
Note worthy changes
Officially support Django 4.1.
New providers: OpenID Connect, Twitter (OAuth2), Wahoo, DingTalk.
... (truncated)
Commits
77368a8
chore: Preparing release 0.54.06acb0dc
fix(account): Account enumeration timing attack367865f
docs: Remove ACCOUNT_PREVENT_ENUMERATION warning64d2477
chore: Run extra CI on Python 3.11da299f8
chore: Run CI on Ubuntu 22632f37d
chore!: Drop support for EOL Python 3.5 and 3.6, test on Python 3.11 tooafa3ea9
docs(README): Reworded inspite54d7280
chore(socialaccount): Remove hard-coded redirect URL0655cdf
feat(accounts): add key to password reset template99b67e8
chore: Preparing release 0.53.1- Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase
.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
-
@dependabot rebase
will rebase this PR -
@dependabot recreate
will recreate this PR, overwriting any edits that have been made to it -
@dependabot merge
will merge this PR after your CI passes on it -
@dependabot squash and merge
will squash and merge this PR after your CI passes on it -
@dependabot cancel merge
will cancel a previously requested merge and block automerging -
@dependabot reopen
will reopen this PR if it is closed -
@dependabot close
will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually -
@dependabot ignore this major version
will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) -
@dependabot ignore this minor version
will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) -
@dependabot ignore this dependency
will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)