Bump django-allauth from 0.42.0 to 0.49.0

[dependabot]

Bumps django-allauth from 0.42.0 to 0.49.0.

Changelog

Sourced from django-allauth's changelog.

0.49.0 (2022-02-22)

---

Note worthy changes

• New providers: LemonLDAP::NG.

• Fixed SignupForm setting username and email attributes on the User class instead of a dummy user instance.

• Email addresses POST'ed to the email management view (done in order to resend the confirmation email) were not properly validated. Yet, these email addresses were still added as secondary email addresses. Given the lack of proper validation, invalid email addresses could have entered the database.

• New translations: Romanian.

Backwards incompatible changes

• Changed naming of internal_reset_url_key attribute in allauth.account.views.PasswordResetFromKeyView to reset_url_key.

0.48.0 (2022-02-03)

---

Note worthy changes

• New translations: Catalan, Bulgarian.

• Introduced a new setting ACCOUNT_PREVENT_ENUMERATION that controls whether or not information is revealed about whether or not a user account exists. Warning: this is a work in progress, password reset is covered, yet, signing up is not.

• The ACCOUNT_EMAIL_CONFIRMATION_COOLDOWN is now also respected when using HMAC based email confirmations. In earlier versions, users could trigger email verification mails without any limits.

• Added builtin rate limitting (see ACCOUNT_RATE_LIMITS).

• Added internal_reset_url_key attribute in allauth.account.views.PasswordResetFromKeyView which allows specifying a token parameter displayed as a component of password reset URLs.

• It is now possible to use allauth without having sites installed. Whether or not sites is used affects the data models. For example, the social app model

... (truncated)

Commits

• 46f4a8a chore: Release 0.49.0
• d5c410b chore(microsoft): update microsoft provider
• 1e3cd8e refactor(microsoft): remove unused models file
• bde8870 fix(kakao): Prevent 'kakao_account' KeyError
• cdeecbc tests(account): remove unused var
• 7776461 fix(account/views/verify): don't implicitly add POST'ed email
• 16a8b7c fix(account/forms): Use user instance for password validation
• c60e503 feat(providers): add LemonLDAP::NG
• 8a4201a chore(ratelimit): don't add user/ip to an explicitly passed key
• f22efdd chore(docs): Wrap up reset_url_key
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

The following labels could not be found: dependencies, backport 3.x.

[dependabot]

Superseded by #498.