Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 16, 2024

Bumps django-allauth from 0.55.2 to 0.60.1.

Changelog

Sourced from django-allauth's changelog.

0.60.1 (2024-01-15)


Fixes

  • User sessions: after changing your password in case of ACCOUNT_LOGOUT_ON_PASSWORD_CHANGE = False, the list of sessions woud be empty instead of showing your current session.

  • SAML: accessing the SLS/ACS views using a GET request would result in a crash (500).

  • SAML: the login view did not obey the SOCIALACCOUNT_LOGIN_ON_GET = False setting.

0.60.0 (2024-01-05)


Note worthy changes

  • Google One Tap Sign-In is now supported.

  • You can now more easily change the URL to redirect to after a successful password change/set via the newly introduced get_password_change_redirect_url() adapter method.

  • You can now configure the primary key of all models by configuring ALLAUTH_DEFAULT_AUTO_FIELD, for example to: "hashid_field.HashidAutoField".

Backwards incompatible changes

  • You can now specify the URL path prefix that is used for all OpenID Connect providers using SOCIALACCOUNT_OPENID_CONNECT_URL_PREFIX. By default, it is set to "oidc", meaning, an OpenID Connect provider with provider ID foo uses /accounts/oidc/foo/login/ as its login URL. Set it to empty ("") to keep the previous URL structure (/accounts/foo/login/).

  • The SAML default attribute mapping for uid has been changed to only include urn:oasis:names:tc:SAML:attribute:subject-id. If the SAML response does not contain that, it will fallback to use NameID.

0.59.0 (2023-12-13)


Note worthy changes

... (truncated)

Commits
  • 0ad6c51 chore: Release 0.60.1
  • 11a549c docs(ChangeLog): Add SAML fixes
  • befdf9b fix(usersessions): Handle LOGOUT_ON_PASSWORD_CHANGE
  • 3b65b11 fix(saml): Respect SOCIALACCOUNT_LOGIN_ON_GET
  • 0c49379 fix(saml): Handle wrong methods at acs/sls
  • 5f4b584 chore: Opening 0.60.1-dev
  • 4faff2d chore: Release 0.60.0
  • 52bffbd fix(i18n): Updates to django.po for ru locale
  • 89ebcc5 fix(google): get_avatar_url sometimes returns None
  • 0bb3cec fix(steam): get(params)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Jan 16, 2024
Copy link
Contributor

@github-actions github-actions bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Automatic approval for minor dependency update.

@github-actions github-actions bot enabled auto-merge January 16, 2024 01:50
@dependabot dependabot bot force-pushed the dependabot/pip/django-allauth-0.60.1 branch from 77bb3b9 to 1c4d46a Compare January 29, 2024 01:32
Copy link
Contributor

@github-actions github-actions bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Automatic approval for minor dependency update.

Bumps [django-allauth](https://github.com/pennersr/django-allauth) from 0.55.2 to 0.60.1.
- [Changelog](https://github.com/pennersr/django-allauth/blob/main/ChangeLog.rst)
- [Commits](pennersr/django-allauth@0.55.2...0.60.1)

---
updated-dependencies:
- dependency-name: django-allauth
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/pip/django-allauth-0.60.1 branch from 1c4d46a to 2de9267 Compare January 31, 2024 01:10
Copy link
Contributor

@github-actions github-actions bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Automatic approval for minor dependency update.

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Feb 7, 2024

Superseded by #873.

@dependabot dependabot bot closed this Feb 7, 2024
auto-merge was automatically disabled February 7, 2024 22:53

Pull request was closed

@dependabot dependabot bot deleted the dependabot/pip/django-allauth-0.60.1 branch February 7, 2024 22:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Development

Successfully merging this pull request may close these issues.

1 participant