Skip to content

chore(deps): update dependency social-auth-core to v5.1.1 - #512

Merged
renovate[bot] merged 1 commit into
masterfrom
renovate/social-auth-core-5.x
Sep 18, 2026
Merged

renovate[bot] merged 1 commit into
masterfrom
renovate/social-auth-core-5.x

Conversation

@renovate

@renovate renovate Bot commented Sep 18, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
social-auth-core (changelog) ==5.1.0==5.1.1 age confidence

Release Notes

python-social-auth/social-core (social-auth-core)

v5.1.1

Compare Source

Security
  • VK app authentication now fetches user profiles directly from VK and verifies
    that the profile ID matches the signed viewer ID, preventing forged callback
    data from overriding the authenticated identity and profile.
Added
  • Added AuthReauthenticationRequired, a subclass of AuthTokenError, for
    OpenID Connect token refreshes that require the user to sign in again.
Changed
  • Updated development dependencies and CI actions.
  • Allowed newer Google Auth versions for the Google One Tap backend.
Fixed
  • Authentication backends now consistently honor configurable user ID keys.
  • Auth0 now requests the required openid, profile, and email scopes and
    raises AuthTokenError when the token response lacks an ID token.
  • OpenID Connect now validates required ID token claims consistently and handles
    legacy token refresh identity context more reliably.
  • SAML parsing, decryption, and validation failures now consistently raise
    authentication exceptions, as do unknown or invalid identity provider names.
  • SAML responses without RelayState now include the resolved identity provider
    name when only one provider is configured.
Removed
  • Discontinued OAuth backends: EchoSign, ExactTarget, Pocket, Runkeeper,
    Skyrock, and Withings.

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot enabled auto-merge (rebase) September 18, 2026 12:44
@read-the-docs-community

Copy link
Copy Markdown

@renovate
renovate Bot merged commit 8af366c into master Sep 18, 2026
5 checks passed
@renovate
renovate Bot deleted the renovate/social-auth-core-5.x branch September 18, 2026 12:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

0 participants