[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
social-auth-core (changelog)	==7.0.0 → ==7.1.0

---

Release Notes

python-social-auth/social-core (social-auth-core)

v7.1.0

Compare Source

Security

• Enable PKCE by default for all Azure AD and Azure AD B2C backends, binding
  authorization codes to the initiating login transaction. In-progress Azure
  logins must restart after upgrading.
• Require oauthlib 4.0.1 or newer to exclude versions with known vulnerabilities.
• Require pyasn1 0.6.5 or newer in the google-onetap extra to exclude
  versions with known ASN.1 decoder denial-of-service vulnerabilities.
• Discard a session-held partial pipeline if its initiating user differs from the
  currently authenticated user, including flows started anonymously.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[read-the-docs-community]

Documentation build overview

📚 Python Social Auth | 🛠️ Build #35825997 | 📁 Comparing 0b830b0 against latest (f6566c1)

  🔍 Preview build  

1 file changed

± _modules/social_core/utils.html