Skip to content

Bump social-auth-app-django from 5.9.0 to 6.0.1 - #857

Draft
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/pip/social-auth-app-django-6.0.1
Draft

Bump social-auth-app-django from 5.9.0 to 6.0.1#857
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/pip/social-auth-app-django-6.0.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 27, 2026

Copy link
Copy Markdown
Contributor

Bumps social-auth-app-django from 5.9.0 to 6.0.1.

Release notes

Sourced from social-auth-app-django's releases.

6.0.1

Fixed

  • Created sessions before authentication so cross-site SAML POST callbacks can restore authentication request IDs.

6.0.0

Security

  • Added the default Django confirmation page for externally resumed partial pipelines.

Breaking

  • Login views now always require POST requests, and the SOCIAL_AUTH_REQUIRE_POST setting was removed.

Changed

  • Raised the social-auth-core dependency to the next major release with the required Strategy hooks.
Changelog

Sourced from social-auth-app-django's changelog.

6.0.1 - 2026-07-24

Fixed

  • Created sessions before authentication so cross-site SAML POST callbacks can restore authentication request IDs.

6.0.0 - 2026-06-23

Security

  • Added the default Django confirmation page for externally resumed partial pipelines.

Breaking

  • Login views now always require POST requests, and the SOCIAL_AUTH_REQUIRE_POST setting was removed.

Changed

  • Raised the social-auth-core dependency to the next major release with the required Strategy hooks.
Commits
  • 6ab4a22 chore: Version bump 6.0.1
  • 772ef00 chore(deps): update pre-commit hook astral-sh/ruff-pre-commit to v0.16.0 (#1042)
  • 3e47ce7 fix(strategy): create sessions before authentication
  • ada8c16 chore(deps): update ossf/scorecard-action action to v2.4.4 (#1041)
  • b531574 chore(deps): update github/codeql-action action to v4.37.3 (#1040)
  • 19fdb74 chore(deps): update pre-commit hook zizmorcore/zizmor-pre-commit to v1.28.0 (...
  • d1be581 chore(deps): update github/codeql-action action to v4.37.2 (#1037)
  • 22008e7 chore(deps): update astral-sh/setup-uv action to v9 (#1038)
  • 4bd8280 chore(deps): update actions/checkout action to v7.0.1 (#1036)
  • 11e36b1 chore(deps): update actions/setup-python action to v7 (#1035)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [social-auth-app-django](https://github.com/python-social-auth/social-app-django) from 5.9.0 to 6.0.1.
- [Release notes](https://github.com/python-social-auth/social-app-django/releases)
- [Changelog](https://github.com/python-social-auth/social-app-django/blob/master/CHANGELOG.md)
- [Commits](python-social-auth/social-app-django@5.9.0...6.0.1)

---
updated-dependencies:
- dependency-name: social-auth-app-django
  dependency-version: 6.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Jul 27, 2026
@atodorov
atodorov marked this pull request as draft July 27, 2026 07:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants