[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
social-auth-core (changelog)	==6.1.0 → ==6.1.1

---

Release Notes

python-social-auth/social-core (social-auth-core)

v6.1.1

Compare Source

Security

• Reject missing provider user identifiers before converting them to strings,
  preventing absent identifiers from being stored and matched as the shared UID
  "None".
• Use documented stable identifiers for HubSpot (hub_id and user_id), Monzo
  (user_id), WLCG (sub), Asana (data.gid), and Dropbox (account_id).
  HubSpot identities are scoped to both the portal and installing user.
• MineID and the legacy Upwork OAuth1 backend now fail closed because their
  profile responses do not expose a documented immutable account identifier.
  Custom MineID deployments can configure ID_KEY after adding such a field to
  their profile response.

Existing social-auth rows whose UID is "None" cannot be attributed to a
specific provider account. Administrators should review and remove those rows,
then require affected users to authenticate again; they are not migrated
automatically.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[read-the-docs-community]

Documentation build overview

📚 Python Social Auth | 🛠️ Build #35057594 | 📁 Comparing 1d8ab37 against latest (cb2e4a7)

  🔍 Preview build  

1 file changed

± _modules/social_core/pipeline/social_auth.html