Skip to content

Bump django-oauth-toolkit from 3.2.0 to 3.3.0#2128

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/django-oauth-toolkit-3.3.0
Open

Bump django-oauth-toolkit from 3.2.0 to 3.3.0#2128
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/django-oauth-toolkit-3.3.0

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Jun 2, 2026

Bumps django-oauth-toolkit from 3.2.0 to 3.3.0.

Changelog

Sourced from django-oauth-toolkit's changelog.

[3.3.0] - 2025-05-21

Added

  • #1637 Support for Django 6.0
  • #1642 Provide App Name and Scope in Device Confirmation View

Removed

  • #1636 Remove support for Python 3.8 and 3.9

Fixed

  • #1628 Fix inaccurate help_text on client_secret field of Application model
  • #1674 Add list_select_related to RefreshTokenAdmin to avoid unbounded JOIN queries on the changelist
  • #1621 Fix device code tokens getting the wrong scope.
  • #1683 Fix swapped DeviceGrant model usage across the device authorization flow
  • #1689 Fix invalid Cache-Control header value on the OIDC JWKS endpoint
  • #1692 Fix consent violation and scope escalation.
Commits
  • 1fbc081 chore: release 3.3.0 (#1699)
  • 842ed3a Pre-fill user_code by making use of verification_uri_complete (#1658)
  • d983777 fix: support swapped DeviceGrant models in device flow (#1684)
  • a15ff8e fix: correct malformed Cache-Control header in JWKS info (#1690)
  • a9cede7 Provide application and scopes in DeviceConfirmView context (#1643)
  • b5ea033 Fix/consent violation and scope escalation (#1692)
  • 4e1abb4 Device code obey scopes (#1691)
  • d422eea chore: missing CI jobs (#1679)
  • b277f32 fix: Avoid crawling the entire model graph when viewing RefreshTokenAdmin (...
  • 24abc3f upgrade RTD to supported version of ubuntu (#1677)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [django-oauth-toolkit](https://github.com/django-oauth/django-oauth-toolkit) from 3.2.0 to 3.3.0.
- [Release notes](https://github.com/django-oauth/django-oauth-toolkit/releases)
- [Changelog](https://github.com/django-oauth/django-oauth-toolkit/blob/master/CHANGELOG.md)
- [Commits](django-oauth/django-oauth-toolkit@3.2.0...3.3.0)

---
updated-dependencies:
- dependency-name: django-oauth-toolkit
  dependency-version: 3.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Jun 2, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants