v2025.4.9

What's Changed

• fix(dynamic_config): Warn on PermissionError instead of erroring. by @rochacbruno in #704
• AAP-38380: Fix dynaconf handling of spectacular by @bhavenst in #705
• AAP-41636 Support extracting the groups claim from id_token when using social auth by @markafarrell in #682
• AAP-41636 Add configurable group claim and reading groups from backend by @tznamena in #708
• Fix the docker-compose serving by @AlanCoding in #694
• [AAP-41963] Fix SonarCloud security hotspots by @trucdg in #707
• AAP-38581 Allow ldap union in user search of ldap authenticator by @john-westcott-iv in #706
• Add upper-bound to social-auth-core by @BrennanPaciorek in #711
• NO_JIRA Remove the title field from the PR template by @john-westcott-iv in #712
• AAP-37017 Fix how we build AuthExceptions by @john-westcott-iv in #664

Full Changelog: 2025.3.7...2025.4.9