Update social-auth-core requirement from >=3.3.0 to >=4.8.6

[dependabot]

Updates the requirements on social-auth-core to permit the latest version.

Release notes

Sourced from social-auth-core's releases.

4.8.6

Changed

• storage.UserProtocol now supports read-only attributes for better type-checker compatibility
• Improved type annotations and enabled mypy type checking in CI

Fixed

• sanitize_redirect() now handles invalid redirect values that raise ValueError
• Fixed timezone handling when working with dates

Security

• Require PyJWT >= 2.12.0 to address CVE-2026-32597

Changelog

Sourced from social-auth-core's changelog.

4.8.6 - 2026-04-20

Changed

• storage.UserProtocol now supports read-only attributes for better type-checker compatibility
• Improved type annotations and enabled mypy type checking in CI

Fixed

• sanitize_redirect() now handles invalid redirect values that raise ValueError
• Fixed timezone handling when working with dates

Security

• Require PyJWT >= 2.12.0 to address CVE-2026-32597

4.8.5 - 2026-02-10

Changed

• Fixed partial pipeline handling for unauthenticated users

4.8.4 - 2026-02-10

Changed

• Improved type annotations
• Code cleanups
• Improved error handling in SAML

Added

• Add Azure AD(Entra ID) federated client assertion support (FIC)

4.8.3 - 2025-12-18

Changed

• Added registry to configured default strategy

4.8.2 - 2025-12-18

Changed

• The timeout parameter can be again configured
• Refactored HTTP authentication code
• Loosened some type checks for better downstream compatibility
• ID_KEY is now configurable
• Improved token expiry validation
• Additional OIDC parameters are now supported

... (truncated)

Commits

• abe3214 chore: release 4.8.6
• 36d5d9e chore: add some obvious type annotations
• 19dac07 fix: specify timezone when working with dates
• 0c65572 chore: remove unused pyright overrides
• e210a93 feat(ci): introduce mypy type checking
• 0404155 chore: fix type annotations
• ac3c0bd fix(deps): update dependency ty to v0.0.31
• 68b44a3 chore(deps): update astral-sh/setup-uv action to v8.1.0 (#1671)
• 3da1c90 chore(deps): replace astral-sh/setup-uv action with astral-sh/setup-uv v8.0.0...
• f592d34 chore(deps): update astral-sh/setup-uv action to v8.1.0 (#1669)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #127.