fix(deps): update dependency djoser to v2.3.0 [security]

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
djoser	==2.2.2 -> ==2.3.0

GitHub Vulnerability Alerts

CVE-2024-21543

Versions of the package djoser before 2.3.0 are vulnerable to Authentication Bypass when the authenticate() function fails. This is because the system falls back to querying the database directly, granting access to users with valid credentials, and eventually bypassing custom authentication checks such as two-factor authentication, LDAP validations, or requirements from configured AUTHENTICATION_BACKENDS.

---

Release Notes

sunscrapers/djoser (djoser)

v2.3.0

Compare Source

• a potentially breaking change: fix vuln where users were given tokens if the given password was correct, but they haven't passed Django internal AUTHENTICATION_BACKENDS https://github.com/sunscrapers/djoser/issues/795

v2.2.3

Compare Source

• add support for protocol, domain and site name customization in the email contents https://github.com/sunscrapers/djoser/issues/781
• remove unused inactive_account serializer error, not in use since Django 1.10 https://github.com/sunscrapers/djoser/pull/806/commits/b02c422151035a2616102fbb9b48af28067f9c5d
• add catalan translations, update spanish translations https://github.com/sunscrapers/djoser/pull/826
• move serializers for TokenDestroyView and SignupRequestView to class level, so the OpenAPI schema can be automatically generated https://github.com/sunscrapers/djoser/pull/817
• fixed typo SingupRequestView -> SignupRequestView https://github.com/sunscrapers/djoser/pull/817

---

Configuration

📅 Schedule: Branch creation - "" in timezone US/Eastern, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: src/authentication/pyproject.toml

Post-upgrade command 'uv sync' has not been added to the allowed list in allowedPostUpgradeCommands