deps(backend): bump allauth (#11030)

* bump allauth

* fix api schema generation

* bump api

src/backend/InvenTree/InvenTree/api_version.py

@@ -1,11 +1,14 @@
 """InvenTree API version information."""
 
 # InvenTree API version
-INVENTREE_API_VERSION = 434
+INVENTREE_API_VERSION = 435
 """Increment this API version number whenever there is a significant change to the API that any clients need to know about."""
 
 INVENTREE_API_TEXT = """
 
+v435 -> 2025-12-16 : https://github.com/inventree/InvenTree/pull/11030
+    - Adds token refresh endpoint to auth API
+
 v434 -> 2025-12-16 : https://github.com/inventree/InvenTree/pull/11021
     - The "tags" fields (on various API endpoints) is now optional, and disabled by default
     - To request tags information, add "tags=true" to the API request query parameters

src/backend/InvenTree/InvenTree/management/commands/schema.py

@@ -70,8 +70,10 @@ class Command(spectacular.Command):
         # Reformat paths
         for p_name, p_spec in spec['paths'].items():
             # strip path name
-            p_name = p_name.removeprefix(dja_path_prefix).removeprefix(
-                '/_allauth/browser/v1/'
+            p_name = (
+                p_name.removeprefix(dja_path_prefix)
+                .removeprefix('/_allauth/browser/v1/')
+                .removeprefix('/_allauth/app/v1/')
             )
 
             # fix refs

src/backend/requirements.in

@@ -3,7 +3,7 @@ django<6.0                              # Django package
 blessed                                 # CLI for Q Monitor
 cryptography>=44.0.0                    # Core cryptographic functionality
 django-anymail[amazon_ses,postal]       # Email backend for various providers
-django-allauth[mfa,socialaccount,saml,openid]   # SSO for external providers via OpenID
+django-allauth[mfa,socialaccount,saml,openid,headless]   # SSO for external providers via OpenID
 django-cleanup                          # Automated deletion of old / unused uploaded files
 django-cors-headers                     # CORS headers extension for DRF
 django-dbbackup>=5.0.0                  # Backup / restore of database and media files

src/backend/requirements.txt

@@ -523,8 +523,9 @@ django==5.2.9 \
     #   djangorestframework
     #   djangorestframework-simplejwt
     #   drf-spectacular
-django-allauth[mfa, openid, saml, socialaccount]==65.12.1 \
-    --hash=sha256:662666ff2d5c71766f66b1629ac7345c30796813221184e13e11ed7460940c6a
+django-allauth[headless, mfa, openid, saml, socialaccount]==65.13.1 \
+    --hash=sha256:2887294beedfd108b4b52ebd182e0ed373deaeb927fc5a22f77bbde3174704a6 \
+    --hash=sha256:2af0d07812f8c1a8e3732feaabe6a9db5ecf3fad6b45b6a0f7fd825f656c5a15
     # via -r src/backend/requirements.in
 django-anymail[amazon-ses, postal]==13.1 \
     --hash=sha256:63e48402ec8258f17640eb73c8c64141f16d2f8ae7d448d0fb1c66e82b7cbcf6 \