chore(deps): Bump clearance from 1.16.1 to 2.5.0

[dependabot[bot]]

Bumps clearance from 1.16.1 to 2.5.0.

Release notes

Sourced from clearance's releases.

v2.5.0

[2.5.0] - September 10, 2021

Fixed

• Fix open redirect vulnerability

Changed

• Rename default branch to main

v2.4.0

2.4.0 - March 5, 2021

Added

• Optionally use signed cookies to prevent remember token timing attacks. Big thank you for @​gingerlime!

v2.3.1

Fixed

• Support for accessing Rails 6.x primary_key_type in generator.
• Fix password reset URLs when using a custom model
• Fix flaky test that relied on too specific time delta
• Revert case sensitivity for email uniqueness
• Bump nokogiri and actionview dependencies to address security vulnerabilities

v2.3.0

2.3.0 - August 14, 2020

Fixed

• Delete cookie correctly when a callable object is set as the custom domain setting.
• Strip as parameter when signing in through the back door.
• Remove broken autoload for deprecated password strategies.

Changed

• Deliver password reset email inline rather than in the background.
• Remove unnecessary unsafe interpolation in erb templates.

v2.2.1

Fixed

• Prevent user enumeration by timing attacks. Trying to log in with an

... (truncated)

Changelog

Sourced from clearance's changelog.

2.5.0 - September 10, 2021

Fixed

• Fix open redirect vulnerability

Changed

• Rename default branch to main

2.4.0 - March 5, 2021

Added

• Optionally use signed cookies to prevent remember token timing attacks

2.3.1 - March 5, 2021

Fixed

• Support for accessing Rails 6.x primary_key_type in generator.
• Fix password reset URLs when using a custom model
• Fix flaky test that relied on too specific time delta
• Revert case sensitivity for email uniqueness
• Bump nokogiri and actionview dependencies to address security vulnerabilities

2.3.0 - August 14, 2020

Fixed

• Delete cookie correctly when a callable object is set as the custom domain setting.
• Strip as parameter when signing in through the back door.
• Remove broken autoload for deprecated password strategies.

Changed

• Deliver password reset email inline rather than in the background.
• Remove unnecessary unsafe interpolation in erb templates.

[2.2.1] - August 7, 2020

... (truncated)

Commits

• 3691c23 [ci skip] v2.5.0 release
• 5bcab3d Fix open redirect vulnerability
• d1fade8 Update CI badge from Travis to Github
• d91c93b Update inch-ci branch from master to main
• 7c6c010 Update CI branch from master to main
• c8d561c Update readme with correct httponly default (#942)
• 6a284cc Fix AddClearanceToUsers down method (remove_index) (#931)
• 1d3be26 Update REXML version (#940)
• 729ed73 fix typo (#939)
• b4cf731 [ci skip] v2.4.0 release
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.