Skip to content

chore(deps): bump doorkeeper from 5.9.3 to 5.9.5 - #32

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bundler/doorkeeper-5.9.5
Closed

chore(deps): bump doorkeeper from 5.9.3 to 5.9.5#32
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bundler/doorkeeper-5.9.5

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 12, 2026

Copy link
Copy Markdown

Bumps doorkeeper from 5.9.3 to 5.9.5.

Release notes

Sourced from doorkeeper's releases.

v5.9.5

  • #1901 Reject requests that authenticate the client with more than one method (RFC 6749 §2.3) with an invalid_request error, instead of silently authenticating with the first method that matched and discarding the other credentials.
  • #1853 Fix reuse_access_token reusing a token that was created with custom_access_token_attributes values when the new request doesn't specify any custom attributes. Such requests now only match tokens without custom attributes.
Changelog

Sourced from doorkeeper's changelog.

5.9.5

  • #1901 Reject requests that authenticate the client with more than one method (RFC 6749 §2.3) with an invalid_request error, instead of silently authenticating with the first method that matched and discarding the other credentials.
  • #1853 Fix reuse_access_token reusing a token that was created with custom_access_token_attributes values when the new request doesn't specify any custom attributes. Such requests now only match tokens without custom attributes.
Commits
  • 4a87582 Release 5.9.5
  • 896ca00 Merge commit from fork
  • f9e8097 Reject requests using multiple client authentication methods (RFC 6749 §2.3)
  • 932c966 Merge pull request #1856 from 55728/backport/v5.9-stable/custom-attributes-to...
  • 696cdc0 Merge pull request #1853 from 55728/fix/custom-attributes-token-reuse
  • See full diff in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [doorkeeper](https://github.com/doorkeeper-gem/doorkeeper) from 5.9.3 to 5.9.5.
- [Release notes](https://github.com/doorkeeper-gem/doorkeeper/releases)
- [Changelog](https://github.com/doorkeeper-gem/doorkeeper/blob/main/CHANGELOG.md)
- [Commits](doorkeeper-gem/doorkeeper@v5.9.3...v5.9.5)

---
updated-dependencies:
- dependency-name: doorkeeper
  dependency-version: 5.9.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code labels Aug 12, 2026
@dependabot @github

dependabot Bot commented on behalf of github Aug 19, 2026

Copy link
Copy Markdown
Author

Superseded by #35.

@dependabot dependabot Bot closed this Aug 19, 2026
@dependabot
dependabot Bot deleted the dependabot/bundler/doorkeeper-5.9.5 branch August 19, 2026 01:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants