Skip to content

Bump doorkeeper from 5.9.2 to 5.9.3 - #1440

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bundler/doorkeeper-5.9.3
Closed

Bump doorkeeper from 5.9.2 to 5.9.3#1440
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bundler/doorkeeper-5.9.3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 16, 2026

Copy link
Copy Markdown
Contributor

Bumps doorkeeper from 5.9.2 to 5.9.3.

Release notes

Sourced from doorkeeper's releases.

v5.9.3

  • #1834 Fix default allow_token_introspection returning false when a custom application_class is configured. The default proc compared application objects with ==, which fails when the authorized client and the introspected token's application are resolved as different classes (e.g. a base Doorkeeper::Application vs. a configured subclass) even though they reference the same record. It now compares application ids instead.
  • #1832 Fix confusing belongs_to :owner side effect: Doorkeeper::Models::Ownership is now included only when enable_application_owner? is set (read at include time), so models no longer expose a misleading owner association/reflection when the application owner feature is disabled and the schema lacks the owner columns.
Changelog

Sourced from doorkeeper's changelog.

5.9.3

  • #1834 Fix default allow_token_introspection returning false when a custom application_class is configured. The default proc compared application objects with ==, which fails when the authorized client and the introspected token's application are resolved as different classes (e.g. a base Doorkeeper::Application vs. a configured subclass) even though they reference the same record. It now compares application ids instead.
  • #1832 Fix confusing belongs_to :owner side effect: Doorkeeper::Models::Ownership is now included only when enable_application_owner? is set (read at include time), so models no longer expose a misleading owner association/reflection when the application owner feature is disabled and the schema lacks the owner columns.
Commits
  • 4737ffe Release 5.9.3 🎉
  • 90e4976 Merge pull request #1834 from 55728/fix/1833-allow-token-introspection-custom...
  • bc3d9e5 Merge pull request #1832 from 55728/experiment/1831-gate-ownership
  • 155ce8c Fix allow_token_introspection default for custom application_class (#1833)
  • 1c7ef35 Gate belongs_to :owner on enable_application_owner? at include time
  • See full diff in compare view

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code labels Jun 16, 2026
@greptile-apps

greptile-apps Bot commented Jun 16, 2026

Copy link
Copy Markdown
Contributor

PR author is in the excluded authors list.

@socket-security

socket-security Bot commented Jun 16, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedgem/​doorkeeper@​5.9.2 ⏵ 5.9.398100100100100

View full report

Bumps [doorkeeper](https://github.com/doorkeeper-gem/doorkeeper) from 5.9.2 to 5.9.3.
- [Release notes](https://github.com/doorkeeper-gem/doorkeeper/releases)
- [Changelog](https://github.com/doorkeeper-gem/doorkeeper/blob/main/CHANGELOG.md)
- [Commits](doorkeeper-gem/doorkeeper@v5.9.2...v5.9.3)

---
updated-dependencies:
- dependency-name: doorkeeper
  dependency-version: 5.9.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/bundler/doorkeeper-5.9.3 branch from ced2411 to bb13d01 Compare June 24, 2026 10:13
@skyfallwastaken

Copy link
Copy Markdown
Member

Superseded by dependency updates now present on main.

@dependabot @github

dependabot Bot commented on behalf of github Aug 13, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/bundler/doorkeeper-5.9.3 branch August 13, 2026 14:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant