Skip to content

Bump doorkeeper from 5.9.2 to 5.9.3#1440

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bundler/doorkeeper-5.9.3
Open

Bump doorkeeper from 5.9.2 to 5.9.3#1440
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bundler/doorkeeper-5.9.3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 16, 2026

Copy link
Copy Markdown
Contributor

Bumps doorkeeper from 5.9.2 to 5.9.3.

Release notes

Sourced from doorkeeper's releases.

v5.9.3

  • #1834 Fix default allow_token_introspection returning false when a custom application_class is configured. The default proc compared application objects with ==, which fails when the authorized client and the introspected token's application are resolved as different classes (e.g. a base Doorkeeper::Application vs. a configured subclass) even though they reference the same record. It now compares application ids instead.
  • #1832 Fix confusing belongs_to :owner side effect: Doorkeeper::Models::Ownership is now included only when enable_application_owner? is set (read at include time), so models no longer expose a misleading owner association/reflection when the application owner feature is disabled and the schema lacks the owner columns.
Changelog

Sourced from doorkeeper's changelog.

5.9.3

  • #1834 Fix default allow_token_introspection returning false when a custom application_class is configured. The default proc compared application objects with ==, which fails when the authorized client and the introspected token's application are resolved as different classes (e.g. a base Doorkeeper::Application vs. a configured subclass) even though they reference the same record. It now compares application ids instead.
  • #1832 Fix confusing belongs_to :owner side effect: Doorkeeper::Models::Ownership is now included only when enable_application_owner? is set (read at include time), so models no longer expose a misleading owner association/reflection when the application owner feature is disabled and the schema lacks the owner columns.
Commits
  • 4737ffe Release 5.9.3 🎉
  • 90e4976 Merge pull request #1834 from 55728/fix/1833-allow-token-introspection-custom...
  • bc3d9e5 Merge pull request #1832 from 55728/experiment/1831-gate-ownership
  • 155ce8c Fix allow_token_introspection default for custom application_class (#1833)
  • 1c7ef35 Gate belongs_to :owner on enable_application_owner? at include time
  • See full diff in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code labels Jun 16, 2026
@greptile-apps

greptile-apps Bot commented Jun 16, 2026

Copy link
Copy Markdown
Contributor

PR author is in the excluded authors list.

@socket-security

socket-security Bot commented Jun 16, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedgem/​doorkeeper@​5.9.2 ⏵ 5.9.398100100100100

View full report

Bumps [doorkeeper](https://github.com/doorkeeper-gem/doorkeeper) from 5.9.2 to 5.9.3.
- [Release notes](https://github.com/doorkeeper-gem/doorkeeper/releases)
- [Changelog](https://github.com/doorkeeper-gem/doorkeeper/blob/main/CHANGELOG.md)
- [Commits](doorkeeper-gem/doorkeeper@v5.9.2...v5.9.3)

---
updated-dependencies:
- dependency-name: doorkeeper
  dependency-version: 5.9.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/bundler/doorkeeper-5.9.3 branch from ced2411 to bb13d01 Compare June 24, 2026 10:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants