chore(deps): bump doorkeeper from 5.9.3 to 5.9.5 - #32

Closed

dependabot[bot] wants to merge 1 commit into

main from

dependabot/bundler/doorkeeper-5.9.5

Closed

chore(deps): bump doorkeeper from 5.9.3 to 5.9.5 #32
dependabot[bot] wants to merge 1 commit into
main from
dependabot/bundler/doorkeeper-5.9.5

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 12, 2026

Copy link

Copy Markdown

Bumps doorkeeper from 5.9.3 to 5.9.5.

Release notes

Sourced from doorkeeper's releases.

v5.9.5

#1901 Reject requests that authenticate the client with more than one method (RFC 6749 §2.3) with an invalid_request error, instead of silently authenticating with the first method that matched and discarding the other credentials.

#1853 Fix reuse_access_token reusing a token that was created with custom_access_token_attributes values when the new request doesn't specify any custom attributes. Such requests now only match tokens without custom attributes.

Changelog

Sourced from doorkeeper's changelog.

5.9.5

#1901 Reject requests that authenticate the client with more than one method (RFC 6749 §2.3) with an invalid_request error, instead of silently authenticating with the first method that matched and discarding the other credentials.

#1853 Fix reuse_access_token reusing a token that was created with custom_access_token_attributes values when the new request doesn't specify any custom attributes. Such requests now only match tokens without custom attributes.

Commits

4a87582 Release 5.9.5
896ca00 Merge commit from fork
f9e8097 Reject requests using multiple client authentication methods (RFC 6749 §2.3)
932c966 Merge pull request #1856 from 55728/backport/v5.9-stable/custom-attributes-to...
696cdc0 Merge pull request #1853 from 55728/fix/custom-attributes-token-reuse
See full diff in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot


 chore(deps): bump doorkeeper from 5.9.3 to 5.9.5

550a330

Bumps [doorkeeper](https://github.com/doorkeeper-gem/doorkeeper) from 5.9.3 to 5.9.5.
- [Release notes](https://github.com/doorkeeper-gem/doorkeeper/releases)
- [Changelog](https://github.com/doorkeeper-gem/doorkeeper/blob/main/CHANGELOG.md)
- [Commits](doorkeeper-gem/doorkeeper@v5.9.3...v5.9.5)
---
updated-dependencies:
- dependency-name: doorkeeper
 dependency-version: 5.9.5
 dependency-type: direct:production
 update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>