Bump doorkeeper from 5.5.1 to 5.6.4

[dependabot]

Bumps doorkeeper from 5.5.1 to 5.6.4.

Release notes

Sourced from doorkeeper's releases.

v5.6.4

• #1633 Apply ORM configuration in #to_prepare block to avoid autoloading errors.

v5.6.3

• #1622 Drop support for Rubies 2.5 and 2.6
• #1605 Fix URI validation for Ruby 3.2+.
• #1625 Exclude endless access tokens from StaleRecordsCleaner.
• #1626 Remove deprecated active_record_options config option.
• #1631 Fix regression with redirect behavior after token lookup optimizations (redirect to app URI when found).
• #1630 Special case unique index creation for refresh_token on SQL Server.
• #1627 Lazy evaluate Doorkeeper config when loading files and executing initializers.

v5.6.2

• #1604 Fix fetching of the application when custom application_class defined.

v5.6.1

• #1593 Add support for Trilogy ActiveRecord adapter.
• #1597 Add optional support to use the url path for the native authorization code flow. Ports forward #1143 from 4.4.3
• #1599 Remove unnecessarily re-fetch of application object when creating an access token.

v5.6.0

• #1581 Consider token_type_hint when searching for access token in TokensController to avoid extra database calls.

v5.6.0.rc1

• #1551 Change lazy loading for ORM to be Ruby standard autoload.

• #1552 Remove duplicate IDs on Auth form to improve accessibility.

• #1542 Improve performance of Doorkeeper::AccessToken#matching_token_for using database specific SQL time math.

  [IMPORTANT]: API of the Doorkeeper::AccessToken#matching_token_for method has changed and now it returns only active access tokens (previously they were just not revoked). Please remember that the idea of the reuse_access_token option is to check for existing active token (see configuration option description).

v5.5.4

• #1535 Revert changes introduced in #1528 to allow query params in redirect_uri as per the spec.

v5.5.3

• #1528 Don't allow extra query params in redirect_uri.
• #1525 I18n source for forbidden token error is now doorkeeper.errors.messages.forbidden_token.missing_scope.
• #1531 Disable strict-loading for Doorkeeper models by default.
• #1532 Add support for Rails 7.

v5.5.2

• #1502 Drop support for Ruby 2.4 because of EOL.
• #1504 Updated the url fragment in the comment for code documentation.
• #1512 Fix form behavior when response mode is form_post.
• #1511 Fix that authorization code is returned by fragment if response_mode is fragament.

Changelog

Sourced from doorkeeper's changelog.

5.6.4

• #1633 Apply ORM configuration in #to_prepare block to avoid autoloading errors.

5.6.3

• #1622 Drop support for Rubies 2.5 and 2.6
• #1605 Fix URI validation for Ruby 3.2+.
• #1625 Exclude endless access tokens from StaleRecordsCleaner.
• #1626 Remove deprecated active_record_options config option.
• #1631 Fix regression with redirect behavior after token lookup optimizations (redirect to app URI when found).
• #1630 Special case unique index creation for refresh_token on SQL Server.
• #1627 Lazy evaluate Doorkeeper config when loading files and executing initializers.

5.6.2

• #1604 Fix fetching of the application when custom application_class defined.

5.6.1

• #1593 Add support for Trilogy ActiveRecord adapter.
• #1597 Add optional support to use the url path for the native authorization code flow. Ports forward #1143 from 4.4.3
• #1599 Remove unnecessarily re-fetch of application object when creating an access token.

5.6.0

• #1581 Consider token_type_hint when searching for access token in TokensController to avoid extra database calls.

5.6.0.rc2

• #1558 Fixed bug: able to obtain a token with default scopes even if they are not present in the application scopes when using client credentials.
• #1567 Only filter code parameter if authorization_code grant flow is enabled.

5.6.0.rc1

• #1551 Change lazy loading for ORM to be Ruby standard autoload.

• #1552 Remove duplicate IDs on Auth form to improve accessibility.

• #1542 Improve performance of Doorkeeper::AccessToken#matching_token_for using database specific SQL time math.

  [IMPORTANT]: API of the Doorkeeper::AccessToken#matching_token_for method has changed and now it returns only active access tokens (previously they were just not revoked). Please remember that the idea of the reuse_access_token option is to check for existing active token (see configuration option description).

5.5.4

• #1535 Revert changes introduced in #1528 to allow query params in redirect_uri as per the spec.

5.5.3

... (truncated)

Commits

• 3ad48e0 Release 5.6.4 🎉
• b967c4c Merge pull request #1633 from doorkeeper-gem/fix-custom-models
• e44a395 Apply ORM configuration in #to_prepare block to avoid autoloading errors
• 6364c29 Release 5.6.3 🎉
• 931c344 Merge pull request #1627 from doorkeeper-gem/fixes/lazy-load-associations
• 1e0a796 Don't raise an error without configuration, use default config instead
• ee8547d [ci skip]
• 53d70a8 Lazy evaluate Doorkeeper config when loading files and executing initializers
• a0a1e63 [ci skip] Add changelog entry
• 234efe9 Merge pull request #1630 from doconnor-clintel/patch-1
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #415.