Release v5.0.3

carlosantoniodasilva · carlosantoniodasilva · commit 2f809205b2a9 · 2026-03-16T17:44:04.000-03:00
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,4 +1,4 @@
-### Unreleased
+### 5.0.3 - 2026-03-16
 
 * security fixes
   * Fix race condition vulnerability on confirmable "change email" which would allow confirming an email they don't own CVE-2026-32700 [#5783](https://github.com/heartcombo/devise/pull/5783) [#5784](https://github.com/heartcombo/devise/pull/5784)
diff --git a/Gemfile.lock b/Gemfile.lock
@@ -11,7 +11,7 @@ GIT
 PATH
   remote: .
   specs:
-    devise (5.0.2)
+    devise (5.0.3)
       bcrypt (~> 3.0)
       orm_adapter (~> 0.1)
       railties (>= 7.0)
diff --git a/lib/devise/version.rb b/lib/devise/version.rb
@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Devise
-  VERSION = "5.0.2".freeze
+  VERSION = "5.0.3".freeze
 end

Original file line number	Diff line number	Diff line change
`@@ -1,4 +1,4 @@`
`1`		`-### Unreleased`
	`1`	`+### 5.0.3 - 2026-03-16`
`2`	`2`
`3`	`3`	`* security fixes`
`4`	`4`	`* Fix race condition vulnerability on confirmable "change email" which would allow confirming an email they don't own CVE-2026-32700 [#5783](https://github.com/heartcombo/devise/pull/5783) [#5784](https://github.com/heartcombo/devise/pull/5784)`