chore: bump copyright headers to 2026

[shilps1583]

The format CI job runs .bin/ory dev headers copyright, which stamps
the current year on every source file's copyright header. No commit
has landed on master since July 2025, so the header year (2025) is now
stale, and the format job fails on any PR or push -- not because of
anything in that change, but because this is the first CI run since
the year rolled over.

Re-running make format on current output only touches the copyright
year across the tree; there is no other diff.

[CLAassistant]

Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
_{You have signed the CLA already but the status is still pending? Let us recheck it.}

[coderabbitai]

Important

Review skipped

Too many files!

This PR contains 261 files, which is 111 over the limit of 150.

To get a review, narrow the scope:
• coderabbit review --type committed # exclude uncommitted changes
• coderabbit review --dir # limit to a subdirectory
• coderabbit review --base # compare against a closer base

Upgrade to a paid plan to raise the limit.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 9724b3cc-30e8-45d1-bcb8-d0211eacdff7

📥 Commits

Reviewing files that changed from the base of the PR and between a5f0b09 and df64505.

⛔ Files ignored due to path filters (1)

• internal/gen/key.go is excluded by !**/gen/**

📒 Files selected for processing (261)

• access_error.go
• access_error_test.go
• access_request.go
• access_request_handler.go
• access_request_handler_test.go
• access_request_test.go
• access_response.go
• access_response_test.go
• access_response_writer.go
• access_response_writer_test.go
• access_write.go
• access_write_test.go
• arguments.go
• arguments_test.go
• audience_strategy.go
• audience_strategy_test.go
• authorize_error.go
• authorize_error_test.go
• authorize_helper.go
• authorize_helper_test.go
• authorize_helper_whitebox_test.go
• authorize_request.go
• authorize_request_handler.go
• authorize_request_handler_oidc_request_test.go
• authorize_request_handler_test.go
• authorize_request_test.go
• authorize_response.go
• authorize_response_test.go
• authorize_response_writer.go
• authorize_response_writer_test.go
• authorize_validators_test.go
• authorize_write.go
• authorize_write_test.go
• client.go
• client_authentication.go
• client_authentication_jwks_strategy.go
• client_authentication_jwks_strategy_test.go
• client_authentication_test.go
• client_manager.go
• client_test.go
• client_with_custom_token_lifespans.go
• client_with_custom_token_lifespans_test.go
• compose/compose.go
• compose/compose_oauth2.go
• compose/compose_openid.go
• compose/compose_par.go
• compose/compose_pkce.go
• compose/compose_rfc7523.go
• compose/compose_rfc8628.go
• compose/compose_strategy.go
• compose/compose_userinfo_vc.go
• config.go
• config_default.go
• context.go
• device_request.go
• device_request_handler.go
• device_request_handler_test.go
• device_response.go
• device_response_test.go
• device_response_writer.go
• device_write.go
• device_write_test.go
• equalKeys_test.go
• errors.go
• errors_test.go
• fosite.go
• fosite_test.go
• generate.go
• go_mod_indirect_pins.go
• handler.go
• handler/oauth2/flow_authorize_code_auth.go
• handler/oauth2/flow_authorize_code_auth_test.go
• handler/oauth2/flow_authorize_code_token.go
• handler/oauth2/flow_authorize_code_token_test.go
• handler/oauth2/flow_authorize_implicit.go
• handler/oauth2/flow_authorize_implicit_test.go
• handler/oauth2/flow_client_credentials.go
• handler/oauth2/flow_client_credentials_storage.go
• handler/oauth2/flow_client_credentials_test.go
• handler/oauth2/flow_refresh.go
• handler/oauth2/flow_refresh_test.go
• handler/oauth2/flow_resource_owner.go
• handler/oauth2/flow_resource_owner_storage.go
• handler/oauth2/flow_resource_owner_test.go
• handler/oauth2/helper.go
• handler/oauth2/helper_test.go
• handler/oauth2/introspector.go
• handler/oauth2/introspector_jwt.go
• handler/oauth2/introspector_jwt_test.go
• handler/oauth2/introspector_test.go
• handler/oauth2/providers.go
• handler/oauth2/revocation.go
• handler/oauth2/revocation_storage.go
• handler/oauth2/revocation_test.go
• handler/oauth2/storage.go
• handler/oauth2/strategy.go
• handler/oauth2/strategy_hmacsha_plain.go
• handler/oauth2/strategy_hmacsha_prefixed.go
• handler/oauth2/strategy_hmacsha_test.go
• handler/oauth2/strategy_jwt.go
• handler/oauth2/strategy_jwt_session.go
• handler/oauth2/strategy_jwt_test.go
• handler/openid/errors.go
• handler/openid/flow_device_auth.go
• handler/openid/flow_device_auth_test.go
• handler/openid/flow_device_token.go
• handler/openid/flow_device_token_test.go
• handler/openid/flow_explicit_auth.go
• handler/openid/flow_explicit_auth_test.go
• handler/openid/flow_explicit_token.go
• handler/openid/flow_explicit_token_test.go
• handler/openid/flow_hybrid.go
• handler/openid/flow_hybrid_test.go
• handler/openid/flow_implicit.go
• handler/openid/flow_implicit_test.go
• handler/openid/flow_refresh_token.go
• handler/openid/flow_refresh_token_test.go
• handler/openid/helper.go
• handler/openid/helper_test.go
• handler/openid/storage.go
• handler/openid/strategy.go
• handler/openid/strategy_jwt.go
• handler/openid/strategy_jwt_test.go
• handler/openid/validator.go
• handler/openid/validator_test.go
• handler/par/flow_pushed_authorize.go
• handler/par/flow_pushed_authorize_test.go
• handler/pkce/handler.go
• handler/pkce/handler_test.go
• handler/pkce/storage.go
• handler/rfc7523/handler.go
• handler/rfc7523/handler_test.go
• handler/rfc7523/session.go
• handler/rfc7523/storage.go
• handler/rfc8628/auth_handler.go
• handler/rfc8628/auth_handler_test.go
• handler/rfc8628/storage.go
• handler/rfc8628/strategy.go
• handler/rfc8628/strategy_hmacsha.go
• handler/rfc8628/strategy_hmacsha_test.go
• handler/rfc8628/token_handler.go
• handler/rfc8628/token_handler_test.go
• handler/verifiable/handler.go
• handler/verifiable/handler_test.go
• handler/verifiable/nonce.go
• hash.go
• hash_bcrypt.go
• hash_bcrypt_test.go
• helper.go
• helper_test.go
• i18n/default_catalog.go
• i18n/i18n.go
• i18n/i18n_test.go
• i18n_helper.go
• i18n_helper_test.go
• integration/authorize_code_grant_public_client_pkce_test.go
• integration/authorize_code_grant_public_client_test.go
• integration/authorize_code_grant_test.go
• integration/authorize_device_grant_request_test.go
• integration/authorize_form_post_test.go
• integration/authorize_implicit_grant_test.go
• integration/authorize_jwt_bearer_required_iat_test.go
• integration/authorize_jwt_bearer_required_jti_test.go
• integration/authorize_jwt_bearer_test.go
• integration/authorize_response_mode_test.go
• integration/client_credentials_grant_test.go
• integration/clients/error.go
• integration/clients/introspect.go
• integration/clients/jwt_bearer.go
• integration/helper_endpoints_test.go
• integration/helper_setup_test.go
• integration/introspect_jwt_bearer_token_test.go
• integration/introspect_token_test.go
• integration/oidc_explicit_test.go
• integration/oidc_implicit_hybrid_public_client_pkce_test.go
• integration/oidc_implicit_hybrid_test.go
• integration/placeholder.go
• integration/pushed_authorize_code_grant_test.go
• integration/refresh_token_grant_test.go
• integration/resource_owner_password_credentials_grant_test.go
• integration/revoke_token_test.go
• internal/access_request.go
• internal/access_response.go
• internal/access_token_storage.go
• internal/access_token_strategy.go
• internal/authorize_code_storage.go
• internal/authorize_code_strategy.go
• internal/authorize_handler.go
• internal/authorize_request.go
• internal/authorize_response.go
• internal/client.go
• internal/device_code_rate_limit_strategy.go
• internal/hash.go
• internal/id_token_strategy.go
• internal/introspector.go
• internal/oauth2_auth_jwt_storage.go
• internal/oauth2_client_storage.go
• internal/oauth2_explicit_storage.go
• internal/oauth2_owner_storage.go
• internal/oauth2_refresh_storage.go
• internal/oauth2_revoke_storage.go
• internal/oauth2_storage.go
• internal/oauth2_strategy.go
• internal/openid_id_token_storage.go
• internal/pkce_storage_strategy.go
• internal/pushed_authorize_handler.go
• internal/refresh_token_strategy.go
• internal/request.go
• internal/revoke_handler.go
• internal/rfc8628_code_strategy.go
• internal/rfc8628_core_storage.go
• internal/rw.go
• internal/storage.go
• internal/test_helpers.go
• internal/token_handler.go
• internal/transactional.go
• introspect.go
• introspect_test.go
• introspection_request_handler.go
• introspection_request_handler_test.go
• introspection_response_writer.go
• introspection_response_writer_test.go
• oauth2.go
• pushed_authorize_request_handler.go
• pushed_authorize_request_handler_test.go
• pushed_authorize_response.go
• pushed_authorize_response_writer.go
• pushed_authorize_response_writer_test.go
• request.go
• request_test.go
• response_handler.go
• revoke_handler.go
• revoke_handler_test.go
• scope_strategy.go
• scope_strategy_test.go
• session.go
• session_test.go
• storage.go
• storage/memory.go
• storage/memory_test.go
• storage/transactional.go
• token/hmac/bytes.go
• token/hmac/bytes_test.go
• token/hmac/hmacsha.go
• token/hmac/hmacsha_test.go
• token/jwt/claims.go
• token/jwt/claims_id_token.go
• token/jwt/claims_id_token_test.go
• token/jwt/claims_jwt.go
• token/jwt/claims_jwt_test.go
• token/jwt/claims_test.go
• token/jwt/header.go
• token/jwt/header_test.go
• token/jwt/jwt.go
• token/jwt/jwt_test.go
• token/jwt/map_claims.go
• token/jwt/map_claims_test.go
• token/jwt/token.go
• token/jwt/token_test.go
• token/jwt/validation_error.go
• tools.go

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}