CHANGELOG.md in devise_invitable-2.0.8 vs CHANGELOG.md in devise_invitable-2.0.9

@@ -1,4 +1,7 @@
+## 2.0.9
+- Do not accept expired invitation on password reset ([#897](https://github.com/scambra/devise_invitable/pull/897))
+
 ## 2.0.8
 - Fix for turbo stream
 
 ## 2.0.7
 - Allow customizing invalid_token_path_for, the path to redirect users who try to accept with invalid token