Bump sinatra, slim, sinatra-contrib and rack-test

[dependabot[bot]]

Bumps sinatra, slim, sinatra-contrib and rack-test. These dependencies needed to be updated together. Updates sinatra from 2.1.0 to 4.0.0

Changelog

Sourced from sinatra's changelog.

4.0.0. / 2024-01-19

• New: Add support for Rack 3 (#1857)

  • Note: you may want to read the [Rack 3 Upgrade Guide]

• Require Ruby 2.7.8 as minimum Ruby version (#1993)

• Breaking change: Drop support for Rack 2 (#1857)

  • Note: when using Sinatra to start the web server, you now need the rackup gem installed

• Breaking change: Remove the IndifferentHash initializer (#1982)

• Breaking change: Disable session_hijacking protection by default (#1984)

• Breaking change: Remove Rack::Protection::EncryptedCookie (#1989)

  • Note: cookies are still encrypted (by [Rack::Session::Cookie])

#1857: sinatra/sinatra#1857 #1993: sinatra/sinatra#1993 #1982: sinatra/sinatra#1982 #1984: sinatra/sinatra#1984 #1989: sinatra/sinatra#1989 [Rack::Session::Cookie]: https://github.com/rack/rack-session [Rack 3 Upgrade Guide]: https://github.com/rack/rack/blob/main/UPGRADE-GUIDE.md

3.2.0 / 2023-12-29

• New: Add #except method to Sinatra::IndifferentHash (#1940)

• New: Use Exception#detailed_message to show backtrace (#1952)

• New: Add Sinatra::HamlHelpers to sinatra-contrib (#1960)

• Fix: Add base64 to rack-protection runtime dependencies (#1946)

• Fix: Avoid open-ended dependencies for sinatra-contrib and rack-protection (#1949)

• Fix: Helpful message when Sinatra::Runner times out (#1975)

• Fix: Ruby 3.3 + Bundler 2.5 compatibility (#1975)

#1940: sinatra/sinatra#1940 #1946: sinatra/sinatra#1946 #1949: sinatra/sinatra#1949 #1952: sinatra/sinatra#1952 #1960: sinatra/sinatra#1960 #1975: sinatra/sinatra#1975

3.1.0 / 2023-08-07

... (truncated)

Commits

• b626e2d 4.0.0 release (#1996)
• e56f657 Require Ruby 2.7.8 as minimum Ruby version (#1993)
• 9993829 CI: remove rack monkey patches
• 09f1c2b CI: rdiscount 2.2.7.3 resolved the TruffleRuby issue
• c43e097 CI: use the released version of childprocess
• 739eaa0 CI: no need to set RUBY_ENGINE
• d872057 CI: no need to set Encoding.default_external
• 9c14764 Remove Rack::Protection::EncryptedCookie (#1989)
• 667056c CI: allow ruby-head to fail
• 393bb7c Avoid using deprecated Rack::Response#header
• Additional commits viewable in compare view

Updates slim from 4.1.0 to 5.2.1

Release notes

Sourced from slim's releases.

v5.2.1

• Support Ruby 3.3
• Update Gem metadata

v5.2.0

• Fix logic less bug - #783
• Support Rails 7.1 - #936
• Fix splat arguments on Rails 7.1 - #942

v5.1.1

• Support lambda functions as shortcuts - #677 #813 #903
• Support --enable-frozen-string-literal - #851

v5.1.0

Version 5.1.0

v5.0.0

No release notes provided.

Changelog

Sourced from slim's changelog.

5.2.1 (2024-01-20)

• Support Ruby 3.3
• Update Gem metadata

5.2.0 (2023-11-11)

• Fix logic less bug - #783
• Support Rails 7.1 - #936
• Fix splat arguments on Rails 7.1 - #942

5.1.1 (2023-05-16)

• Support lambda functions as shortcuts - #677 #813 #903
• Support --enable-frozen-string-literal - #851

5.1.0 (2023-03-06)

• Allow whitespace markers for verbatim text: |<, |>, and |<> - #912
• Do not swallow single quote after output line indicator - #911
• Support Tilt 2.1.0 - #910
• Fix Railtie load error - #904
• Fix attribute parsing with square brackets - #796

5.0.0 (2023-01-23)

• Fix markdown interpolation #773
• Support case/in #884
• Extract slim/railtie #850
• css: doesn't add type='text/css' anymore #828
• Remove deprecated whitespace syntax =' etc
• Add support for annotate_rendered_view_with_filenames #867, #878, #901
• Remove deprecated syntax
• Add option to hyphenate underscore attributes - #852
• Update CI/CD testing and dependencies

Commits

• 31e07e4 Version 5.2.1
• 201006f CI: Test Rails 7 on Ruby 3.3
• 778d3da Fix and update CI
• 219ed83 CI: Test on Ruby 3.3
• 4bc7e51 slim.gemspec: Add metadata
• 98d7561 CI: Use bundle update
• 48bee03 CI: Add Sinatra 3.2.0
• 63b0413 CI: Split Rails test matrix
• 5beab82 CI: Add names to Sinatra runs
• 218c86b Enable CI for branches
• Additional commits viewable in compare view

Updates sinatra-contrib from 2.1.0 to 4.0.0

Changelog

Sourced from sinatra-contrib's changelog.

4.0.0. / 2024-01-19

• New: Add support for Rack 3 (#1857)

  • Note: you may want to read the [Rack 3 Upgrade Guide]

• Require Ruby 2.7.8 as minimum Ruby version (#1993)

• Breaking change: Drop support for Rack 2 (#1857)

  • Note: when using Sinatra to start the web server, you now need the rackup gem installed

• Breaking change: Remove the IndifferentHash initializer (#1982)

• Breaking change: Disable session_hijacking protection by default (#1984)

• Breaking change: Remove Rack::Protection::EncryptedCookie (#1989)

  • Note: cookies are still encrypted (by [Rack::Session::Cookie])

#1857: sinatra/sinatra#1857 #1993: sinatra/sinatra#1993 #1982: sinatra/sinatra#1982 #1984: sinatra/sinatra#1984 #1989: sinatra/sinatra#1989 [Rack::Session::Cookie]: https://github.com/rack/rack-session [Rack 3 Upgrade Guide]: https://github.com/rack/rack/blob/main/UPGRADE-GUIDE.md

3.2.0 / 2023-12-29

• New: Add #except method to Sinatra::IndifferentHash (#1940)

• New: Use Exception#detailed_message to show backtrace (#1952)

• New: Add Sinatra::HamlHelpers to sinatra-contrib (#1960)

• Fix: Add base64 to rack-protection runtime dependencies (#1946)

• Fix: Avoid open-ended dependencies for sinatra-contrib and rack-protection (#1949)

• Fix: Helpful message when Sinatra::Runner times out (#1975)

• Fix: Ruby 3.3 + Bundler 2.5 compatibility (#1975)

#1940: sinatra/sinatra#1940 #1946: sinatra/sinatra#1946 #1949: sinatra/sinatra#1949 #1952: sinatra/sinatra#1952 #1960: sinatra/sinatra#1960 #1975: sinatra/sinatra#1975

3.1.0 / 2023-08-07

... (truncated)

Commits

• b626e2d 4.0.0 release (#1996)
• e56f657 Require Ruby 2.7.8 as minimum Ruby version (#1993)
• 8a17d4b Add support for Rack 3, drop support for Rack 2 (#1857)
• 4e8fdb5 3.2.0 release (#1977)
• 3b75657 Revert "Shorter Sinatra::Runner timeout" (#1976)
• ca6b71c Helpful message when Sinatra::Runner times out
• 0e43702 Shorter Sinatra::Runner timeout
• 11119a8 CI: use latest rack-test release, not trunk (#1969)
• 58f65b0 Add Sinatra::HamlHelpers to sinatra-contrib (#1960)
• f044fe9 Remove open-ended dependencies in gemspecs
• Additional commits viewable in compare view

Updates rack-test from 1.1.0 to 2.1.0

Changelog

Sourced from rack-test's changelog.

2.1.0 / 2023-03-14

• Breaking changes:

  • Digest authentication support, deprecated in 2.0.0, has been removed (Jeremy Evans #307)
  • requiring rack/mock_session, deprecated in 2.0.0, has been removed (Jeremy Evans #307)

• Minor enhancements:

  • The original_filename for Rack::Test::UploadedFile can now be set even if the content of the file comes from a file path (Stuart Chinery #314)
  • Add Rack::Test::Session#restore_state, for executing a block and restoring current state (last request, last response, and cookies) after the block (Jeremy Evans #316)
  • Make Rack::Test::Methods support default_host method similar to app, which will set the default host used for requests to the app (Jeremy Evans #317 #318)
  • Allow responses to set cookie paths not matching the current request URI. Such cookies will only be sent for paths matching the cookie path (Chris Waters #322)
  • Ignore leading dot for cookie domains, per RFC 6265 (Stephen Crosby #329)
  • Avoid creating empty multipart body if params is empty in Rack::Test::Session#env_for (Ryunosuke Sato #331)

2.0.2 / 2022-06-28

• Bug fixes:
  • Fix additional incompatible character encodings error when building uploaded bodies (Jeremy Evans #311)

2.0.1 / 2022-06-27

• Bug fixes:
  • Fix incompatible character encodings error when building uploaded file bodies (Jeremy Evans #308 #309)

2.0.0 / 2022-06-24

• Breaking changes:
  • Digest authentication support is now deprecated, as it relies on digest authentication support in rack, which has been deprecated (Jeremy Evans #294)
  • Rack::Test::Utils.build_primitive_part no longer handles array values (Jeremy Evans #292)
  • Rack::Test::Utils module methods other than build_nested_query and build_multipart are now private methods (Jeremy Evans #297)
  • Rack::MockSession has been combined into Rack::Test::Session, and remains as an alias to Rack::Test::Session, but to keep some

... (truncated)

Commits

• 867a6f1 Release 2.1.0
• 44e8be4 Update History.md
• 5a2a3bf Don't raise error with empty params and multipart header
• febbea4 Update CHANGELOG
• 79c5077 Fix tests when rack master branch is used
• 70f4db2 Ignore leading dot when merging cookies
• 73c7174 Bump cgi version in Ruby 3.1 CI test
• 8fb4fb2 Add CI for Ruby 3.2
• 10e7040 Test JRuby 9.4 in CI
• 2036831 change order of arguments for assert_equal example in README
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the Security Alerts page.