[Snyk] Fix for 3 vulnerabilities

[samawad]

Snyk has created this PR to fix 3 vulnerabilities in the rubygems dependencies of this project.

Snyk changed the following file(s):

• Gemfile

⚠️ Warning

Failed to update the Gemfile.lock, please update manually before merging.

---

The upgrade of rails from 3.0.9 to 5.0.0 is a major undertaking with significant breaking changes across two major versions. The upgrade for rspec-rails from 2.12.2 to 2.13.0 is low-risk.

Highlights for rails@3.0.9 → rails@5.0.0:

• Strong Parameters: attr_accessible and attr_protected are removed in Rails 4 and must be replaced with the strong parameters pattern in controllers.
• Active Record/Model Changes: In Rails 5, models must inherit from ApplicationRecord instead of ActiveRecord::Base. Additionally, returning false in a callback no longer halts the callback chain; throw(:abort) must be used instead.

Source: Official Rails documentation and community guides.
Recommendation: A staged upgrade (e.g., 3.x → 4.0 → 4.2 → 5.0) is highly recommended to manage the changes incrementally. Ensure extensive test coverage before beginning.

Additional upgrades: rspec-rails 2.12.2 → 2.13.0 (low risk), contains minor enhancements and bug fixes with no documented breaking changes.

Notice 🤖: This content was generated using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.

---

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Allocation of Resources Without Limits or Throttling SNYK-RUBY-RACK-13378928	721
	Allocation of Resources Without Limits or Throttling SNYK-RUBY-RACK-13378930	721
	Allocation of Resources Without Limits or Throttling SNYK-RUBY-RACK-13378932	721

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Allocation of Resources Without Limits or Throttling