[Snyk] Fix for 3 vulnerabilities

[samawad]

Snyk has created this PR to fix 3 vulnerabilities in the rubygems dependencies of this project.

Snyk changed the following file(s):

• Gemfile

⚠️ Warning

Failed to update the Gemfile.lock, please update manually before merging.

---

This upgrade contains major version changes for rack and sinatra which introduce significant breaking changes. The rack upgrade modifies the core Rack SPEC, and the sinatra upgrade requires a test framework migration.

rack: 1.6.0 → 2.2.19 (high)
This major version upgrade introduces breaking changes to the Rack SPEC, which defines the interface between web servers and Ruby frameworks.

Highlights:

• Header Key Casing: Response header keys must now be lowercase. Code that sets or reads uppercase header keys will need to be updated. [8]
• Header Value Format: Headers with multiple values must be passed as an Array. Support for \n separated values in a single string is removed. [8]

Source: Rack project changelog
Recommendation: Audit all middleware and application code that directly interacts with response headers to ensure compliance with the new SPEC. Update tests to check for lowercase header keys.

sinatra: 1.3.2 → 2.0.0 (high)
This major version upgrade depends on Rack 2.0 and removes previously deprecated APIs. The most significant impact will be on the test suite.

Highlights:

• Test Framework Migration: The built-in sinatra/test library is removed. Tests must be migrated to use Rack::Test instead, which may require a substantial rewrite of the test suite. [16]
• API Removals: Deprecated methods from the 1.x series, such as set_option (use set) and mime (use mime_type), are removed. [16]

Source: Sinatra project documentation
Recommendation: Migrate the entire test suite from sinatra/test to Rack::Test before merging. Search the codebase for removed methods and update them to their modern equivalents.

Additional upgrades: unicorn 4.8.3 → 4.9.0 (low) contains no documented breaking changes. [1]

Notice 🤖: This content was generated using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.

---

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Allocation of Resources Without Limits or Throttling SNYK-RUBY-RACK-13378928	721
	Allocation of Resources Without Limits or Throttling SNYK-RUBY-RACK-13378930	721
	Allocation of Resources Without Limits or Throttling SNYK-RUBY-RACK-13378932	721

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Allocation of Resources Without Limits or Throttling