[Snyk] Fix for 1 vulnerabilities

[samawad]

Snyk has created this PR to fix 1 vulnerabilities in the rubygems dependencies of this project.

Snyk changed the following file(s):

• Gemfile

⚠️ Warning

Failed to update the Gemfile.lock, please update manually before merging.

---

This upgrade's primary risk is the major version bump of Sinatra from 1.3.1 to 2.0.0, which introduces significant breaking changes. The other upgrades are minor or patch versions and present a low risk.

Top Impact Upgrade:

• sinatra 1.3.1 → 2.0.0 (high): This major version introduces breaking changes requiring dependency and code updates.

Highlights:

• Ruby & Rack Versions: Support for Ruby versions below 2.2 has been dropped. Support for Rack 1.x is also removed in favor of Rack 2.0. [16]
• Routing Engine: The internal routing engine has been replaced with the Mustermann gem, which could affect complex route pattern matching. [16]

Source: Sinatra 2.0 Release Announcement. [16]
Recommendation: Verify compatibility with Ruby 2.2+ and upgrade to Rack 2.x. Test application routes thoroughly before merging.

Other Upgrades:

• thin 1.3.1 → 1.4.0 (low): No breaking changes were cited in official sources for this minor update.
• rack-test 0.6.1 → 0.6.2 (low): This is a patch release with no documented breaking changes. [1, 12]
• omniauth-google-apps 0.0.1 → 0.0.2 (low): This is a patch release with no documented breaking changes.

Notice 🤖: This content was generated using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.
Was this summary helpful 👍? Not helpful 👎?

---

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Information Exposure SNYK-RUBY-RACK-13524628	631

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.