chore(deps): bump addressable from 2.8.7 to 2.9.0 in /performance-tests

[dependabot]

Bumps addressable from 2.8.7 to 2.9.0.

Changelog

Sourced from addressable's changelog.

Addressable 2.9.0

• fixes ReDoS vulnerability in Addressable::Template#match (fixes incomplete remediation in 2.8.10)

Addressable 2.8.10

• fixes ReDoS vulnerability in Addressable::Template#match

Addressable 2.8.9

• Reduce gem size by excluding test files (#569)
• No need for bundler as development dependency (#571, 5fc1d93)
• idna/pure: stop building the useless COMPOSITION_TABLE (removes the Addressable::IDNA::COMPOSITION_TABLE constant) (#564)

#569: sporkmonger/addressable#569 #571: sporkmonger/addressable#571 #564: sporkmonger/addressable#564

Addressable 2.8.8

• Replace the unicode.data blob by a ruby constant (#561)
• Allow public_suffix 7 (#558)

#561: sporkmonger/addressable#561 #558: sporkmonger/addressable#558

Commits

• 0c3e858 Revving version and changelog
• 91915c1 Fixing additional vulnerable paths
• a091e39 Add many more adversarial test cases to ensure we don't have any ReDoS regres...
• 463a819 Regenerate gemspec on newer rubygems
• 0afcb0b Improve from O(n^2) to O(n)
• c87f768 Fix a ReDoS vulnerability in URI template matching
• 0d7e9b2 Fix links for 2.8.9 in CHANGELOG (#573)
• e209120 Update version, gemspec, and CHANGELOG for 2.8.9 (#572)
• 3875874 Reduce gem size by excluding test files (#569)
• 3e57cc6 CI: back to windows-2022 for MRI job
• Additional commits viewable in compare view

[github-actions]

Semver Impact of This PR

⚪ None (no version bump detected)

📋 Changelog Preview

This is how your changes will appear in the changelog.
Entries from this PR are highlighted with a left border (blockquote style).

---

• chore(deps): bump addressable from 2.8.7 to 2.9.0 in /performance-tests by dependabot[bot] in #5969

• chore(deps): bump basic-ftp from 5.2.0 to 5.2.2 by dependabot in #5977
• fix(profiling): Fix app start transaction profile timestamp offset by antonis in #5962
• fix(android): Use componentStack as fallback for missing error stack traces by antonis in #5965
• chore(deps): bump addressable from 2.8.7 to 2.9.0 in /samples/react-native-macos by dependabot in #5967
• chore(deps): bump addressable from 2.8.7 to 2.9.0 in /samples/react-native by dependabot in #5966
• fix(ios): Add SENTRY_PROJECT_ROOT env var for monorepo support by antonis in #5961
• feat(ios): Add attachAllThreads option by antonis in #5960
• fix(core): Lazy-load Metro internal modules to prevent Expo 55 import errors by lucas-zimerman in #5958
• chore(deps): update Cocoa SDK to v9.9.0 by github-actions in #5956
• chore(deps): update Maestro to v2.4.0 by github-actions in #5955
• Feat: Fallback to stacktrace parsing by lucas-zimerman in #5946
• fix(ci): Bump Node to 22 in size-analysis and testflight workflows by antonis in #5954
• feat(playground): Open Sentry in desktop browser from Expo apps by antonis in #5947
• chore(core): Bump sample app to React Native 0.84.1 by antonis in #5941
• Size analysis for React Native SDK by alwx in #5949
• chore(deps): bump lodash from 4.17.23 to 4.18.1 by dependabot in #5953
• chore(deps): bump yauzl to ^3.2.1 by antonis in #5950
• chore(deps): bump brace-expansion to ^2.0.3 by antonis in #5951
• chore(deps): bump @xmldom/xmldom to fix XML injection by antonis in #5952

---

_{🤖 This preview updates automatically when you update the PR.}

[antonis]

@dependabot rebase