Update dependency rack to v3#475
Merged
renovate[bot] merged 1 commit intomasterfrom Apr 8, 2025
Merged
Conversation
![renovate-approve-2[bot]](https://avatars.githubusercontent.com/in/62175?s=60&v=4){kind=small}
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
'~> 2.2'->'~> 3.0'Release Notes
rack/rack (rack)
v3.1.12Compare Source
Security
Rack::Static.v3.1.11Compare Source
Security
Rack::Sendfile.v3.1.10Compare Source
Security
Rack::CommonLogger.v3.1.9Compare Source
Fixed
Rack::MediaType#paramsnow handles parameters without values. (#2263, @AllyMarthaJ)v3.1.8Compare Source
Fixed
DEFAULT_PARSER. (#2249, [@earlopain])v3.1.7Compare Source
Fixed
Rack::Responseshould not generate invalidcontent-lengthheader. (#2219, [@ioquatix])v3.1.6Compare Source
Fixed
Rack::Request#parse_http_accept_header's implementation. (#2226, [@ioquatix])v3.1.5Compare Source
Security
Rack::Request#parse_http_accept_header. (GHSA-cj83-2ww7-mvq7, @dwisiswant0)v3.1.4Compare Source
Fixed
Rack::Lintmatching some paths incorrectly as authority form. (#2220, [@ioquatix])v3.1.3Compare Source
Fixed
Rack::Utils.escape_html. (#2202, [@earlopain])Rack::MockResponsegracefully handles empty cookies (#2203 [@wynksaiddestroy])v3.1.2Compare Source
Rack::Responsewill take in to consideration chunked encoding responses (#2204, [@tenderlove])v3.1.1Compare Source
Security
Rack::Static.v3.1.0Compare Source
Rack v3.1 is primarily a maintenance release that removes features deprecated in Rack v3.0. Alongside these removals, there are several improvements to the Rack SPEC, mainly focused on enhancing input and output handling. These changes aim to make Rack more efficient and align better with the requirements of server implementations and relevant HTTP specifications.
SPEC Changes
rack.inputis now optional. (#1997, #2018, [@ioquatix])PATH_INFOis now validated according to the HTTP/1.1 specification. (#2117, #2181, [@ioquatix])OPTIONS *is now accepted. (#2114, @doriantaylor)rack.protocolrequest and response header for handling connection upgrades. (#1954, [@ioquatix])Added
Rack::Multipart::MissingInputErrorfor improved handling of missing input in#parse_multipart. (#2018, [@ioquatix])module Rack::BadRequestwhich is included in multipart and query parser errors. (#2019, [@ioquatix]).mjsMIME type (#2057, @axilleas)set_cookie_headerutility now supports thepartitionedcookie attribute. This is required by Chrome in some embedded contexts. (#2131, @flavio-b)rack.early_hintsfor sending103 Early Hintsinformational responses. (#1831, @casperisfine, [@jeremyevans])Changed
.js) changed fromapplication/javascripttotext/javascript(1bd0f15, [@ioquatix]).ttf,.woff,.woff2and.otfextensions to use mondernfont/*types. (#2065, [@davidstosik])Rack::Utils.escape_htmlis now delegated toCGI.escapeHTML.'is escaped to#​39;instead of#x27;. (decimal vs hexadecimal) (#2099, @JunichiIto)@bufferedand only updatecontent-lengthwhenRack::Response#finishis invoked. (#2149, [@ioquatix])Deprecated
Request#{GET,POST}(#2073, [@jeremyevans])Rack::Loggeris deprecated. (#2197, [@ioquatix])Rack::Request#values_at, userequest.params.values_atinstead (#2183, [@ioquatix])Removed
Rack::Auth::Digestwith no replacement. (#1966, [@ioquatix])Rack::Cascade::NotFoundwith no replacement. (#1966, [@ioquatix])Rack::Chunkedwith no replacement. (#1966, [@ioquatix])Rack::File, useRack::Filesinstead. (#1966, [@ioquatix])Rack::QueryParserkey_space_limitparameter with no replacement. (#1966, [@ioquatix])Rack::Response#header, useRack::Response#headersinstead. (#1966, [@ioquatix])Rack::Utils:add_cookie_to_header,make_delete_cookie_header,add_remove_cookie_to_header. (#1966, [@ioquatix])Rack::Utils::HeaderHash. (#1966, [@ioquatix])Rack::VERSION,Rack::VERSION_STRING,Rack.version, useRack.releaseinstead. (#1966, [@ioquatix])transfer-encoding: chunked. (#2195, [@ioquatix])Rack::Request#[], userequest.params[key]instead (#2183, [@ioquatix])Fixed
Rack::Files, ignore theRangeheader if served file is 0 bytes. (#2159, [@zarqman])v3.0.14Compare Source
Security
Rack::Static.v3.0.13Compare Source
Security
Rack::Sendfile.v3.0.12Security
Rack::CommonLogger.v3.0.11BodyProxyto respond toto_str, maketo_arycall close . (#2062, @jeremyevans)v3.0.10Compare Source
v3.0.9.1Compare Source
Security
v3.0.9Compare Source
Security
v3.0.8Compare Source
v3.0.7Compare Source
=havenilvalues. (#2059, [@jeremyevans])v3.0.6.1Compare Source
Security
v3.0.6Compare Source
Security
v3.0.5Compare Source
v3.0.4.2Compare Source
Security
v3.0.4.1Compare Source
Security
v3.0.4Compare Source
Security
v3.0.3Compare Source
Fixed
Rack::URLMapuses non-deprecated form ofRegexp.new. (#1998, @weizheheng)v3.0.2Compare Source
Fixed
Utils.build_nested_queryURL-encodes nested field names including the square brackets.Rack::Responseto pass through streaming bodies. (#1993, [@ioquatix])v3.0.1Compare Source
Security
Rack::Static.v3.0.0Compare Source
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.