Update dependency sinatra to v2.2.3 (main) - autoclosed

[mend-for-github.aaakk.us.kg]

This PR contains the following updates:

Package	Update	Change
sinatra (source, changelog)	minor	2.1.0 -> 2.2.3

By merging this PR, the issue #7 will be automatically resolved and closed:

Severity	CVSS Score	CVE	Reachability
High	8.8	CVE-2022-45442
High	7.5	CVE-2022-29970

---

Release Notes

sinatra/sinatra (sinatra)

v2.2.3

Compare Source

• Fix: Escape filename in the Content-Disposition header. #​1841 by Kunpei Sakai

• Fix: fixed ReDoS for Rack::Protection::IPSpoofing. #​1823 by @​ooooooo-q

v2.2.2

Compare Source

• Update mustermann dependency to version 2.

v2.2.1

Compare Source

• Fix JRuby regression by using ruby2_keywords for delegation. #​1750 by Patrik Ragnarsson

• Add JRuby to CI. #​1755 by Karol Bucek

v2.2.0

Compare Source

• Breaking change: Add #select, #reject and #compact methods to Sinatra::IndifferentHash. If hash keys need to be converted to symbols, call #to_h to get a Hash instance first. #​1711 by Olivier Bellone

• Handle EOFError raised by Rack and return Bad Request 400 status. #​1743 by tamazon

• Minor refactors in base.rb. #​1640 by ceclinux

• Add escaping to the static 404 page. #​1645 by Chris Gavin

• Remove detect_rack_handler method. #​1652 by ceclinux

• Respect content type set in superclass before filter. Fixes #​1647 #​1649 by Jordan Owens

• Revert "Use prepend instead of include for helpers. #​1662 by namusyaka

• Fix usage of inherited Sinatra::Base classes keyword arguments. Fixes #​1669 #​1670 by Cadu Ribeiro

• Reduce RDoc generation time by not including every README. Fixes #​1578 #​1671 by Eloy Pérez

• Add support for per form csrf tokens. Fixes #​1616 #​1653 by Jordan Owens

• Update MAINTENANCE.md with the stable branch status. #​1681 by Fredrik Rubensson

• Validate expanded path matches public_dir when serving static files. #​1683 by cji-stripe

• Fix Delegator to pass keyword arguments for Ruby 3.0. #​1684 by andrewtblake

• Fix use with keyword arguments for Ruby 3.0. #​1701 by Robin Wallin

• Fix memory leaks for proc template. Fixes #​1704 #​1719 by Slevin

• Remove unnecessary test_files from the gemspec. #​1712 by Masataka Pocke Kuwabara

• Docs: Spanish documentation: Update README.es.md with removal of Thin. #​1630 by Espartaco Palma

• Docs: German documentation: Fixed typos in German README.md. #​1648 by Juri

• Docs: Japanese documentation: Update README.ja.md with removal of Thin. #​1629 by Ryuichi KAWAMATA

• Docs: English documentation: Various minor fixes to README.md. #​1663 by Yanis Zafirópulos

• Docs: English documentation: Document when dump_errors is enabled. Fixes #​1664 #​1665 by Patrik Ragnarsson

• Docs: Brazilian Portuguese documentation: Update README.pt-br.md with translation fixes. #​1668 by Vitor Oliveira

CI

• Use latest JRuby 9.2.16.0 on CI. #​1682 by Olle Jonsson

• Switch CI from travis to GitHub Actions. #​1691 by namusyaka

• Skip the Slack action if secrets.SLACK_WEBHOOK is not set. #​1705 by Robin Wallin

• Small CI improvements. #​1703 by Robin Wallin

• Drop auto-generated boilerplate comments from CI configuration file. #​1728 by Olle Jonsson

sinatra-contrib

• Do not raise when key is an enumerable. #​1619 by Ulysse Buonomo

Rack protection

• Fix broken origin_whitelist option. Fixes #​1641 #​1642 by Takeshi YASHIRO

---

• If you want to rebase/retry this PR, check this box

[mend-for-github.aaakk.us.kg]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: Gemfile.lock

/opt/containerbase/tools/bundler/2.1.4/3.4.1/gems/bundler-2.1.4/lib/bundler/vendor/thor/lib/thor/error.rb:105:in '<class:Thor>': uninitialized constant DidYouMean::SPELL_CHECKERS (NameError)

    DidYouMean::SPELL_CHECKERS.merge!(
              ^^^^^^^^^^^^^^^^
Did you mean?  DidYouMean::SpellChecker
	from /opt/containerbase/tools/bundler/2.1.4/3.4.1/gems/bundler-2.1.4/lib/bundler/vendor/thor/lib/thor/error.rb:1:in '<top (required)>'
	from /opt/containerbase/tools/bundler/2.1.4/3.4.1/gems/bundler-2.1.4/lib/bundler/vendor/thor/lib/thor/base.rb:3:in 'Kernel#require_relative'
	from /opt/containerbase/tools/bundler/2.1.4/3.4.1/gems/bundler-2.1.4/lib/bundler/vendor/thor/lib/thor/base.rb:3:in '<top (required)>'
	from /opt/containerbase/tools/bundler/2.1.4/3.4.1/gems/bundler-2.1.4/lib/bundler/vendor/thor/lib/thor.rb:2:in 'Kernel#require_relative'
	from /opt/containerbase/tools/bundler/2.1.4/3.4.1/gems/bundler-2.1.4/lib/bundler/vendor/thor/lib/thor.rb:2:in '<top (required)>'
	from /opt/containerbase/tools/bundler/2.1.4/3.4.1/gems/bundler-2.1.4/lib/bundler/vendored_thor.rb:8:in 'Kernel#require_relative'
	from /opt/containerbase/tools/bundler/2.1.4/3.4.1/gems/bundler-2.1.4/lib/bundler/vendored_thor.rb:8:in '<top (required)>'
	from /opt/containerbase/tools/bundler/2.1.4/3.4.1/gems/bundler-2.1.4/lib/bundler/friendly_errors.rb:3:in 'Kernel#require_relative'
	from /opt/containerbase/tools/bundler/2.1.4/3.4.1/gems/bundler-2.1.4/lib/bundler/friendly_errors.rb:3:in '<top (required)>'
	from /opt/containerbase/tools/bundler/2.1.4/3.4.1/gems/bundler-2.1.4/exe/bundle:29:in 'Kernel#require_relative'
	from /opt/containerbase/tools/bundler/2.1.4/3.4.1/gems/bundler-2.1.4/exe/bundle:29:in '<top (required)>'
	from /opt/containerbase/tools/bundler/2.1.4/3.4.1/gems/bundler-2.1.4/exe/bundler:4:in 'Kernel#load'
	from /opt/containerbase/tools/bundler/2.1.4/3.4.1/gems/bundler-2.1.4/exe/bundler:4:in '<top (required)>'
	from /opt/containerbase/tools/bundler/2.1.4/3.4.1/bin/bundler:25:in 'Kernel#load'
	from /opt/containerbase/tools/bundler/2.1.4/3.4.1/bin/bundler:25:in '<main>'