From 5bfafac14935d010fe7b67713f558d28c17198ab Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Fri, 17 Oct 2025 10:23:28 +0000
Subject: [PATCH] fix: Gemfile & Gemfile.lock to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-RUBY-RACK-13535097
- https://snyk.io/vuln/SNYK-RUBY-RACK-13524628
- https://snyk.io/vuln/SNYK-RUBY-SINATRA-13535098
---
 Gemfile      |  2 +-
 Gemfile.lock | 33 +++++++++++++++++++++------------
 2 files changed, 22 insertions(+), 13 deletions(-)

diff --git a/Gemfile b/Gemfile
index 0ba3302..e3991cd 100644
--- a/Gemfile
+++ b/Gemfile
@@ -2,7 +2,7 @@
 source "https://rubygems.org"
 
 gem 'git', '~> 1.3'
-gem 'sinatra', '~> 2.0', '>= 2.0.4'
+gem 'sinatra', '~> 4.2', '>= 4.2.0'
 gem 'minitest', '~> 5.11', '>= 5.11.3'
 gem 'multi_json', '~> 1.13', '>= 1.13.1'
 gem 'mail', '~> 2.7'
diff --git a/Gemfile.lock b/Gemfile.lock
index eff6f10..38cd0c4 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -1,32 +1,41 @@
 GEM
   remote: https://rubygems.org/
   specs:
+    base64 (0.3.0)
     git (1.4.0)
     gitlab (4.4.0)
       httparty (>= 0.14.0)
       terminal-table (>= 1.5.1)
     httparty (0.16.2)
       multi_xml (>= 0.5.2)
+    logger (1.7.0)
     mail (2.7.0)
       mini_mime (>= 0.1.1)
     mini_mime (1.0.0)
     minitest (5.11.3)
     multi_json (1.13.1)
     multi_xml (0.6.0)
-    mustermann (1.1.1)
+    mustermann (3.0.4)
       ruby2_keywords (~> 0.0.1)
-    rack (2.2.3)
-    rack-protection (2.0.8.1)
-      rack
-    ruby2_keywords (0.0.2)
-    sinatra (2.0.8.1)
-      mustermann (~> 1.0)
-      rack (~> 2.0)
-      rack-protection (= 2.0.8.1)
+    rack (3.2.3)
+    rack-protection (4.2.1)
+      base64 (>= 0.1.0)
+      logger (>= 1.6.0)
+      rack (>= 3.0.0, < 4)
+    rack-session (2.1.1)
+      base64 (>= 0.1.0)
+      rack (>= 3.0.0)
+    ruby2_keywords (0.0.5)
+    sinatra (4.2.1)
+      logger (>= 1.6.0)
+      mustermann (~> 3.0)
+      rack (>= 3.0.0, < 4)
+      rack-protection (= 4.2.1)
+      rack-session (>= 2.0.0, < 3)
       tilt (~> 2.0)
     terminal-table (1.8.0)
       unicode-display_width (~> 1.1, >= 1.1.1)
-    tilt (2.0.10)
+    tilt (2.6.1)
     unicode-display_width (1.4.0)
 
 PLATFORMS
@@ -38,7 +47,7 @@ DEPENDENCIES
   mail (~> 2.7)
   minitest (~> 5.11, >= 5.11.3)
   multi_json (~> 1.13, >= 1.13.1)
-  sinatra (~> 2.0, >= 2.0.4)
+  sinatra (~> 4.2, >= 4.2.0)
 
 BUNDLED WITH
-   1.17.3
+   2.3.27