[Snyk] Security upgrade rack from 1.6.4 to 2.2.18

[ryanmcmorrowsnyk]

Snyk has created this PR to fix 1 vulnerabilities in the rubygems dependencies of this project.

Snyk changed the following file(s):

• Gemfile
• Gemfile.lock

---

This major version upgrade from Rack 1.x to 2.x introduces significant breaking changes to the core Rack specification and APIs.

Highlights:

• SPEC Changes: The response status must now be an Integer, and response header keys cannot contain uppercase characters. Header values with newlines (\n) are no longer supported. [1]
• API Removals: Several antiquated server handlers (FCGI, Thin, SCGI) have been removed. The rack.hijack_io and Rack::HTTP_VERSION APIs have also been removed. [1]
• Behavior Change: Query parameters without a value (e.g., ?foo) are now parsed as an empty string ("") instead of nil. [1]

Source: Rack CHANGELOG
Recommendation: These changes can break applications and middleware. Thorough testing is required to ensure compatibility with the new specification before merging.

Notice 🤖: This content was generated using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.

---

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Allocation of Resources Without Limits or Throttling SNYK-RUBY-RACK-13052974	149

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Allocation of Resources Without Limits or Throttling