Bump rack, rails, mongoid, inherited_resources, nested_form and state_machines-mongoid

[dependabot]

Bumps rack, rails, mongoid, inherited_resources, nested_form and state_machines-mongoid. These dependencies needed to be updated together.
Updates rack from 2.2.8 to 3.0.8

Release notes

Sourced from rack's releases.

v3.0.8

What's Changed

• Backport "Fix some unused variable verbose warnings" by @​skipkayhil in rack/rack#2084

New Contributors

• @​skipkayhil made their first contribution in rack/rack#2084

Full Changelog: rack/rack@v3.0.7...v3.0.8

v3.0.7

What's Changed

• Backport "Make query parameters without = have nil values". by @​jeremyevans in rack/rack#2060

Full Changelog: rack/rack@v3.0.6.1...v3.0.7

v3.0.6.1

No release notes provided.

v3.0.4.1

Full Changelog: rack/rack@v3.0.4...v3.0.4.1

v3.0.4

Full Changelog: rack/rack@v3.0.3...v3.0.4

v3.0.3

What's Changed

• Release v3.0.3 by @​ioquatix in rack/rack#2000

Full Changelog: rack/rack@v3.0.2...v3.0.3

v3.0.2

Full Changelog: rack/rack@v3.0.1...v3.0.2

Changelog

Sourced from rack's changelog.

[3.0.8] - 2023-06-14

• Fix some unused variable verbose warnings. (#2084, [@​jeremyevans], @​skipkayhil)

[3.0.7] - 2023-03-16

• Make query parameters without = have nil values. (#2059, [@​jeremyevans])

[3.0.6.1] - 2023-03-13

• [CVE-2023-27539] Avoid ReDoS in header parsing

[3.0.6] - 2023-03-13

• Add QueryParser#missing_value for handling missing values + tests. (#2052, [@​ioquatix])

[3.0.5] - 2023-03-13

• Split form/query parsing into two steps. (#2038, @​matthewd)

[3.0.4.2] - 2023-03-02

• [CVE-2023-27530] Introduce multipart_total_part_limit to limit total parts

[3.0.4.1] - 2023-01-17

• [CVE-2022-44571] Fix ReDoS vulnerability in multipart parser
• [CVE-2022-44570] Fix ReDoS in Rack::Utils.get_byte_ranges
• [CVE-2022-44572] Forbid control characters in attributes (also ReDoS)

[3.0.4] - 2023-01-17

• Rack::Request#POST should consistently raise errors. Cache errors that occur when invoking Rack::Request#POST so they can be raised again later. (#2010, [@​ioquatix])
• Fix Rack::Lint error message for HTTP_CONTENT_TYPE and HTTP_CONTENT_LENGTH. (#2007, @​byroot)
• Extend Rack::MethodOverride to handle QueryParser::ParamsTooDeepError error. (#2006, @​byroot)

[3.0.3] - 2022-12-27

Fixed

• Rack::URLMap uses non-deprecated form of Regexp.new. (#1998, @​weizheheng)

[3.0.2] -2022-12-05

Fixed

• Utils.build_nested_query URL-encodes nested field names including the square brackets.
• Allow Rack::Response to pass through streaming bodies. (#1993, [@​ioquatix])

[3.0.1] - 2022-11-18

... (truncated)

Commits

• d28c464 Bump patch verison.
• 32736d2 Fix some unused variable verbose warnings (#2084)
• 2429b7b Bump patch version.
• 94dd78b Update changelog.
• d38b456 Make query parameters without = have nil values (#2059) (#2060)
• 51e7a0f Merge branch '3-0-sec' into 3-0-stable
• 098d8e1 bump version
• 231ef36 Avoid ReDoS problem
• 54a9ed2 Update changelog.
• e9e9ae6 Bump patch version.
• Additional commits viewable in compare view

Updates rails from 7.0.8 to 7.1.0

Release notes

Sourced from rails's releases.

7.1.0

Active Support

• Fix AS::MessagePack with ENV["RAILS_MAX_THREADS"].

  Jonathan Hefner

• Add a new public API for broadcasting logs

  This feature existed for a while but was until now a private API. Broadcasting log allows to send log message to difference sinks (STDOUT, a file ...) and is used by default in the development environment to write logs both on STDOUT and in the "development.log" file.

  Basic usage:

  stdout_logger = Logger.new(STDOUT)
  file_logger = Logger.new("development.log")
  broadcast = ActiveSupport::BroadcastLogger.new(stdout_logger, file_logger)
  broadcast.info("Hello!") # The "Hello!" message is written on STDOUT and in the log file.

  Adding other sink(s) to the broadcast:

  broadcast = ActiveSupport::BroadcastLogger.new
  broadcast.broadcast_to(Logger.new(STDERR))

  Remove a sink from the broadcast:

  stdout_logger = Logger.new(STDOUT)
  broadcast = ActiveSupport::BroadcastLogger.new(stdout_logger)
  broadcast.stop_broadcasting_to(stdout_logger)

  Edouard Chin

• Fix Range#overlap? not taking empty ranges into account on Ruby < 3.3

  Nobuyoshi Nakada, Shouichi Kamiya, Hartley McGuire

• Use Ruby 3.3 Range#overlap? if available

  Yasuo Honda

... (truncated)

Commits

• d39db5d Preparing for 7.1.0 release
• 4cc7947 Merge pull request #49491 from tnir/tn-date-rails71
• d206e8c Release notes are not in work in progress anymore
• 60393bb Merge pull request #49493 from skipkayhil/hm-no-backticks
• 9826678 Add corrected release month for Rails 7.1
• 525b09c Add release month for Rails 7.1
• b6842b2 Merge pull request #49391 from ipc103/transaction-tracking-on-reconnect
• 311f639 Merge pull request #49487 from yawboakye/clarify-login-procedure-expectation
• f05e283 Merge pull request #49484 from hachi8833/fix_heading_migration_guide
• 4280a03 Merge pull request #49480 from hachi8833/add_doc_db_prepare
• Additional commits viewable in compare view

Updates mongoid from 8.1.2 to 1.0.6

Commits

• 344c61e Regenerated gemspec for version 1.0.6
• 159b0f7 Version bump to 1.0.6
• e0edf3a Updating integer sets to allow blank and nil
• b1fcff0 Allow setting of blank values in attributes - validation should be used to pr...
• a8e5ce4 Better inspect formatting for embedded documents
• 3ff3bd0 Moving identity and typing into its own module
• ea688aa Regenerated gemspec for version 1.0.5
• 18f052e Version bump to 1.0.5
• d8027e8 Has one sets parent before attributes
• 419fc69 Has many associations now set parent first before attributes
• Additional commits viewable in compare view

Updates inherited_resources from 1.13.1 to 1.0.2

Changelog

Sourced from inherited_resources's changelog.

Changelog

Master (unreleased)

Commits

• 73f4112 Bump tiny.
• 94a8b43 Clear up Rspec session.
• e26a0a9 Update dependencies.
• e4ec453 Make it work with bundler (at least I hope so).
• 73c389e Release new version.
• 477427d Tell about before_destroy callbacks in the README
• 55c797a Responder should be set in all cases.
• de94d27 Bump to 1.0 (gem will be published soon).
• e2931cb Added #parent and #parent_type to BelongsToHelper.
• 2ea5a64 Minor load paths tweaks.
• Additional commits viewable in compare view

Updates nested_form from ac43d8f to 0.3.2

Commits

• f08415f properly pass options when fields_for is called with colletion
• bd30e0b don't generate div.fields only if wrapper option is false
• 79060b8 Merge pull request #211 from taavo/append_after_callbacks_inside_form
• 3fd30d5 append after_nested_form_callbacks within form
• 218dc74 spec after_nested_form to append within, instead of after
• dc3e5f2 spec auto-multipart for rails 3.1+
• See full diff in compare view

Updates state_machines-mongoid from 0.2.0 to 0.0.0

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

⚠️ This repo is Continuously Deployed: make sure you follow the guidance ⚠️

Follow these steps if you are doing a Rails upgrade.

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.