[Snyk] Fix for 3 vulnerabilities

[svc-ast-gh-snyk2]

Snyk has created this PR to fix 3 vulnerabilities in the rubygems dependencies of this project.

Snyk changed the following file(s):

• Gemfile
• Gemfile.lock

---

The upgrade of Rails from version 2.3.16 to 5.0.0 is a major undertaking with significant breaking changes, requiring a multi-step migration process. The framework has undergone several fundamental architectural shifts across these versions. The update for thin is a minor patch with no breaking changes.

Rails 2.3.16 → 5.0.0 (High Risk):
This is a substantial upgrade spanning multiple major versions (3.0, 4.0, 5.0) and involves a complete application overhaul. It is strongly recommended to upgrade incrementally through each major version (e.g., 2.3 → 3.0 → 3.1 → 3.2 → 4.0, etc.) to manage the extensive changes.

Highlights:

• Rails 2.3 → 3.0: This was a major rewrite. Key changes include the introduction of Bundler for gem management, a new router DSL, and a complete overhaul of the ActiveRecord query interface with the introduction of Arel. The rails_upgrade plugin can help identify areas needing updates.
• Rails 3.2 → 4.0: This version introduced Strong Parameters, replacing attr_accessible for security, which requires significant changes in controllers. It also removed support for plugins in vendor/plugins.
• Rails 4.2 → 5.0: This version requires Ruby 2.2.2+. It also changes the object model, requiring Active Record models to inherit from ApplicationRecord instead of ActiveRecord::Base.

Recommendation: A staged, version-by-version upgrade is required. Do not attempt to jump directly from 2.3 to 5.0. Allocate significant time for code refactoring, dependency updates, and thorough testing at each step.

thin 1.2.7 → 1.2.8 (Low Risk):
This is a patch release with bug fixes and minor improvements. It includes a fix for the Rails version check when selecting the Rack adapter but introduces no breaking changes.

Notice 🤖: This content was generated using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.

---

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Allocation of Resources Without Limits or Throttling SNYK-RUBY-RACK-13378928	721
	Allocation of Resources Without Limits or Throttling SNYK-RUBY-RACK-13378930	721
	Allocation of Resources Without Limits or Throttling SNYK-RUBY-RACK-13378932	721

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Allocation of Resources Without Limits or Throttling