[Snyk] Fix for 3 vulnerabilities

[svc-ast-gh-snyk3]

Snyk has created this PR to fix 3 vulnerabilities in the rubygems dependencies of this project.

Snyk changed the following file(s):

• spec/rails_root/Gemfile

⚠️ Warning

Failed to update the Gemfile.lock, please update manually before merging.

---

This upgrade from Rails 3.2.13 to 5.0.0 is a major undertaking with significant breaking changes across two major versions. It requires a new minimum Ruby version and introduces fundamental shifts in application architecture, including the mandatory adoption of Strong Parameters and changes to Active Record behavior. The upgrade from rspec-rails 2.13.0 to 2.13.1 is a minor patch with no breaking changes.

Rails 3.2.13 → 5.0.0 (high-risk):
This is a substantial upgrade spanning both Rails 4.0 and 5.0, introducing numerous breaking changes that require significant code and configuration modifications.

• Highlights:

  • Strong Parameters: attr_accessible and attr_protected are removed. Mass assignment protection must be migrated to the strong parameters pattern in controllers.
  • Active Record: belongs_to associations are required by default, which may cause validation failures where they were previously optional. Additionally, all models must now inherit from ApplicationRecord instead of ActiveRecord::Base.
  • Ruby Version: Rails 5.0 requires Ruby 2.2.2 or newer.

• Recommendation: A sequential upgrade (first to the latest 4.2.x, then to 5.0) is strongly advised to manage the changes incrementally. Allocate significant time for code refactoring and thorough testing.

rspec-rails 2.13.0 → 2.13.1 (low-risk):
This is a patch release containing only bug fixes and no breaking API changes.

Notice 🤖: This content was generated using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.

---

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Allocation of Resources Without Limits or Throttling SNYK-RUBY-RACK-13378928	721
	Allocation of Resources Without Limits or Throttling SNYK-RUBY-RACK-13378930	721
	Allocation of Resources Without Limits or Throttling SNYK-RUBY-RACK-13378932	721

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Allocation of Resources Without Limits or Throttling