[Snyk] Fix for 1 vulnerabilities

[samawad]

Snyk has created this PR to fix 1 vulnerabilities in the rubygems dependencies of this project.

Snyk changed the following file(s):

• Gemfile
• Gemfile.lock

---

This upgrade spans multiple major versions of Action Pack (Rails 3, 4, and 5), introducing significant and mandatory architectural changes. The upgrade from actionpack@2.3.8 to 5.0.0 is a high-risk migration requiring substantial code refactoring. The typhoeus upgrade from 0.1.31 to 0.2.0 is a minor bump; no specific breaking changes were cited in official sources for this range, but manual validation is recommended.

actionpack (Rails) 2.3.8 → 5.0.0 (high):
This upgrade requires a staged migration through intermediate versions. Key breaking changes include:

• Rails 3 Transition: Mass assignment protection model changes from attr_accessible to Strong Parameters, a fundamental security update requiring changes in every controller that handles user input. [2, 6]
• Rails 4 Transition: Controller callbacks like before_filter are replaced by before_action, and models must inherit from a new ApplicationRecord base class instead of directly from ActiveRecord::Base. [3, 7]
• Rails 5 Transition: Test helpers for controllers now use keyword arguments instead of positional arguments for parameters, requiring updates to the test suite. [23]

Source: Ruby on Rails Upgrade Guides
Recommendation: A staged upgrade (e.g., 2.3 → 3.2 → 4.2 → 5.0) is required to address deprecations and breaking changes incrementally. Developers must rewrite parameter handling, update model inheritance, and refactor controller tests.

Notice 🤖: This content was generated using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.

---

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Allocation of Resources Without Limits or Throttling SNYK-RUBY-RACK-13052974	696

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Allocation of Resources Without Limits or Throttling