Update rack requirement from ~> 1.2 to ~> 2.0

[dependabot-preview]

Updates the requirements on rack to permit the latest version.

Changelog

Sourced from rack's changelog.

Changelog

All notable changes to this project will be documented in this file. For info on how to format all future additions to this file please reference Keep A Changelog

[Unreleased]

Added

• CHANGELOG.md using keep a changelog formatting by @​twitnithegirl

Changed

• Rack::Utils.status_code now raises an error when the status symbol is invalid instead of 500.
• Rack::Request::SCHEME_WHITELIST has been renamed to Rack::Request::ALLOWED_SCHEMES
• Rack::Multipart::Parser.get_filename now accepts file that contains + in its name, avoiding the replacement of + to space character since filenames with + are valid.

Removed

• HISTORY.md by @​twitnithegirl
• NEWS.md by @​twitnithegirl

History/News Archive

Items below this line are from the previously maintained HISTORY.md and NEWS.md files.

[2.0.0]

• Rack::Session::Abstract::ID is deprecated. Please change to use Rack::Session::Abstract::Persisted

[2.0.0.alpha] 2015-12-04

• First-party "SameSite" cookies. Browsers omit SameSite cookies from third-party requests, closing the door on many CSRF attacks.
• Pass same_site: true (or :strict) to enable: response.set_cookie 'foo', value: 'bar', same_site: true or same_site: :lax to use Lax enforcement: response.set_cookie 'foo', value: 'bar', same_site: :lax
• Based on version 7 of the Same-site Cookies internet draft:
  https://tools.ietf.org/html/draft-west-first-party-cookies-07
• Thanks to Ben Toews (@​mastahyeti) and Bob Long (@​bobjflong) for updating to drafts 5 and 7.
• Add Rack::Events middleware for adding event based middleware: middleware that does not care about the response body, but only cares about doing work at particular points in the request / response lifecycle.
• Add Rack::Request#authority to calculate the authority under which the response is being made (this will be handy for h2 pushes).
• Add Rack::Response::Helpers#cache_control and cache_control=. Use this for setting cache control headers on your response objects.
• Add Rack::Response::Helpers#etag and etag=. Use this for setting etag values on the response.
• Introduce Rack::Response::Helpers#add_header to add a value to a multi-valued response header. Implemented in terms of other Response#*_header methods, so it's available to any response-like class that includes the Helpers module.
• Add Rack::Request#add_header to match.
• Rack::Session::Abstract::ID IS DEPRECATED. Please switch to Rack::Session::Abstract::Persisted. Rack::Session::Abstract::Persisted uses a request object rather than the env hash.
• Pull ENV access inside the request object in to a module. This will help with legacy Request objects that are ENV based but don't want to inherit from Rack::Request
• Move most methods on the Rack::Request to a module Rack::Request::Helpers and use public API to get values from the request object. This enables users to mix Rack::Request::Helpers in to their own objects so they can implement (get|set|fetch|each)_header as they see fit (for example a proxy object).
• Files and directories with + in the name are served correctly. Rather than unescaping paths like a form, we unescape with a URI parser using Rack::Utils.unescape_path. Fixes #265
• Tempfiles are automatically closed in the case that there were too
  many posted.
• Added methods for manipulating response headers that don't assume
  they're stored as a Hash. Response-like classes may include the
  Rack::Response::Helpers module if they define these methods:
  • Rack::Response#has_header?
  • Rack::Response#get_header
  • Rack::Response#set_header

... (truncated)

Commits

• 8376dd1 Bumping version for release
• 313dd6a Whitelist http/https schemes
• 37c1160 Reduce buffer size to avoid pathological parsing
• 99fea65 Merge tag '2.0.5' into 2-0-stable
• 216b7ca Merge pull request #1296 from tomelm/fix-prefers-plaintext
• decd976 Bump version for release
• 957f596 Merge pull request #1268 from eileencodes/forwardport-pr-1249-to-2-0-stable
• 00e109e Merge pull request #1249 from mclark/handle-invalid-method-parameters
• 27c33b0 Stick with a passing version of Rubygems and bundler
• d4283e4 Leahize
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Note: This repo was added to Dependabot recently, so you'll receive a maximum of 5 PRs for your first few update runs. Once an update run creates fewer than 5 PRs we'll remove that limit.

You can always request more updates by clicking Bump now in your Dependabot dashboard.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot ignore this [patch|minor|major] version will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
• @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

• Update frequency (including time of day and day of week)
• Automerge options (never/patch/minor, and dev/runtime dependencies)
• Pull request limits (per update run and/or open at any time)
• Out-of-range updates (receive only lockfile updates, if desired)
• Security updates (receive only security updates, if desired)

Finally, you can contact us by mentioning @dependabot.

[dependabot-preview]

Superseded by #7.