Bump rack from 2.0.6 to 2.2.4

[dependabot[bot]]

Bumps rack from 2.0.6 to 2.2.4.

Changelog

Sourced from rack's changelog.

[2.2.4] - 2022-06-30

• Better support for lower case headers in Rack::ETag middleware. (#1919, @​ioquatix)
• Use custom exception on params too deep error. (#1838, @​simi)

[2.2.3.1] - 2022-05-27

• [CVE-2022-30123] Fix shell escaping issue in Common Logger
• [CVE-2022-30122] Restrict parsing of broken MIME attachments

[2.2.3] - 2020-06-15

Security

• [CVE-2020-8184] Do not allow percent-encoded cookie name to override existing cookie names. BREAKING CHANGE: Accessing cookie names that require URL encoding with decoded name no longer works. (@​fletchto99)

[2.2.2] - 2020-02-11

Fixed

• Fix incorrect Rack::Request#host value. (#1591, [@​ioquatix])
• Revert Rack::Handler::Thin implementation. (#1583, [@​jeremyevans])
• Double assignment is still needed to prevent an "unused variable" warning. (#1589, @​kamipo)
• Fix to handle same_site option for session pool. (#1587, @​kamipo)

[2.2.1] - 2020-02-09

Fixed

• Rework Rack::Request#ip to handle empty forwarded_for. (#1577, [@​ioquatix])

[2.2.0] - 2020-02-08

SPEC Changes

• rack.session request environment entry must respond to to_hash and return unfrozen Hash. ([@​jeremyevans])
• Request environment cannot be frozen. ([@​jeremyevans])
• CGI values in the request environment with non-ASCII characters must use ASCII-8BIT encoding. ([@​jeremyevans])
• Improve SPEC/lint relating to SERVER_NAME, SERVER_PORT and HTTP_HOST. (#1561, [@​ioquatix])

Added

• rackup supports multiple -r options and will require all arguments. ([@​jeremyevans])
• Server supports an array of paths to require for the :require option. (@​khotta)
• Files supports multipart range requests. (@​fatkodima)
• Multipart::UploadedFile supports an IO-like object instead of using the filesystem, using :filename and :io options. ([@​jeremyevans])
• Multipart::UploadedFile supports keyword arguments :path, :content_type, and :binary in addition to positional arguments. ([@​jeremyevans])
• Static supports a :cascade option for calling the app if there is no matching file. ([@​jeremyevans])
• Session::Abstract::SessionHash#dig. ([@​jeremyevans])
• Response.[] and MockResponse.[] for creating instances using status, headers, and body. ([@​ioquatix])

... (truncated)

Commits

• abca7d5 fixup changelog
• 0ae9ff2 bump version
• 0077900 Better handling of case-insensitive headers for Rack::Etag middleware. (#1919)
• d62c290 Add 'custom exception on params too deep error' change to CHANGELOG. (#1914)
• e7c5b94 Expect additional optional version segment in version test. (#1913)
• f705eac Merge branch '2-2-sec' into 2-2-stable
• 925a4a6 update changelog
• 70c0a24 bump version
• 434413f Escape untrusted text when logging
• a872bcc Restrict broken mime parsing
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/exciting-io/printer/network/alerts).