Bump chartkick from 2.0.1 to 3.4.0

[dependabot[bot]]

Bumps chartkick from 2.0.1 to 3.4.0.

Changelog

Sourced from chartkick's changelog.

3.4.0 (2020-08-04)

• Fixed CSS injection with width and height options - more info

3.3.2 (2020-07-23)

• Updated Chartkick.js to 3.2.1

3.3.1 (2019-12-26)

• Updated Chart.js to 2.9.3
• Fixed deprecating warnings in Ruby 2.7

3.3.0 (2019-11-09)

• Updated Chartkick.js to 3.2.0
• Rolled back Chart.js to 2.8.0 due to legend change

3.2.2 (2019-10-27)

• Updated Chartkick.js to 3.1.3
• Updated Chart.js to 2.9.1

3.2.1 (2019-07-15)

• Updated Chartkick.js to 3.1.1

3.2.0 (2019-06-04)

• Fixed XSS vulnerability - more info

3.1.0 (2019-05-26)

• Updated Chartkick.js to 3.1.0
• Updated Chart.js to 2.8.0

3.0.2 (2019-01-03)

• Fixed error with nonce option with Secure Headers and Rails < 5.2
• Updated Chartkick.js to 3.0.2
• Updated Chart.js to 2.7.3

3.0.1 (2018-08-13)

• Updated Chartkick.js to 3.0.1

3.0.0 (2018-08-08)

• Updated Chartkick.js to 3.0.0
• Added code option

Commits

• f3e609a Version bump to 3.4.0 [skip ci]
• ba67ab5 Fixed CSS injection with width and height options
• c1437a2 Version bump to 3.3.2 [skip ci]
• 9a36701 Updated Chartkick.js to 3.2.1
• 462dda7 Updated chartkick.js to fix error with GeoChart with latest Google Charts rel...
• 2cd0842 Added dev instructions [skip ci]
• f1472e7 Added Travis CI
• 3d2e717 Added todo [skip ci]
• d3bc937 Test escaping
• 57551ee Test chart ids
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/genome/spectacle/network/alerts).

[dependabot[bot]]

Looks like chartkick is up-to-date now, so this is no longer needed.