Dependabot: Bump the ruby group with 2 updates

[dependabot]

Bumps the ruby group with 2 updates: rack and sequel.

Updates rack from 3.1.4 to 3.1.7

Changelog

Sourced from rack's changelog.

[3.1.7] - 2024-07-11

Fixed

• Do not remove escaped opening/closing quotes for content-disposition filenames. (#2229, [@​jeremyevans])
• Fix encoding setting for non-binary IO-like objects in MockRequest#env_for. (#2227, [@​jeremyevans])
• Rack::Response should not generate invalid content-length header. (#2219, [@​ioquatix])
• Allow empty PATH_INFO. (#2214, [@​ioquatix])

[3.1.6] - 2024-07-03

Fixed

• Fix several edge cases in Rack::Request#parse_http_accept_header's implementation. (#2226, [@​ioquatix])

[3.1.5] - 2024-07-02

Security

• Fix potential ReDoS attack in Rack::Request#parse_http_accept_header. (GHSA-cj83-2ww7-mvq7, @​dwisiswant0)

Commits

• 4bb2f72 Bump patch version.
• 1c1e413 Ignore external tests directory.
• b4a1036 Prepare for 3.1.7 release.
• d0da91b Add more external tests.
• f6f1510 Improve Rack::Response content-length header generation. (#2219)
• fb339e0 Fix encoding setting for non-binary IO-like objects in MockRequest#env_for
• e21872d Do not remove escaped opening/closing quotes for content-disposition filenames
• 5c3d79f Synchronize changelog with HEAD.
• bca33b4 Allow empty PATH_INFO. (#2214) (#2234)
• 98aa947 Bump patch version.
• Additional commits viewable in compare view

Updates sequel from 5.81.0 to 5.82.0

Changelog

Sourced from sequel's changelog.

=== 5.82.0 (2024-07-01)

• Limit tactically eager loading to objects that have the same association reflection (jeremyevans) (#2181)

• Fix race condition in threaded/sharded_threaded connection pools that could cause stalls (jeremyevans)

• Emulate dropping a unique column or a column that is part of an index on SQLite 3.35.0+ (jeremyevans) (#2176)

• Support MERGE RETURNING on PostgreSQL 17+ (jeremyevans)

• Remove use of logger library in bin/sequel (jeremyevans)

• Support :connect_opts_proc Database option for late binding options (jeremyevans) (#2164)

Commits

• 4d10754 Bump version to 5.82.0
• 51b8cb2 Add nocov markings in threaded connection pools
• e55fe96 Test that tactical eager loading uses association from subclass when eager lo...
• 68279d0 Limit tactically eager loading to objects that have the same association refl...
• a687bdd Revert "Add :min_wait_timeout option to sharded_threaded connection pool and ...
• 7b748b5 Emulate dropping a unique column on SQLite 3.35.0+
• 72f08cd Add :min_wait_timeout option to sharded_threaded connection pool and default ...
• 73fed97 Remove unused local variables
• 326df13 Support MERGE RETURNING on PostgreSQL 17+
• 77fdd94 Move logger require in adapter specs into debugging code not used by default
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions