From 109517577dd9f71cdeb922b18e4aee7781442af1 Mon Sep 17 00:00:00 2001
From: Zeke Gabrielse <ezekg@yahoo.com>
Date: Tue, 17 Feb 2026 22:05:17 -0600
Subject: [PATCH] upgrade to rack 3

---
 Gemfile      |  4 ++--
 Gemfile.lock | 21 ++++++++++-----------
 2 files changed, 12 insertions(+), 13 deletions(-)

diff --git a/Gemfile b/Gemfile
index ae9a6d57dc..9528a66269 100644
--- a/Gemfile
+++ b/Gemfile
@@ -7,10 +7,10 @@ gem 'rails', '~> 8'
 gem 'pg', '~> 1.3.4'
 gem 'puma', '~> 6.6'
 gem 'bcrypt', '3.1.17'
-gem 'rack', '~> 2.2.22'
+gem 'rack', '~> 3.1'
 gem 'rack-timeout', '~> 0.7', require: 'rack/timeout/base'
 unless ENV.key?('NO_RACK_ATTACK')
-  gem 'rack-attack', '~> 6.6'
+  gem 'rack-attack', '~> 6.7'
 end
 gem 'rack-cors'
 gem 'uri', '>= 0.12.2'
diff --git a/Gemfile.lock b/Gemfile.lock
index d216721984..9dd20cc2d9 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -341,19 +341,19 @@ GEM
       nio4r (~> 2.0)
     raabro (1.4.0)
     racc (1.8.1)
-    rack (2.2.22)
-    rack-attack (6.6.0)
-      rack (>= 1.0, < 3)
+    rack (3.2.5)
+    rack-attack (6.8.0)
+      rack (>= 1.0, < 4)
     rack-cors (1.1.1)
       rack (>= 2.0.0)
-    rack-session (1.0.2)
-      rack (< 3)
+    rack-session (2.1.1)
+      base64 (>= 0.1.0)
+      rack (>= 3.0.0)
     rack-test (2.2.0)
       rack (>= 1.3)
     rack-timeout (0.7.0)
-    rackup (1.0.1)
-      rack (< 3)
-      webrick
+    rackup (2.3.1)
+      rack (>= 3)
     rails (8.1.1)
       actioncable (= 8.1.1)
       actionmailbox (= 8.1.1)
@@ -489,7 +489,6 @@ GEM
       addressable (>= 2.8.0)
       crack (>= 0.3.2)
       hashdiff (>= 0.4.0, < 2.0.0)
-    webrick (1.9.1)
     websocket-driver (0.8.0)
       base64
       websocket-extensions (>= 0.1.0)
@@ -552,8 +551,8 @@ DEPENDENCIES
   parallel_tests (~> 5.5)
   pg (~> 1.3.4)
   puma (~> 6.6)
-  rack (~> 2.2.22)
-  rack-attack (~> 6.6)
+  rack (~> 3.1)
+  rack-attack (~> 6.7)
   rack-cors
   rack-timeout (~> 0.7)
   rails (~> 8)