[dependabot]

Bumps rack-cors from 2.0.2 to 3.0.0.

Changelog

Sourced from rack-cors's changelog.

3.0.0 - 2025-05-16

Changed

• Update Rack dependency to >= 3.0.14
• Remove support for Ruby 2.3
• Add logger as explicit dependency

Commits

• f73bcd3 Update CHANGELOG
• 4c6863e Add logger gem as an explicit dependency (#286)
• 9acba7d Remove support for Ruby 2.3
• 3fd5546 CI against Ruby 3.4 (#287)
• 7d9da7c Update CHANGELOG.md
• ea6bd9a Update rack-cors.gemspec (#288)
• de3dc84 Bump to 3.0.0
• a3b0a90 Add funding_uri to gemspec (#283)
• c3e6de5 add note on origins w/ default port to README.md (#163)
• ea21a39 Add Ruby 3.3 to CI matrix (#271)
• Additional commits viewable in compare view

[coderabbitai]

Navigate logical layers of code changes, visualize relationships, and explore their blast radius.

Important

Review skipped

Review was skipped as selected files did not have any reviewable changes.

⛔ Files ignored due to path filters (1)

• Gemfile.lock is excluded by !**/*.lock

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: df9d3e9a-5228-4ff1-a726-61f586469f52

📥 Commits

Reviewing files that changed from the base of the PR and between 9c233f2 and 8d88a8e.

⛔ Files ignored due to path filters (1)

• Gemfile.lock is excluded by !**/*.lock

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: 667ceb8a-8148-44dc-ae27-7923284c30ef

📥 Commits

Reviewing files that changed from the base of the PR and between 887fd76 and 5e5f785.

⛔ Files ignored due to path filters (1)

• Gemfile.lock is excluded by !**/*.lock

📒 Files selected for processing (1)

• Gemfile

Included review availability: Your plan provides up to 10 included reviews per hour; 8 remain after this review.

---

📝 Walkthrough

Walkthrough

The Gemfile updates the rack-cors dependency constraint from ~> 2.0 to ~> 3.0.

Changes

rack-cors dependency

Layer / File(s)	Summary
Update rack-cors constraint Gemfile	The dependency constraint changes from ~> 2.0 to ~> 3.0.

Priority: ⬇️ Low

Estimated code review effort: 1 (Trivial) | ~2 minutes

Change: Other

Suggested reviewers: rheos

Merge Risk: ⚪ Minimal · up to 5e5f7

The dependency upgrade resolves with the project’s declared Rack, Ruby, and Rails versions. No concrete compatibility risk remains in the reviewed change, so it is mergeable subject to normal checks.

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly and concisely describes the dependency update from rack-cors 2.0.2 to 3.0.0.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Commit to this branch
• Create a new PR

---

_{Comment @coderabbitai help to get the list of available commands.}

[rheos]

Superseded by #12, which batches all three (each only touches Gemfile.lock, so they conflict serially) and verifies each on the axis the suite cannot reach — notably a real CORS preflight for rack-cors 3.0, since this repo has no CORS specs.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.