Update rack-attack requirement from ~> 6.7.0 to ~> 6.8.0

[dependabot]

Updates the requirements on rack-attack to permit the latest version.

Release notes

Sourced from rack-attack's releases.

v6.8.0

What's Changed

Changed

• Avoid RedisCacheStore#increment on Rails 6+ (which might improve performance) by @​jdelStrother (#597)

Fixed

• Fix #588 don't fail if request.ip is missing, by @​santib (#630)
• Fix reset! when using namespaced cache store by @​santib (#673)

Deprecated

• Soft deprecate integration with rack 1.x, may or may not work with it.
• Soft deprecate integration with rails 5.2 or less, may or may not work with it.

Removed

• Remove support for unmaintained ActiveSupport::Cache::RedisStore, by @​mitchellhenke (#625)

New Contributors

• @​floehopper made their first contribution in rack/rack-attack#618
• @​mttkay made their first contribution in rack/rack-attack#622
• @​mitchellhenke made their first contribution in rack/rack-attack#625
• @​santib made their first contribution in rack/rack-attack#629
• @​tisba made their first contribution in rack/rack-attack#654
• @​fynsta made their first contribution in rack/rack-attack#658
• @​alexsmartens made their first contribution in rack/rack-attack#664

Full Changelog: rack/rack-attack@v6.7.0...v6.8.0

Changelog

Sourced from rack-attack's changelog.

[6.8.0] - 2025-10-14

Changed

• Avoid RedisCacheStore#increment on Rails 6+ (which might improve performance) by @​jdelStrother (#597)

Fixed

• Fix #588 don't fail if request.ip is missing, by @​santib (#630)
• Fix reset! when using namespaced cache store by @​santib (#673)

Deprecated

• Soft deprecate integration with rack 1.x, may or may not work with it.
• Soft deprecate integration with rails 5.2 or less, may or may not work with it.

Removed

• Remove support for unmaintained ActiveSupport::Cache::RedisStore, by @​mitchellhenke (#625)

[6.7.0] - 2023-07-26

• Replace git.io URL by @​kyoshidajp in #579
• test: update rack-test to v2 from v1 by @​grzuy in #587
• Update example description to not suggest using a deprecated method by @​MaksimAbramchuk in #589
• Add note about cache stores and in-memory caches. by @​nateberkopec in #604
• ci: tests against redis gem v5 by @​grzuy in #612
• Support rack 3 by @​ioquatix in #586
• Gem release management. by @​ioquatix in #614

[6.6.1] - 2022-04-14

Fixed

• Fixes deprecation warning in redis 4.6+ ([@​ixti])

[6.6.0] - 2022-01-29

Added

• Ability to have access to the request object instead of only env (still can access env with request.env) when customizing throttle and blocklist responses with new methods Rack::Attack.blocklisted_responder= and Rack::Attack.throttled_responder= which yield the request to your lambda. ([@​NikolayRys])

Deprecated

• Rack::Attack.blocklisted_response=
• Rack::Attack.throttled_response=

[6.5.0] - 2021-02-07

... (truncated)

Commits

• 65f1ead Bumps gem version to v6.8.0
• e84eaf5 Upgrade GHA Runners (#694)
• 4606efb build(deps): bump actions/checkout from 4 to 5 (#690)
• 40d83d1 Fix GHA Runner (#692)
• 1dba6ec Remove CodeClimate (#693)
• 4677708 Add Ruby 3.4 to the CI (#681)
• 8710876 Fix CI (#683)
• 86650c4 Fix reset! when using namespaced cache store (#673)
• 8d5b210 Fix wrong merge resolution (#680)
• 6db4a73 Drop Dalli 2 support (#679)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)