[Snyk] Security upgrade importmap-rails from 2.2.2 to 2.2.3

[JJediny]

Snyk has created this PR to fix 6 vulnerabilities in the rubygems dependencies of this project.

Snyk changed the following file(s):

• Gemfile

⚠️ Warning

Failed to update the Gemfile.lock, please update manually before merging.

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Allocation of Resources Without Limits or Throttling SNYK-RUBY-RACK-13378928	649
	Allocation of Resources Without Limits or Throttling SNYK-RUBY-RACK-13378930	649
	Allocation of Resources Without Limits or Throttling SNYK-RUBY-RACK-13378932	649
	Allocation of Resources Without Limits or Throttling SNYK-RUBY-RACK-13535097	649
	Information Exposure SNYK-RUBY-RACK-13524628	559
	Improper Removal of Sensitive Information Before Storage or Transfer SNYK-RUBY-URI-13506785	469

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Allocation of Resources Without Limits or Throttling
🦉 Information Exposure

[Copilot]

Pull request overview

This PR upgrades the importmap-rails gem version constraint to address 6 security vulnerabilities: 4 high-severity resource allocation issues in Rack, 1 medium-severity information exposure issue in Rack, and 1 medium-severity improper removal of sensitive information issue in URI. The change updates the minimum required version from 2.2.0 to 2.2.3.

Key Changes

• Updated importmap-rails version constraint from >= 2.2.0 to >= 2.2.3 to pull in security fixes

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

The Gemfile.lock file needs to be updated to reflect this version constraint change. According to the PR description, Snyk failed to update the Gemfile.lock automatically. The lock file currently pins importmap-rails to version 2.2.2, which will prevent the security fix from being applied when dependencies are installed. You should run bundle update importmap-rails to update the lock file and ensure that version 2.2.3 or later is installed.