omniauth / omniauth / 39437302157

100%

push

github

Require Rack 2.2.8 and drop the delegate require

OmniAuth required 'delegate' only because Rack::Session::Cookie
calls DelegateClass without requiring it before Rack 2.2.8. The fix
in https://github.com/rack/rack/pull/1610 shipped in Rack 2.2.8, and
rack-session (used with Rack 3) requires it too. OmniAuth doesn't use
delegate itself.

Raise the rack floor to 2.2.8 and remove the require and its TODO.
The new floor also excludes older Rack 2.2 releases with known
security advisories.

171 of 171 branches covered (100.0%)

606 of 606 relevant lines covered (100.0%)

29.6 hits per line