build(deps): bump roda from 3.85.0 to 3.87.0

[dependabot]

Bumps roda from 3.85.0 to 3.87.0.

Changelog

Sourced from roda's changelog.

=== master

• Make default_headers plugin correctly handle mixed/upper case content-type header on Rack 3 (jeremyevans) (#373)

• Make json_parser plugin handle case where Rack::Request#POST is called previously for env on Rack 3 (jeremyevans) (#372)

• Fix strict_unused_block warnings when running specs on Ruby 3.4 (jeremyevans)

= 3.87.0 (2024-12-17)

• Add host_routing plugin for routing based on request host header (jeremyevans)

• Do not write non-String to response body when using custom_block_results plugin (jeremyevans)

= 3.86.0 (2024-11-12)

• Add conditional_sessions plugin, for using the sessions plugin for only a subset of requests (jeremyevans)

• In permissions_policy plugin, add response.skip_permissions_policy! to avoid setting header (jeremyevans)

• Make Roda.freeze work if already frozen when using the autoload_{hash_branches,named_routes} plugins (jeremyevans)

• In content_security_policy plugin, add response.skip_content_security_policy! to avoid setting header (jeremyevans)

= 3.85.0 (2024-10-11)

• Avoid deprecation warning in public plugin when using Ruby 3.4.0-preview2 (jeremyevans)

• Evaluate class_matcher and symbol_matcher blocks in route-block context (jeremyevans)

• Allow class_matcher and symbol_matcher blocks to return non-arrays (jeremyevans)

• Make class_matcher and symbol_matcher plugin be able to build on top of existing registered matchers (jeremyevans)

• Make capture_erb plugin not break if String#capture is defined (jeremyevans)

= 3.84.0 (2024-09-12)

• Add hsts plugin for setting Strict-Transport-Security header (jeremyevans)

• Remove documentation from the gem to reduce gem size by 25% (jeremyevans)

= 3.83.0 (2024-08-12)

• Add assume_ssl plugin for making request ssl? method always return true (jeremyevans)

= 3.82.0 (2024-07-12)

• Add :encodings option to public plugin to support configurable encoding order (jeremyevans)

... (truncated)

Commits

• 8f7a89b Bump version to 3.87.0
• fe7c699 Minor performance improvements in header_matchers plugin
• 311cfad Add host_routing plugin for routing based on request host header
• 8da3120 Add two recent presentations on Roda
• bfa0e0c Do not write non-String to response body when using custom_block_results plugin
• 711460e Bump version to 3.86.0
• e6c84e8 Add conditional_sessions plugin, for using the sessions plugin for only a sub...
• e760a7d In permissions_policy plugin, add response.skip_permissions_policy! to avoid ...
• 3142ffc Change response.content_security_plugin = false to response.skip_content_secu...
• d181f0f Remove 103 Early Hints limited support caveat
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)