This is security and bug-fix release.
Security:
- Update httparty gem to 0.24.2. Fix CVE-2025-68696.
- Brakeman: set
Rails.application.config.action_dispatch.cookies_serializerto:json(#2425). - Brakeman: add
rel: "noopener noreferrer"to all places withtarget: "_blank"(#2425).
Bug-fixes:
- Update
brakemangem fro...