v2.4.0

What's Changed

• Add CSP violation reporting as a first-class security primitive by @delano in #176
• Fix Rack SPEC violations in IPPrivacyMiddleware (issue #167) by @delano in #168
• Fix formatting in dependabot.yml by @delano in #165
• Fix release-gem workflow: install rake from the optional :development group by @delano in #157
• Otto::CaddyTLS: Caddy on-demand TLS permission endpoint (#175) by @delano in #177
• ci: Ruby 3.2 floor, Claude model selection + workflow standardization by @delano in #162
• ci: fix YARD docs build — install dev gems (yard/kramdown) via BUNDLE_WITH by @delano in #166
• ci: workflow standardization (RuboCop lint, YARD docs, fork/bot guard) by @delano in #163
• Release version 2.4.0 by @delano in #178

Dependencies

• build(deps-dev): bump rubocop-rspec from 3.9.0 to 3.10.2 by @dependabot[bot] in #141
• build(deps): bump rubygems/release-gem from 1.2.0 to 1.4.0 by @dependabot[bot] in #143
• build(deps): bump actions/checkout from 6.0.3 to 7.0.0 by @dependabot[bot] in #158
• build(deps-dev): bump rubocop from 1.86.2 to 1.88.0 by @dependabot[bot] in #159
• build(deps): bump concurrent-ruby from 1.3.6 to 1.3.7 by @dependabot[bot] in #160
• build(deps): bump nokogiri from 1.19.2 to 1.19.4 by @dependabot[bot] in #164
• build(deps-dev): bump rake from 13.1.0 to 13.4.2 by @dependabot[bot] in #161
• build(deps): bump actions/deploy-pages from 4 to 5 by @dependabot[bot] in #169
• build(deps): bump actions/upload-pages-artifact from 3 to 5 by @dependabot[bot] in #170
• build(deps): bump actions/configure-pages from 4 to 6 by @dependabot[bot] in #172
• build(deps): bump mxschmitt/action-tmate from 3.22 to 3.24 by @dependabot[bot] in #173

Full Changelog: v2.3.1...v2.4.0