Bump down from 5.4.2 to 5.5.0

[dependabot]

Bumps down from 5.4.2 to 5.5.0.

Changelog

Sourced from down's changelog.

5.5.0 (2026-03-18)

• Add support for http.rb 6.0 (@​sferik)

• Fix Down::TooManyRedirects error with Down::Httpx happening on first redirect (@​artrybalko)

• Add :auth_on_redirect option to Down::NetHttp backend for skipping authentication on redirects (@​makrsmark)

• Add :tempfile_name keyword argument to .download for overriding tempfile prefix (@​softwaregravy)

• Drop support for Ruby 2.6 and older (@​janko)

• Deprecate wget backend (@​janko)

Commits

• c59bd9b Bump to 5.5.0
• 0a30698 Remove no-op line
• 16250d2 Upgrade to Minitest 6
• af1ca53 Use http.rb 5.x on older Ruby versions
• 6c5c7a8 Support http.rb 6.0 (#103)
• b307721 Handle 3xx redirects differently when streaming (#100)
• 5967e82 Add ruby 4.0 (#102)
• 094d7ff Do not allow forwarding of authorization headers on redirect. (#89)
• 1d0bacd Test on Ruby 3.3 and 3.4
• 5259dd3 Fix frozen string literal warnings in Ruby 3.4
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)