Bugfixes
========

Frontend:
 * Update rack RubyGem to version 2.2.22
   - XSS injection via malicious filename in Rack::Directory (CVE-2026-25500)
   - Directory traversal via root prefix bypass in Rack::Directory (CVE-2026-22860)