Bump paperclip from 2.3.8 to 4.2.2

[dependabot[bot]]

Bumps paperclip from 2.3.8 to 4.2.2.

Changelog

Sourced from paperclip's changelog.

4.2.2:

• Security fix: Fix a potential security issue with spoofing

4.2.1:

• Improvement: Added validate_media_type options to allow/bypass spoof check
• Improvement: Added incremental backoff when AWS gives us a SlowDown error.
• Improvement: Stream downloads when usign aws-sdk.
• Improvement: Documentation fixes, includes Windows instructions.
• Improvement: Added pt-BR, zh-HK, zh-CN, zh-TW, and ja-JP locales.
• Improvement: Better escaping for characters in URLs
• Improvement: Honor fog_credentials[:scheme]
• Improvement: Also look for custom processors in lib/paperclip
• Improvement: id partitioning for string IDs works like integer id
• Improvement: Can pass options to DB adapters in migrations
• Improvement: Update expiring_url creation for later versions of fog
• Improvement: path can be a Proc in S3 attachments
• Test Fix: Improves speed and reliability of the specs
• Bug Fix: #original_filename= does not error when passed nil

4.2.0:

• Improvement: Converted test suite from test/unit to RSpec
• Improvement: Refactored Paperclip::Attachment#assign
• Improvement: Added Spanish and German locales
• Improvement: Required Validators accept validator subclasses
• Improvement: EXIF orientation checking can be turned off for performance
• Improvement: Documentation updates
• Improvement: Better #human_size method for AttachmentSizeValidators
• Bug Fix: Allow MIME-types with dots in them
• Improvement: Travis CI updates
• Improvement: Validators can take multiple messages
• Improvement: Per-style options for S3 storage
• Improvement: Allow nil geometry strings
• Improvement: Use eager_load!

4.1.1:

• Improvement: Add default translations for spoof validation
• Bug Fix: Don't check for spoofs if the file hasn't changed
• Bug Fix: Callback chain terminator is different in Rails 4.1, remove warnings
• Improvement: Fixed various Ruby warnings
• Bug Fix: Give bundler a hint, so it doesn't run forever on a fresh bundle
• Improvement: Documentation fixes
• Improvement: Allow travis-ci to finish-fast

4.1.0:

... (truncated)

Commits

• 67580ee Release version v4.2.2 [ci skip]
• 9aee411 Fix a possible security issue with spoofing
• ea1fc3c v4.2.1
• b589d5a Add Rails 4.2 to Appraisals
• 679c1cf Updated Readme.md
• 34c9b74 Add handling for S3 path option being a proc
• 3398282 Fog upgraded how expiring_urls are made
• d02b2fc Revert "Fast to slowly spec"
• 3601cc6 Revert "remove whitespace, not main gemspec"
• 68d777f Revert "Fog upgraded how expiring_urls are made"
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot ignore this [patch|minor|major] version will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.