Use Gemfiles to manage dev/test dependencies + cleanup

Gemfile

@@ -26,7 +26,7 @@ gem 'puma', puma_version
 gem 'minitest', '~> 5.0'
 gem 'rack-test', github: 'rack/rack-test'
 gem 'rubocop', '~> 1.32.0', require: false
-gem 'yard'
+gem 'yard' # used by rake doc
 
 gem 'rack-protection', path: 'rack-protection'
 gem 'sinatra-contrib', path: 'sinatra-contrib'
@@ -37,8 +37,6 @@ gem 'sinatra-contrib', path: 'sinatra-contrib'
 # https://github.com/socketry/async-http/pull/124/files#r1237988899
 gem 'traces', '< 0.10.0' if RUBY_VERSION >= '2.6.0' && RUBY_VERSION < '2.7.0'
 
-gem 'activesupport', '~> 6.1'
-
 gem 'asciidoctor'
 gem 'builder'
 gem 'commonmarker', '~> 0.23.4', platforms: [:ruby]
@@ -60,7 +58,3 @@ gem 'sass-embedded', '~> 1.54'
 gem 'simplecov', require: false
 gem 'slim', '~> 4'
 gem 'yajl-ruby', platforms: [:ruby]
-
-gem 'json', platforms: %i[jruby mri]
-
-gem 'jar-dependencies', '= 0.4.1', platforms: [:jruby] # Gem::LoadError with jar-dependencies 0.4.2

rack-protection/Gemfile

@@ -4,6 +4,7 @@ source 'https://rubygems.org'
 # encoding: utf-8
 
 gem 'rake'
+gem 'rspec', '~> 3'
 
 rack_version = ENV['rack'].to_s
 rack_version = nil if rack_version.empty? || (rack_version == 'stable')

rack-protection/rack-protection.gemspec

@@ -39,9 +39,6 @@ RubyGems 2.0 or newer is required to protect against public gem pushes. You can
   s.required_ruby_version = '>= 2.6.0'
 
   # dependencies
-  s.add_dependency 'base64'
+  s.add_dependency 'base64', '>= 0.1.0'
   s.add_dependency 'rack', '~> 2.2', '>= 2.2.4'
-
-  s.add_development_dependency 'rack-test', '~> 2'
-  s.add_development_dependency 'rspec', '~> 3'
 end

sinatra-contrib/Gemfile

@@ -1,45 +1,26 @@
 # frozen_string_literal: true
 
 source 'https://rubygems.org'
-gemspec
-
-gem 'rack-protection', path: '../rack-protection'
-gem 'sinatra', path: '..'
-
-gem 'rack-test', github: 'rack/rack-test'
-
-group :development, :test do
-  platform :jruby do
-    gem 'json'
-    gem 'rdoc'
-    gem 'therubyrhino'
-    gem 'jar-dependencies', '= 0.4.1' # Gem::LoadError with jar-dependencies 0.4.2
-  end
-
-  platform :jruby, :ruby do
-    gem 'hamlit', '>= 3'
-    gem 'liquid'
-    # Use main until there's a slim release that can be used with Tilt 2.1.0
-    # https://github.com/slim-template/slim/pull/910
-    gem 'slim', github: 'slim-template/slim'
-  end
 
-  platform :ruby do
-    gem 'execjs', '>= 2.0.0'
-    gem 'nokogiri', '>= 1.13.6'
-    gem 'redcarpet', '>= 3.5.1'
-    gem 'yajl-ruby'
-  end
-
-  gem 'multi_json'
-end
+gemspec
 
 rack_version = ENV['rack'].to_s
 rack_version = nil if rack_version.empty? || (rack_version == 'stable')
 rack_version = { github: 'rack/rack' } if rack_version == 'head'
-gem 'rack', rack_version
 
 tilt_version = ENV['tilt'].to_s
 tilt_version = nil if tilt_version.empty? || (tilt_version == 'stable')
 tilt_version = { github: 'jeremyevans/tilt' } if tilt_version == 'head'
+
+gem 'erubi'
+gem 'haml'
+gem 'hamlit', '>= 3'
+gem 'rack', rack_version
+gem 'rack-protection', path: '../rack-protection'
+gem 'rack-test', github: 'rack/rack-test'
+gem 'rake', '>= 12.3.3'
+gem 'rspec', '~> 3'
+gem 'sinatra', path: '..'
+gem 'slim'
 gem 'tilt', tilt_version
+gem 'yajl-ruby', platforms: [:ruby] # c-ext

sinatra-contrib/sinatra-contrib.gemspec

@@ -37,23 +37,9 @@ RubyGems 2.0 or newer is required to protect against public gem pushes. You can
 
   s.required_ruby_version = '>= 2.6.0'
 
-  s.add_dependency 'multi_json'
+  s.add_dependency 'multi_json', '>= 0.0.2'
   s.add_dependency 'mustermann', '~> 3.0'
   s.add_dependency 'rack-protection', version
   s.add_dependency 'sinatra', version
   s.add_dependency 'tilt', '~> 2.0'
-
-  s.add_development_dependency 'asciidoctor'
-  s.add_development_dependency 'builder'
-  s.add_development_dependency 'erubi'
-  s.add_development_dependency 'haml'
-  s.add_development_dependency 'liquid'
-  s.add_development_dependency 'markaby'
-  s.add_development_dependency 'nokogiri'
-  s.add_development_dependency 'rack-test', '~> 2'
-  s.add_development_dependency 'rake', '>= 12.3.3'
-  s.add_development_dependency 'redcarpet'
-  s.add_development_dependency 'rspec', '~> 3'
-  s.add_development_dependency 'sass-embedded', '~> 1.54'
-  s.add_development_dependency 'slim'
 end

sinatra.gemspec

@@ -49,6 +49,4 @@ RubyGems 2.0 or newer is required to protect against public gem pushes. You can
   s.add_dependency 'rack', '~> 2.2', '>= 2.2.4'
   s.add_dependency 'rack-protection', version
   s.add_dependency 'tilt', '~> 2.0'
-
-  s.add_development_dependency 'rack-test', '~> 2'
 end