💚 cgi mostly removed from ruby-head, so add cgi as dev dependency

- in support of vcr: vcr/vcr#1057

Author: pboling

.rubocop_gradual.lock

@@ -34,7 +34,7 @@
   "lib/oauth/tokens/consumer_token.rb:3696415131": [
     [9, 5, 155, "Style/ClassMethodsDefinitions: Use `class << self` to define a class method.", 349576019]
   ],
-  "oauth.gemspec:1987611209": [
+  "oauth.gemspec:1419764957": [
     [133, 3, 56, "Gemspec/DependencyVersion: Dependency version specification is required.", 644892567],
     [153, 3, 40, "Gemspec/DependencyVersion: Dependency version specification is required.", 2300588954],
     [155, 3, 44, "Gemspec/DependencyVersion: Dependency version specification is required.", 1905290578],

Appraisals

@@ -30,6 +30,8 @@ end
 # Used for head (nightly) releases of ruby, truffleruby, and jruby.
 # Split into discrete appraisals if one of them needs a dependency locked discretely.
 appraise "head" do
+  # Why is gem "cgi" here? See: https://github.com/vcr/vcr/issues/1057
+  gem "cgi", ">= 0.5"
   gem "benchmark", "~> 0.4", ">= 0.4.1"
   eval_gemfile "modular/x_std_libs.gemfile"
 end

gemfiles/head.gemfile

@@ -3,6 +3,7 @@
 source "https://rubygems.org"
 
 gem "oauth-tty", branch: "main", git: "https://github.com/ruby-oauth/oauth-tty"
+gem "cgi", ">= 0.5"
 gem "benchmark", "~> 0.4", ">= 0.4.1"
 
 gemspec path: "../"

oauth.gemspec

@@ -202,6 +202,9 @@ Thanks, |7eter l-|. l3oling
   # | # ./spec/spec_helper.rb:8:in `<top (required)>'
   # So that's why we need backports.
   spec.add_development_dependency("backports", "~> 3.25", ">= 3.25.1")  # ruby >= 0
+  # In Ruby 3.5 (HEAD) the CGI library has been pared down, so we also need to depend on gem "cgi" for ruby@head
+  # This is done in the "head" appraisal.
+  # See: https://github.com/vcr/vcr/issues/1057
   spec.add_development_dependency("vcr", ">= 4")                        # 6.0 claims to support ruby >= 2.3, but fails on ruby 2.4
   spec.add_development_dependency("webmock", ">= 3")                    # Last version to support ruby >= 2.3
 end