Bump loofah from 2.23.1 to 2.24.0 in /spec/tester_mongo (#1116)

Bumps [loofah](https://github.com/flavorjones/loofah) from 2.23.1 to
2.24.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/flavorjones/loofah/releases">loofah's
releases</a>.</em></p>
<blockquote>
<h2>2.24.0 / 2024-12-24</h2>
<h3>Added</h3>
<ul>
<li>Built-in scrubber <code>:double_breakpoint</code> which sees
<code>&lt;br&gt;&lt;br&gt;</code> and wraps the surrounding content in
<code>&lt;p&gt;</code> tags. <a
href="https://redirect.github.com/flavorjones/loofah/issues/279">#279</a>,
<a
href="https://redirect.github.com/flavorjones/loofah/issues/284">#284</a>
<a href="https://github.com/josecolella"><code>@​josecolella</code></a>
<a href="https://github.com/torihuang"><code>@​torihuang</code></a></li>
</ul>
<h3>Improved</h3>
<ul>
<li>Built-in scrubber <code>:targetblank</code> now skips <code>a</code>
tags whose <code>href</code> attribute is an anchor link. Previously,
all <code>a</code> tags were modified to have
<code>target='_blank'</code>. <a
href="https://redirect.github.com/flavorjones/loofah/issues/291">#291</a>
<a href="https://github.com/fnando"><code>@​fnando</code></a></li>
</ul>
<h3>New Contributors</h3>
<ul>
<li><a href="https://github.com/andrew"><code>@​andrew</code></a> made
their first contribution in <a
href="https://redirect.github.com/flavorjones/loofah/pull/289">flavorjones/loofah#289</a></li>
<li><a href="https://github.com/fnando"><code>@​fnando</code></a> made
their first contribution in <a
href="https://redirect.github.com/flavorjones/loofah/pull/291">flavorjones/loofah#291</a></li>
<li><a
href="https://github.com/josecolella"><code>@​josecolella</code></a> and
<a href="https://github.com/torihuang"><code>@​torihuang</code></a> made
their first contribution in <a
href="https://redirect.github.com/flavorjones/loofah/pull/284">flavorjones/loofah#284</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/flavorjones/loofah/compare/v2.23.1...v2.24.0">https://github.com/flavorjones/loofah/compare/v2.23.1...v2.24.0</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/flavorjones/loofah/blob/main/CHANGELOG.md">loofah's
changelog</a>.</em></p>
<blockquote>
<h2>2.24.0 / 2024-12-24</h2>
<h3>Added</h3>
<ul>
<li>Built-in scrubber <code>:double_breakpoint</code> which sees
<code>&lt;br&gt;&lt;br&gt;</code> and wraps the surrounding content in
<code>&lt;p&gt;</code> tags. <a
href="https://redirect.github.com/flavorjones/loofah/issues/279">#279</a>,
<a
href="https://redirect.github.com/flavorjones/loofah/issues/284">#284</a>
<a href="https://github.com/josecolella"><code>@​josecolella</code></a>
<a href="https://github.com/torihuang"><code>@​torihuang</code></a></li>
</ul>
<h3>Improved</h3>
<ul>
<li>Built-in scrubber <code>:targetblank</code> now skips <code>a</code>
tags whose <code>href</code> attribute is an anchor link. Previously,
all <code>a</code> tags were modified to have
<code>target='_blank'</code>. <a
href="https://redirect.github.com/flavorjones/loofah/issues/291">#291</a>
<a href="https://github.com/fnando"><code>@​fnando</code></a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/flavorjones/loofah/commit/85990602c6fdb40489138e80080ca508200c7137"><code>8599060</code></a>
version bump to v2.24.0</li>
<li><a
href="https://github.com/flavorjones/loofah/commit/2abdafced59d55313bec02dc82c847e368936c76"><code>2abdafc</code></a>
Merge pull request <a
href="https://redirect.github.com/flavorjones/loofah/issues/284">#284</a>
from josecolella/jc-th-add-breakpoint-scrubber</li>
<li><a
href="https://github.com/flavorjones/loofah/commit/4d94183d64b947d3dccbaea0c6074b6402e857a6"><code>4d94183</code></a>
Drop newlines from the double-breakpoint test</li>
<li><a
href="https://github.com/flavorjones/loofah/commit/4b339a5580e745bc33b51f41f6963068960fa51d"><code>4b339a5</code></a>
docs: Update documentation</li>
<li><a
href="https://github.com/flavorjones/loofah/commit/9da4c19611f4eb96326cedbdc0300ea1b705c3d7"><code>9da4c19</code></a>
feat: Add implementation for method</li>
<li><a
href="https://github.com/flavorjones/loofah/commit/be6812478a1f0fb64cb6c55fdbd42163f653334a"><code>be68124</code></a>
initial scaffold</li>
<li><a
href="https://github.com/flavorjones/loofah/commit/c94996859a116a24cdaaaf3b88d9200b3b72223a"><code>c949968</code></a>
test: Get basic test case for scrubber</li>
<li><a
href="https://github.com/flavorjones/loofah/commit/868a852c49b980bb952135b5fa00c9e3b5a4ae6a"><code>868a852</code></a>
Merge pull request <a
href="https://redirect.github.com/flavorjones/loofah/issues/291">#291</a>
from fnando/anchors-target-blank</li>
<li><a
href="https://github.com/flavorjones/loofah/commit/527bc58772c8fb472cef2303fab3f2e4e1adacc7"><code>527bc58</code></a>
Skip target attribute on links with anchors.</li>
<li><a
href="https://github.com/flavorjones/loofah/commit/7627aca1005382415d007d76102190a2e2f26582"><code>7627aca</code></a>
Merge pull request <a
href="https://redirect.github.com/flavorjones/loofah/issues/292">#292</a>
from flavorjones/flavorjones-bump-ci-versions-202412</li>
<li>Additional commits viewable in <a
href="https://github.com/flavorjones/loofah/compare/v2.23.1...v2.24.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=loofah&package-manager=bundler&previous-version=2.23.1&new-version=2.24.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

spec/tester_mongo/Gemfile.lock

@@ -120,7 +120,7 @@ GEM
       rdoc (>= 4.0.0)
       reline (>= 0.4.2)
     logger (1.6.4)
-    loofah (2.23.1)
+    loofah (2.24.0)
       crass (~> 1.0.2)
       nokogiri (>= 1.12.0)
     mail (2.8.1)