Bump ViewComponent to v3.9.0 (#492)

This addresses an XSS vector
ViewComponent/view_component#1950

app/components/govuk_component/tab_component.rb

@@ -23,7 +23,7 @@ class Tab < GovukComponent::Base
 
     def initialize(label:, text: nil, classes: [], html_attributes: {})
       @label = label
-      @text  = text
+      @text  = h(text)
 
       super(classes: classes, html_attributes: html_attributes)
     end

govuk-components.gemspec

@@ -24,7 +24,7 @@ Gem::Specification.new do |spec|
 
   spec.add_dependency("html-attributes-utils", "~> 1.0.0", ">= 1.0.0")
   spec.add_dependency("pagy", "~> 6.0")
-  spec.add_dependency("view_component", ">= 3.3", "< 3.9")
+  spec.add_dependency("view_component", ">= 3.9", "< 3.10")
 
   spec.add_development_dependency "deep_merge"
   spec.add_development_dependency "pry-byebug"

guide/lib/examples/pagination_helpers.rb

@@ -4,7 +4,7 @@
 # links expect a Rack request.
 module Pagy::UrlHelpers
   def request
-    OpenStruct.new(GET: {}, session: nil, host: "https://somesite/")
+    OpenStruct.new(GET: {}, session: nil, host: "https://somesite/", format: OpenStruct.new(html?: true))
   end
 end
 

spec/components/govuk_component/header_component_spec.rb

@@ -3,7 +3,9 @@
 RSpec.describe(GovukComponent::HeaderComponent, type: :component) do
   before do
     allow_any_instance_of(GovukComponent::HeaderComponent::NavigationItem).to(
-      receive(:request).and_return(double(ActionDispatch::Request, get?: true, path: current_page))
+      receive(:current_page?).and_wrap_original do |_original_method, path|
+        path == current_page
+      end
     )
   end
 

spec/spec_helper.rb

@@ -21,7 +21,7 @@
 
 module Pagy::UrlHelpers
   def request
-    OpenStruct.new(GET: {}, session: nil, host: "https://somesite/")
+    OpenStruct.new(GET: {}, session: nil, host: "https://somesite/", format: OpenStruct.new(html?: true))
   end
 end