chore(deps): update dependency sidekiq-cron to v2.4.0 [security]

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
sidekiq-cron (source)	2.2.0 → 2.4.0

---

Sidekiq-cron is vulnerable to a cross-site scripting (xss) vulnerability via crafted URL

CVE-2025-67202 / GHSA-xv9c-mjw8-79gf

More information

Details

Sidekiq-cron thru 2.3.1, an open-source scheduling add-on for Sidekiq, is vulnerable to a cross-site scripting (xss) vulnerability via crafted URL being rended from cron.erb.

Severity

• CVSS Score: 6.1 / 10 (Medium)
• Vector String: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

References

• https://nvd.nist.gov/vuln/detail/CVE-2025-67202
• https://github.com/sidekiq-cron/sidekiq-cron/issues/569
• https://github.com/sidekiq-cron/sidekiq-cron/releases/tag/v2.4.0
• https://github.com/sidekiq-cron/sidekiq-cron/pull/568
• https://github.com/sidekiq-cron/sidekiq-cron/commit/7b4ae4822f93ef4646f5cb55500ca4e25662db7c
• https://github.com/advisories/GHSA-xv9c-mjw8-79gf

This data is provided by the GitHub Advisory Database (CC-BY 4.0).

---

Release Notes

ondrejbartas/sidekiq-cron (sidekiq-cron)

v2.4.0

Compare Source

• Fix reflected XSS on Sidekiq-UI (sidekiq-cron#568)
• Add cron_process_count_override config option (sidekiq-cron#572)
• Fix Spanish translation for enabled/disabled states (sidekiq-cron#575)
• Allow to conditionally disable Sidekiq-Cron (sidekiq-cron#574)

v2.3.1

Compare Source

• Fix manually launch enqueue job not working from web UI (sidekiq-cron#564)

v2.3.0

Compare Source

• WARNING The default value for available_namespaces has changed from nil to [default_namespace]. Please refer to the migration guide for further details (sidekiq-cron#552)
• Fix deprecation warning for using raw params in WEB extension (sidekiq-cron#547)
• Allow for sidekiq embedded configuration (sidekiq-cron#549)
• Load schedule file within sidekiq callback (sidekiq-cron#550)
• Fix missing default namespace if namespaces are explicitly provided (sidekiq-cron#551)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • ""
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.