Unpin addressable in customerio.gemspec

[olleolleolle]

This PR unpins the specific dependency addressable, to allow 2.9+.

To use the gem from this branch, you can:

gem "customerio", github: "olleolleolle/customerio-ruby", ref: "patch-1" # LOCKED: When https://github.com/customerio/customerio-ruby/pull/124 is merged and released, we can drop this and use the released version of customerio. # https://github.com/customerio/customerio-ruby

---

Note

Low Risk
Low risk dependency change limited to the gemspec; main risk is unexpected behavior changes if consumers resolve a newer addressable version.

Overview
Relaxes the addressable runtime dependency constraint in customerio.gemspec from ~> 2.8.0 to ~> 2.8, allowing bundlers to pick up newer compatible addressable releases (e.g., 2.9.x) without changing any library code.

^{Reviewed by Cursor Bugbot for commit cf1b2a0. Bugbot is set up for automated code reviews on this repo. Configure here.}

[chuttam]

Yup. This prevents anyone using customerio 's ruby gem from remediating this CVE.

[FraDim]

CC @clabland