Bump puma from 4.3.6 to 5.3.0

[dependabot-preview[bot]]

Bumps puma from 4.3.6 to 5.3.0.

Release notes

Sourced from puma's releases.

5.2.2

• Bugfixes
  • Add #flush and #sync methods to Puma::NullIO (#2553)
  • Restore sync=true on STDOUT and STDERR streams (#2557)

5.2.1

2021-02-05

• Bugfixes
  • Fix TCP cork/uncork operations to work with ssl clients (#2550)
  • Require rack/common_logger explicitly if :verbose is true (#2547)
  • MiniSSL::Socket#write - use data.byteslice(wrote..-1) (#2543)
  • Set @env[CONTENT_LENGTH] value as string. (#2549)

5.2.0

• Features

  • 10x latency improvement for MRI on ssl connections by reducing overhead (#2519)
  • Add option to specify the desired IO selector backend for libev (#2522)
  • Add ability to set OpenSSL verification flags (MRI only) (#2490)
  • Uses flush after writing messages to avoid mutating $stdout and $stderr using sync=true (#2486)

• Bugfixes

  • MiniSSL - Update dhparam to 2048 bit for use with SSL_CTX_set_tmp_dh (#2535)
  • Change 'Goodbye!' message to be output after listeners are closed (#2529)
  • Fix ssl bind logging with 0.0.0.0 and localhost (#2533)
  • Fix compiler warnings, but skipped warnings related to ragel state machine generated code (#1953)
  • Fix phased restart errors related to nio4r gem when using the Puma control server (#2516)
  • Add #string method to Puma::NullIO (#2520)
  • Fix binding via Rack handler to IPv6 addresses (#2521)

• Refactor

  • Refactor MiniSSL::Context on MRI, fix MiniSSL::Socket#write (#2519)
  • Remove Server#read_body (#2531)
  • Fail build if compiling extensions raises warnings on GH Actions, configurable via MAKE_WARNINGS_INTO_ERRORS (#1953)

5.1.1

• Bugfixes
  • Fix over eager matching against banned header names (#2510)

5.1.0 / 2020-11-30

• Features
  • Phased restart availability is now always logged, even if it is not available.
  • Prints the loaded configuration if the environment variable PUMA_LOG_CONFIG is present (#2472)
  • Integrate with systemd's watchdog and notification features (#2438)
  • Adds max_fast_inline as a configuration option for the Server object (#2406)
  • You can now fork workers from worker 0 using SIGURG w/o fork_worker enabled #2449
  • Add option to bind to systemd activated sockets (#2362)
  • Add compile option to change the QUERY_STRING max length (#2485)

... (truncated)

Changelog

Sourced from puma's changelog.

5.3.0 / 2021-05-07

• Features

  • Add support for Linux's abstract sockets (#2564, #2526)
  • Add debug to worker timeout and startup (#2559, #2528)
  • Print warning when running one-worker cluster (#2565, #2534)
  • Don't close systemd activated socket on pumactl restart (#2563, #2504)

• Bugfixes

  • systemd - fix event firing (#2591, #2572)
  • Immediately unlink temporary files (#2613)
  • Improve parsing of HTTP_HOST header (#2605, #2584)
  • Handle fatal error that has no backtrace (#2607, #2552)
  • Fix timing out requests too early (#2606, #2574)
  • Handle segfault in Ruby 2.6.6 on thread-locals (#2567, #2566)
  • Server#closed_socket? - parameter may be a MiniSSL::Socket (#2596)
  • Define UNPACK_TCP_STATE_FROM_TCP_INFO in the right place (#2588, #2556)
  • request.rb - fix chunked assembly for ascii incompatible encodings, add test (#2585, #2583)

• Performance

  • Reset peerip only if remote_addr_header is set (#2609)
  • Reduce puma_parser struct size (#2590)

• Refactor

  • Refactor drain on shutdown (#2600)
  • Micro optimisations in wait_for_less_busy_worker feature (#2579)
  • Lots of test fixes

5.2.2 / 2021-02-22

• Bugfixes
  • Add #flush and #sync methods to Puma::NullIO (#2553)
  • Restore sync=true on STDOUT and STDERR streams (#2557)

5.2.1 / 2021-02-05

• Bugfixes
  • Fix TCP cork/uncork operations to work with ssl clients (#2550)
  • Require rack/common_logger explicitly if :verbose is true (#2547)
  • MiniSSL::Socket#write - use data.byteslice(wrote..-1) (#2543)
  • Set @env[CONTENT_LENGTH] value as string. (#2549)

5.2.0 / 2021-01-27

• Features
  • 10x latency improvement for MRI on ssl connections by reducing overhead (#2519)
  • Add option to specify the desired IO selector backend for libev (#2522)
  • Add ability to set OpenSSL verification flags (MRI only) (#2490)
  • Uses flush after writing messages to avoid mutating $stdout and $stderr using sync=true (#2486)

... (truncated)

Commits

• 6dfb8bc 5.3.0 history (#2622)
• fb71323 Ignore DS_Store
• f7a2d4e systemd - fix event firing (#2591)
• 2654f02 Bump version to 5.3.0 [ci skip] (#2616)
• cc1768e Few documentations fixes. [ci skip] [changelog skip] (#2619)
• ff17194 Refactor drain on shutdown (#2600)
• 3e80f7c fix some spell errors (#2615)
• 0e63c68 Link to classes in the architecture docs. (#2614)
• e870ab6 Immediately unlink temporary files (#2613)
• 01ffec5 reset peerip only if remote_addr_header is set (#2609)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot badge me` will comment on this PR with code to add a "Dependabot enabled" badge to your readme Additionally, you can set the following in the `.dependabot/config.yml` file in this repo: - Update frequency - Automerge options (never/patch/minor, and dev/runtime dependencies) - Out-of-range updates (receive only lockfile updates, if desired) - Security updates (receive only security updates, if desired)

[dependabot-preview[bot]]

Superseded by #527.