Upgrade puma: 3.9.1 → 4.3.0 (major)

[depfu[bot]]

Here is everything you need to know about this upgrade. Please take a good look at what changed and the test results before merging this pull request.

What changed?

✳️ puma (3.9.1 → 4.3.0) · Repo · Changelog

Release Notes

4.3.0

Mysterious Traveller

• Features

  • Strip whitespace at end of HTTP headers (#2010)
  • Optimize HTTP parser for JRuby (#2012)
  • Add SSL support for the control app and cli (#2046, #2052)

• Bugfixes

  • Fix Errno::EINVAL when SSL is enabled and browser rejects cert (#1564)
  • Fix pumactl defaulting puma to development if an environment was not specified (#2035)
  • Fix closing file stream when reading pid from pidfile (#2048)
  • Fix a typo in configuration option --extra_runtime_dependencies (#2050)

4.2.1

• 3 bugfixes
  • Fix socket activation of systemd (pre-existing) unix binder files (#1842, #1988)
  • Deal with multiple calls to bind correctly (#1986, #1994, #2006)
  • Accepts symbols for verify_mode (#1222)

4.2.0

• 6 features
  • Pumactl has a new -e environment option and reads config/puma/.rb config files (#1885)
  • Semicolons are now allowed in URL paths (MRI only), useful for Angular or Redmine (#1934)
  • Allow extra dependencies to be defined when using prune_bundler (#1105)
  • Puma now reports the correct port when binding to port 0, also reports other listeners when binding to localhost (#1786)
  • Sending SIGINFO to any Puma worker now prints currently active threads and their backtraces (#1320)
  • Puma threads all now have their name set on Ruby 2.3+ (#1968)
• 4 bugfixes
  • Fix some misbehavior with phased restart and externally SIGTERMed workers (#1908, #1952)
  • Fix socket closing on error (#1941)
  • Removed unnecessary SIGINT trap for JRuby that caused some race conditions (#1961)
  • Fix socket files being left around after process stopped (#1970)
• Absolutely thousands of lines of test improvements and fixes thanks to @MSP-Greg

4.1.1

3 bugfixes

• Revert our attempt to not dup STDOUT/STDERR (#1946)
• Fix socket close on error (#1941)
• Fix workers not shutting down correctly (#1908)

4.1.0

• 4 features

  • Add REQUEST_PATH on parse error message (#1831)
  • You can now easily add custom log formatters with the log_formatter config option (#1816)
  • Puma.stats now provides process start times (#1844)
  • Add support for disabling TLSv1.1 (#1836)

• 7 bugfixes

  • Fix issue where Puma was creating zombie process entries (#1887)
  • Fix bugs with line-endings and chunked encoding (#1812)
  • RACK_URL_SCHEME is now set correctly in all conditions (#1491)
  • We no longer mutate global STDOUT/STDERR, particularly the sync setting (#1837)
  • SSL read_nonblock no longer blocks (#1857)
  • Swallow connection errors when sending early hints (#1822)
  • Backtrace no longer dumped when invalid pumactl commands are run (#1863)

• 5 other

  • Avoid casting worker_timeout twice (#1838)
  • Removed a call to private that wasn't doing anything (#1882)
  • README, Rakefile, docs and test cleanups (#1848, #1847, #1846, #1853, #1859, #1850, #1866, #1870, #1872, #1833, #1888)
  • Puma.io has proper documentation now (https://puma.io/puma/)
  • Added the Contributor Covenant CoC

• 1 known issue

  • Some users are still experiencing issues surrounding socket activation and Unix sockets (#1842)

Codename: Fourth and One

4.0.1

• 2 bugfixes
  • Fix socket removed after reload - should fix problems with systemd socket activation. (#1829)
  • Add extconf tests for DTLS_method & TLS_server_method, use in minissl.rb. Should fix "undefined symbol: DTLS_method" when compiling against old OpenSSL versions. (#1832)
• 1 other
  • Removed unnecessary RUBY_VERSION checks. (#1827)

4.0.0

9 feature

• Add support for disabling TLSv1.0 (#1562)
• Request body read time metric (#1569)
• Add out_of_band hook (#1648)
• Re-implement (native) IOBuffer for JRuby (#1691)
• Min worker timeout (#1716)
• Add option to suppress SignalException on SIGTERM (#1690)
• Allow mutual TLS CA to be set using ssl_bind DSL (#1689)
• Reactor now uses nio4r instead of select (#1728)

9 bugfixes

• Do not accept new requests on shutdown (#1685, #1808)
• Fix 3 corner cases when request body is chunked (#1508)
• Change pid existence check's condition branches (#1650)
• Don't call .stop on a server that doesn't exist (#1655)
• Implemented NID_X9_62_prime256v1 (P-256) curve over P-521 (#1671)
• Fix @notify.close can't modify frozen IOError (RuntimeError) (#1583)
• Fix Java 8 support (#1773)
• Fix error uninitialized constant Puma::Cluster (#1731)
• Fix not_token being able to be set to true (#1803)

3.12.1

v3.12.1

3.11.0

• 2 features:

  • HTTP 103 Early Hints (#1403)
  • 421/451 status codes now have correct status messages attached (#1435)

• 9 bugfixes:

  • Environment config files (/config/puma/.rb) load correctly (#1340)
  • Specify windows dependencies correctly (#1434, #1436)
  • puma/events required in test helper (#1418)
  • Correct control CLI's option help text (#1416)
  • Remove a warning for unused variable in mini_ssl (#1409)
  • Correct pumactl docs argument ordering (#1427)
  • Fix an uninitialized variable warning in server.rb (#1430)
  • Fix docs typo/error in Launcher init (#1429)
  • Deal with leading spaces in RUBYOPT (#1455)

• 2 other:

  • Add docs about internals (#1425, #1452)
  • Tons of test fixes from @MSP-Greg (#1439, #1442, #1464)

3.10.0

• 3 features:

  • The status server has a new /gc and /gc-status command. (#1384)
  • The persistent and first data timeouts are now configurable (#1111)
  • Implemented RFC 2324 (#1392)

• 12 bugfixes:

  • Not really a Puma bug, but @NickolasVashchenko created a gem to workaround a Ruby bug that some users of Puma may be experiencing. See README for more. (#1347)
  • Fix hangups with SSL and persistent connections. (#1334)
  • Fix Rails double-binding to a port (#1383)
  • Fix incorrect thread names (#1368)
  • Fix issues with /etc/hosts and JRuby where localhost addresses were not correct. (#1318)
  • Fix compatibility with RUBYOPT="--enable-frozen-string-literal" (#1376)
  • Fixed some compiler warnings (#1388)
  • We actually run the integration tests in CI now (#1390)
  • No longer shipping unnecessary directories in the gemfile (#1391)
  • If RUBYOPT is nil, we no longer blow up on restart. (#1385)
  • Correct response to SIGINT (#1377)
  • Proper exit code returned when we receive a TERM signal (#1337)

• 3 refactors:

  • Various test improvements from @grosser
  • Rubocop (#1325)
  • Hoe has been removed (#1395)

• 1 known issue:

  • Socket activation doesn't work in JRuby. Their fault, not ours. (#1367)

Does any of this look wrong? Please let us know.

Commits

See the full diff on Github. The new version differs by more commits than we can show here.

---

Depfu will automatically keep this PR conflict-free, as long as you don't add any commits to this branch yourself. You can also trigger a rebase manually by commenting with @depfu rebase.

All Depfu comment commands

@​depfu rebase

Rebases against your default branch and redoes this update

@​depfu merge

Merges this PR once your tests are passing and conflicts are resolved

@​depfu close

Closes this PR and deletes the branch

@​depfu reopen

Restores the branch and reopens this PR (if it's closed)

@​depfu pause

Ignores all future updates for this dependency and closes this PR

@​depfu pause [minor|major]

Ignores all future minor/major updates for this dependency and closes this PR

@​depfu resume

Future versions of this dependency will create PRs again (leaves this PR as is)

[depfu[bot]]

Closed in favor of #173.