Update http requirement from >= 2.0, < 5.0 to >= 2.0, < 6.0

[dependabot[bot]]

Updates the requirements on http to permit the latest version.

Changelog

Sourced from http's changelog.

4.0.0 (2018-10-15)

• #482 #499 Introduce new features injection API with 2 new feaures: instrumentation (compatible with ActiveSupport::Notification) and logging. ([@​paul])

• #473 Handle early responses. ([@​janko-m])

• #468 Rewind HTTP::Request::Body#source once #each is complete. ([@​ixti])

• #467 Drop Ruby 2.2 support. ([@​ixti])

• #436 Raise ConnectionError when writing to socket fails. ([@​janko-m])

• #438 Expose HTTP::Request::Body#source. ([@​janko-m])

• #446 Simplify setting a timeout. ([@​mikegee])

• #451 Reduce memory usage when reading response body. ([@​janko-m])

• #458 Extract HTTP::Client#build_request method. ([@​tycoon])

• #462 Fix HTTP::Request#headline to allow two leading slashes in path. ([@​scarfacedeb])

• #454 #464 #384 Fix #readpartial not respecting max length argument. ([@​janko-m], [@​marshall-lee])

... (truncated)

Commits

• 2dd9161 Release v4.0.0
• 7c2a861 Fix rubocop issues because a line moved
• 648f4b3 Make feature load-order less janky
• 18c856c Add AS::Notifications-compatible instrument feature
• 8514b41 Add a logging feature
• 6099c74 Add a mechanism to register new features
• da68f40 Merge pull request #482 from paul/feature/generic-features
• 5ff08ae CompressedBody works just like a regular Request::Body
• 539409c Refactor AutoInflate/Deflate into generic features
• 6766730 README.md: Add more obvious 'Documentation' link
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[robbkidd]

@dependabot rebase