Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

build(deps): bump puma and capistrano3-puma #27

Merged

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 9, 2023

Bumps puma and capistrano3-puma. These dependencies needed to be updated together.
Updates puma from 5.6.7 to 6.4.0

Release notes

Sourced from puma's releases.

6.4.0 - The Eagle of Durango

image

America is #1 in professional cycling, baby!

  • Features

    • on_thread_exit hook (#2920)
    • on_thread_start_hook (#3195)
    • Shutdown on idle (#3209, #2580)
    • New error message when control server port taken (#3204)
  • Refactor

    • Remove Forwardable dependency (#3191, #3190)
    • Update URLMap Regexp usage for Ruby v3.3 (#3165)
  • Bugfixes

    • Bring the cert_pem: parameter into parity with the cert: parameter to ssl_bind. (#3174)
    • Fix using control server with IPv6 host (#3181)
    • control_cli.rb - add require_relative 'log_writer' (#3187)
    • Fix cases where fallback Rack response wasn't sent to the client (#3094)

6.3.1

  • Security
    • Address HTTP request smuggling vulnerabilities with zero-length Content Length header and trailer fields (GHSA-68xg-gqqm-vgj8)

6.3.0 - Mugi No Toki Itaru

image

Japan has 72 traditional microseasons. May 31 is the first day of 麦秋至, which means the time of the wheat/barley harvest.

  • Features

    • Add dsl method supported_http_methods (#3106, #3014)
    • Puma error responses no longer have any fingerprints to indicate Puma (#3161, #3037)
    • Support decryption of SSL key (#3133, #3132)
  • Bugfixes

    • Don't send 103 early hints response when only invalid headers are used (#3163)
    • Handle malformed request path (#3155, #3148)
    • Misc lib file fixes - trapping additional errors, CI helper (#3129)
    • Fixup req form data file upload with "r\n" line endings (#3137)
    • Restore rack 1.6 compatibility (#3156)
  • Refactor

    • const.rb - Update Puma::HTTP_STATUS_CODES (#3162)
    • Clarify Reactor#initialize (#3151)

New Contributors

... (truncated)

Changelog

Sourced from puma's changelog.

6.4.0 / 2023-09-21

  • Features

    • on_thread_exit hook (#2920)
    • on_thread_start_hook (#3195)
    • Shutdown on idle (#3209, #2580)
    • New error message when control server port taken (#3204)
  • Refactor

    • Remove Forwardable dependency (#3191, #3190)
    • Update URLMap Regexp usage for Ruby v3.3 (#3165)
  • Bugfixes

    • Bring the cert_pem: parameter into parity with the cert: parameter to ssl_bind. (#3174)
    • Fix using control server with IPv6 host (#3181)
    • control_cli.rb - add require_relative 'log_writer' (#3187)
    • Fix cases where fallback Rack response wasn't sent to the client (#3094)

6.3.1 / 2023-08-18

  • Security
    • Address HTTP request smuggling vulnerabilities with zero-length Content Length header and trailer fields (GHSA-68xg-gqqm-vgj8)

6.3.0 / 2023-05-31

  • Features

    • Add dsl method supported_http_methods (#3106, #3014)
    • Puma error responses no longer have any fingerprints to indicate Puma (#3161, #3037)
    • Support decryption of SSL key (#3133, #3132)
  • Bugfixes

    • Don't send 103 early hints response when only invalid headers are used (#3163)
    • Handle malformed request path (#3155, #3148)
    • Misc lib file fixes - trapping additional errors, CI helper (#3129)
    • Fixup req form data file upload with "r\n" line endings (#3137)
    • Restore rack 1.6 compatibility (#3156)
  • Refactor

    • const.rb - Update Puma::HTTP_STATUS_CODES (#3162)
    • Clarify Reactor#initialize (#3151)

6.2.2 / 2023-04-17

  • Bugfixes
    • Fix Rack-related NameError by adding :: operator (#3118, #3117)

6.2.1 / 2023-03-31

  • Bugfixes

... (truncated)

Commits

Updates capistrano3-puma from 5.2.0 to 1.2.1

Changelog

Sourced from capistrano3-puma's changelog.

5.2.0 (2021-09-11)

Full Changelog

Merged pull requests:

  • Add option for phased restart of puma #333 (phylor)

v5.1.1 (2021-09-03)

Full Changelog

Merged pull requests:

v5.1.0 (2021-09-02)

Full Changelog

Merged pull requests:

v5.0.4 (2021-03-03)

Full Changelog

Merged pull requests:

v5.0.3 (2021-02-23)

Full Changelog

Merged pull requests:

  • update systemd template accept puma_service_unit_env_file and puma_se… #315 (iscreen)
  • Remove ExecStop from systemd unit file #314 (w-leads)
  • Default systemd service name on multi-app host #309 (bendilley)
  • Systemd user service manager and lingering #307 (farnsworth)
  • Update nginx template to support X-Forwarded-Proto and remove executables from *.erb files #283 (dapi)

v5.0.2 (2020-12-07)

Full Changelog

... (truncated)

Commits
  • 0f31b00 version bump
  • 64fa3bf Merge pull request #124 from MrToastyToast/fix_for_roles_wrong_aruments
  • 01ea28a Added fix for wrong arguments
  • 25d1801 Merge pull request #122 from seuros/puma_user
  • 5ed26d9 refactor the puma user logic
  • 13a0677 rename takes from cap to rake
  • 000e961 update copyright
  • d41dc2e Merge pull request #117 from mcb/mcb/add-support-for-puma-user
  • 4a76e49 Merge pull request #118 from hbin/master
  • 58ce7ad Don't need establish connection block if `puma_preload_app' set to false
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Oct 9, 2023
@EduardoSimon
Copy link
Owner

@dependabot rebase

@dependabot dependabot bot force-pushed the dependabot/bundler/puma-and-capistrano3-puma-6.4.0 branch 2 times, most recently from bae0f15 to 3a68b48 Compare October 15, 2023 11:28
@dependabot dependabot bot force-pushed the dependabot/bundler/puma-and-capistrano3-puma-6.4.0 branch 2 times, most recently from b910785 to 172f7be Compare October 21, 2023 17:19
Bumps [puma](https://github.com/puma/puma) and [capistrano3-puma](https://github.com/seuros/capistrano-puma). These dependencies needed to be updated together.

Updates `puma` from 5.6.7 to 6.4.0
- [Release notes](https://github.com/puma/puma/releases)
- [Changelog](https://github.com/puma/puma/blob/master/History.md)
- [Commits](puma/puma@v5.6.7...v6.4.0)

Updates `capistrano3-puma` from 5.2.0 to 1.2.1
- [Changelog](https://github.com/seuros/capistrano-puma/blob/master/CHANGELOG.md)
- [Commits](seuros/capistrano-puma@v5.2.0...v1.2.1)

---
updated-dependencies:
- dependency-name: puma
  dependency-type: direct:production
  update-type: version-update:semver-major
- dependency-name: capistrano3-puma
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/bundler/puma-and-capistrano3-puma-6.4.0 branch from 172f7be to 492881a Compare October 21, 2023 17:23
@EduardoSimon EduardoSimon merged commit f0e2365 into main Oct 21, 2023
2 checks passed
@EduardoSimon EduardoSimon deleted the dependabot/bundler/puma-and-capistrano3-puma-6.4.0 branch October 21, 2023 17:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file hacktoberfest
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant