Bump puma from 3.11.3 to 4.1.0

[dependabot-preview]

Bumps puma from 3.11.3 to 4.1.0.

Release notes

Sourced from puma's releases.

4.1.0 - Fourth and One

• 4 features

  • Add REQUEST_PATH on parse error message (#1831)
  • You can now easily add custom log formatters with the log_formatter config option (#1816)
  • Puma.stats now provides process start times (#1844)
  • Add support for disabling TLSv1.1 (#1836)

• 7 bugfixes

  • Fix issue where Puma was creating zombie process entries (#1887)
  • Fix bugs with line-endings and chunked encoding (#1812)
  • RACK_URL_SCHEME is now set correctly in all conditions (#1491)
  • We no longer mutate global STDOUT/STDERR, particularly the sync setting (#1837)
  • SSL read_nonblock no longer blocks (#1857)
  • Swallow connection errors when sending early hints (#1822)
  • Backtrace no longer dumped when invalid pumactl commands are run (#1863)

• 5 other

  • Avoid casting worker_timeout twice (#1838)
  • Removed a call to private that wasn't doing anything (#1882)
  • README, Rakefile, docs and test cleanups (#1848, #1847, #1846, #1853, #1859, #1850, #1866, #1870, #1872, #1833, #1888)
  • Puma.io has proper documentation now (https://puma.io/puma/)
  • Added the Contributor Covenant CoC

• 1 known issue

  • Some users are still experiencing issues surrounding socket activation and Unix sockets (#1842)

Codename: Fourth and One

v4.0.1

• 2 bugfixes
  • Fix socket removed after reload - should fix problems with systemd socket activation. (#1829)
  • Add extconf tests for DTLS_method & TLS_server_method, use in minissl.rb. Should fix "undefined symbol: DTLS_method" when compiling against old OpenSSL versions. (#1832)
• 1 other
  • Removed unnecessary RUBY_VERSION checks. (#1827)

v4.0.0 - 4 Fast 4 Furious

9 feature

• Add support for disabling TLSv1.0 (#1562)
• Request body read time metric (#1569)
• Add out_of_band hook (#1648)
• Re-implement (native) IOBuffer for JRuby (#1691)
• Min worker timeout (#1716)
• Add option to suppress SignalException on SIGTERM (#1690)
• Allow mutual TLS CA to be set using ssl_bind DSL (#1689)
• Reactor now uses nio4r instead of select (#1728)

9 bugfixes

• Do not accept new requests on shutdown (#1685, #1808)

... (truncated)

Changelog

Sourced from puma's changelog.

4.1.0 / 2019-08-08

• 4 features

  • Add REQUEST_PATH on parse error message (#1831)
  • You can now easily add custom log formatters with the log_formatter config option (#1816)
  • Puma.stats now provides process start times (#1844)
  • Add support for disabling TLSv1.1 (#1836)

• 7 bugfixes

  • Fix issue where Puma was creating zombie process entries (#1887)
  • Fix bugs with line-endings and chunked encoding (#1812)
  • RACK_URL_SCHEME is now set correctly in all conditions (#1491)
  • We no longer mutate global STDOUT/STDERR, particularly the sync setting (#1837)
  • SSL read_nonblock no longer blocks (#1857)
  • Swallow connection errors when sending early hints (#1822)
  • Backtrace no longer dumped when invalid pumactl commands are run (#1863)

• 5 other

  • Avoid casting worker_timeout twice (#1838)
  • Removed a call to private that wasn't doing anything (#1882)
  • README, Rakefile, docs and test cleanups (#1848, #1847, #1846, #1853, #1859, #1850, #1866, #1870, #1872, #1833, #1888)
  • Puma.io has proper documentation now (https://puma.io/puma/)
  • Added the Contributor Covenant CoC

• 1 known issue

  • Some users are still experiencing issues surrounding socket activation and Unix sockets (#1842)

4.0.1 / 2019-07-11

• 2 bugfixes
  • Fix socket removed after reload - should fix problems with systemd socket activation. (#1829)
  • Add extconf tests for DTLS_method & TLS_server_method, use in minissl.rb. Should fix "undefined symbol: DTLS_method" when compiling against old OpenSSL versions. (#1832)
• 1 other
  • Removed unnecessary RUBY_VERSION checks. (#1827)

4.0.0 / 2019-06-25

• 9 features

  • Add support for disabling TLSv1.0 (#1562)
  • Request body read time metric (#1569)
  • Add out_of_band hook (#1648)
  • Re-implement (native) IOBuffer for JRuby (#1691)
  • Min worker timeout (#1716)
  • Add option to suppress SignalException on SIGTERM (#1690)
  • Allow mutual TLS CA to be set using ssl_bind DSL (#1689)
  • Reactor now uses nio4r instead of select (#1728)
  • Add status to pumactl with pidfile (#1824)

• 9 bugfixes

  • Do not accept new requests on shutdown (#1685, #1808)

... (truncated)

Commits

• 736117c 4.1.0
• 6d80a09 Rm mistakenly committed config.ru, rubocop
• 287ae90 Parallelize http11 test
• ab4e1ba Failing/skipped test for #1890
• c6dab0a Final history update for 4.1
• b32de94 cluster.rb - no zombies (#1887)
• be13b96 Remove confusing private call (#1882)
• 3045f8c Remove example config reference from readme (#1888)
• 3ea2471 Merge pull request #1836 from MSP-Greg/openssl-updates
• 6dd084b Merge files documenting configuration options (#1883)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
• @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

• Update frequency (including time of day and day of week)
• Automerge options (never/patch/minor, and dev/runtime dependencies)
• Pull request limits (per update run and/or open at any time)
• Out-of-range updates (receive only lockfile updates, if desired)
• Security updates (receive only security updates, if desired)

Finally, you can contact us by mentioning @dependabot.

[dependabot-preview]

Superseded by #45.