Bump passenger from 6.0.20 to 6.0.22

[dependabot]

Bumps passenger from 6.0.20 to 6.0.22.

Release notes

Sourced from passenger's releases.

Release 6.0.22

• [RPM] Fix dependency on selinux-policy. Closes GH-2545.
• Fix Amazon Linux detection. Closes GH-3296.

Release 6.0.21

• [Python] Fix version of Python when imp module is replaced with importlib. Contributed by Grigory Ponomarenko.
• [Ubuntu] Remove packages for Ubuntu 23.10 "mantic".
• [Nginx] Upgrades preferred Nginx to 1.26.0 from 1.24.0.
• [Nginx] Switch to using PCRE2 instead of PCRE.
• [RPM] The Passenger Nginx module rpm package for EL9 (RHEL, Rocky, Alma) will now require Nginx 1.24.0 as per the policy of supporting the newest Nginx module stream available.
• [Standalone] Fixes security update checker with builtin engine.
• [Enterprise] Ability to enforce hard memory limits on application processes (PassengerHardMemoryLimit/passenger_hard_memory_limit/`--hard-memory-limit``). Unlike the soft memory limit, the hard memory limit doesn't wait for the request to finish. Useful for preventing high memory usage from taking down the entire machine or container.
• [Enterprise] Ability to throttle memory metrics collection (PassengerAnalyticsCollectionRate/passenger_analytics_collection_rate). This allows you to control the frequency that Passenger Enterpprise measures the app memory use at.
• Swaps http-parser for llhttp.
• Fixes crash-watch hanging when lldb is used as backend.
• Fixes Apache module unload crash due to not properly cleaning up all threads.
• Workaround compilation error on clang on x86_64.
• Upgrades Boost from 1.83 -> 1.85.
• Updated various library versions used in precompiled binaries (used for e.g. gem installs):
  • ccache: 4.6.3 -> 4.9.1
  • cmake: 3.28.1 -> 3.29.3
  • curl: 8.5.0 -> 8.7.1
  • git: 2.43.0 -> 2.45.0
  • gnupg: 2.4.3 -> 2.4.5
  • libassuan: 2.5.6 -> 2.5.7
  • libffi: 3.4.4 -> 3.4.6
  • libgpg_error: 1.47 -> 1.49
  • libksba: 1.6.5 -> 1.6.6
  • libpsl: 0.21.5
  • npth: 1.6 -> 1.7
  • openssl: 3.2.0 -> 3.3.0
  • pcre2: 10.42 -> 10.43
  • pinentry: 1.2.1 -> 1.3.0
  • rubygems: 3.5.4 -> 3.5.10
  • zlib: 1.3 -> 1.3.1
  • zstd: 1.5.5 -> 1.5.6
  • rubies:
    • 3.0.6 -> 3.0.7
    • 3.1.4 -> 3.1.5
    • 3.2.3 -> 3.2.4
    • 3.3.0 -> 3.3.1

Changelog

Sourced from passenger's changelog.

Release 6.0.22

• [RPM] Fix dependency on selinux-policy. Closes GH-2545.
• Fix Amazon Linux detection. Closes GH-3296.

Release 6.0.21

• [Python] Fix version of Python when imp module is replaced with importlib. Contributed by Grigory Ponomarenko.
• [Ubuntu] Remove packages for Ubuntu 23.10 "mantic".
• [Nginx] Upgrades preferred Nginx to 1.26.0 from 1.24.0.
• [Nginx] Switch to using PCRE2 instead of PCRE.
• [RPM] The Passenger Nginx module rpm package for EL9 (RHEL, Rocky, Alma) will now require Nginx 1.24.0 as per the policy of supporting the newest Nginx module stream available.
• [Standalone] Fixes security update checker with builtin engine.
• [Enterprise] Ability to enforce hard memory limits on application processes (PassengerHardMemoryLimit/passenger_hard_memory_limit/`--hard-memory-limit``). Unlike the soft memory limit, the hard memory limit doesn't wait for the request to finish. Useful for preventing high memory usage from taking down the entire machine or container.
• [Enterprise] Ability to throttle memory metrics collection (PassengerAnalyticsCollectionRate/passenger_analytics_collection_rate). This allows you to control the frequency that Passenger Enterprise measures the app memory use at.
• Swaps http-parser for llhttp.
• Fixes crash-watch hanging when lldb is used as the backend.
• Fixes Apache module unload crash due to not properly cleaning up all threads.
• Workaround compilation error on clang on x86_64.
• Upgrades Boost from 1.83 -> 1.85.
• Updated various library versions used in precompiled binaries (used for e.g. gem installs):
  • ccache: 4.6.3 -> 4.9.1
  • cmake: 3.28.1 -> 3.29.3
  • curl: 8.5.0 -> 8.7.1
  • git: 2.43.0 -> 2.45.0
  • gnupg: 2.4.3 -> 2.4.5
  • libassuan: 2.5.6 -> 2.5.7
  • libffi: 3.4.4 -> 3.4.6
  • libgpg_error: 1.47 -> 1.49
  • libksba: 1.6.5 -> 1.6.6
  • libpsl: 0.21.5
  • npth: 1.6 -> 1.7
  • openssl: 3.2.0 -> 3.3.0
  • pcre2: 10.42 -> 10.43
  • pinentry: 1.2.1 -> 1.3.0
  • rubygems: 3.5.4 -> 3.5.10
  • zlib: 1.3 -> 1.3.1
  • zstd: 1.5.5 -> 1.5.6
  • rubies:
    • 3.0.6 -> 3.0.7
    • 3.1.4 -> 3.1.5
    • 3.2.3 -> 3.2.4
    • 3.3.0 -> 3.3.1

Commits

• 81e3516 match upstream homebrew
• d1a8b6a mention fix for selinux-policy
• cf81a77 fix host os detection on amazon linux
• 4556ae2 post-release tasks
• a92fb74 changelog wording
• d5b05f2 mention new metrics rate config in changelog
• 894466d fix nginx version in test script
• 978aecb bump binary automation deps
• 58592fd don’t mention noble, it’s blocked on upstream issues
• 597c887 disable noble for now
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)