Bump puma from 3.12.1 to 4.0.1

[dependabot-preview]

Bumps puma from 3.12.1 to 4.0.1.

Release notes

Sourced from puma's releases.

v4.0.1

• 2 bugfixes
  • Fix socket removed after reload - should fix problems with systemd socket activation. (#1829)
  • Add extconf tests for DTLS_method & TLS_server_method, use in minissl.rb. Should fix "undefined symbol: DTLS_method" when compiling against old OpenSSL versions. (#1832)
• 1 other
  • Removed unnecessary RUBY_VERSION checks. (#1827)

v4.0.0 - 4 Fast 4 Furious

9 feature

• Add support for disabling TLSv1.0 (#1562)
• Request body read time metric (#1569)
• Add out_of_band hook (#1648)
• Re-implement (native) IOBuffer for JRuby (#1691)
• Min worker timeout (#1716)
• Add option to suppress SignalException on SIGTERM (#1690)
• Allow mutual TLS CA to be set using ssl_bind DSL (#1689)
• Reactor now uses nio4r instead of select (#1728)

9 bugfixes

• Do not accept new requests on shutdown (#1685, #1808)
• Fix 3 corner cases when request body is chunked (#1508)
• Change pid existence check's condition branches (#1650)
• Don't call .stop on a server that doesn't exist (#1655)
• Implemented NID_X9_62_prime256v1 (P-256) curve over P-521 (#1671)
• Fix @​notify.close can't modify frozen IOError (RuntimeError) (#1583)
• Fix Java 8 support (#1773)
• Fix error uninitialized constant Puma::Cluster (#1731)
• Fix not_token being able to be set to true (#1803)

Changelog

Sourced from puma's changelog.

4.0.1 / 2019-07-11

• 2 bugfixes
  • Fix socket removed after reload - should fix problems with systemd socket activation. (#1829)
  • Add extconf tests for DTLS_method & TLS_server_method, use in minissl.rb. Should fix "undefined symbol: DTLS_method" when compiling against old OpenSSL versions. (#1832)
• 1 other
  • Removed unnecessary RUBY_VERSION checks. (#1827)

4.0.0 / 2019-06-25

• 9 features

  • Add support for disabling TLSv1.0 (#1562)
  • Request body read time metric (#1569)
  • Add out_of_band hook (#1648)
  • Re-implement (native) IOBuffer for JRuby (#1691)
  • Min worker timeout (#1716)
  • Add option to suppress SignalException on SIGTERM (#1690)
  • Allow mutual TLS CA to be set using ssl_bind DSL (#1689)
  • Reactor now uses nio4r instead of select (#1728)
  • Add status to pumactl with pidfile (#1824)

• 9 bugfixes

  • Do not accept new requests on shutdown (#1685, #1808)
  • Fix 3 corner cases when request body is chunked (#1508)
  • Change pid existence check's condition branches (#1650)
  • Don't call .stop on a server that doesn't exist (#1655)
  • Implemented NID_X9_62_prime256v1 (P-256) curve over P-521 (#1671)
  • Fix @​notify.close can't modify frozen IOError (RuntimeError) (#1583)
  • Fix Java 8 support (#1773)
  • Fix error uninitialized constant Puma::Cluster (#1731)
  • Fix not_token being able to be set to true (#1803)

Commits

• 1c9da36 4.0.1 notes and version change (#1840)
• 3b48d32 fix #1775 (#1829)
• 1814008 Use OpenSSL DTLS_method & TLS_server_method when available (#1832)
• 12d1706 Add missing feature to history on v4.0.0 (#1830)
• a2cc053 Remove RUBY_VERSION checks (#1827)
• 38d9625 Merge pull request #1826 from jmreid/patch-1
• 6d55a29 Clean up 4.0.0 changelog
• 51a952b Remove extra character
• f5d7600 Merge pull request #1825 from schneems/schneems/v4.0.0
• 3cad382 v4.0.0
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot ignore this [patch|minor|major] version will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it). To ignore the version in this PR you can just close it
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
• @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

• Update frequency (including time of day and day of week)
• Automerge options (never/patch/minor, and dev/runtime dependencies)
• Pull request limits (per update run and/or open at any time)
• Out-of-range updates (receive only lockfile updates, if desired)
• Security updates (receive only security updates, if desired)

Finally, you can contact us by mentioning @dependabot.

[coveralls]

Coverage decreased (-37.2%) to 62.821% when pulling e80710c on dependabot/bundler/puma-4.0.1 into b3d5f05 on master.

[dependabot-preview]

Superseded by #85.