Bump bullet from 7.1.6 to 8.0.6

[dependabot]

Bumps bullet from 7.1.6 to 8.0.6.

Changelog

Sourced from bullet's changelog.

8.0.6 (05/07/2025)

• Add CSP nonce for footer styles as well
• Add support for OpenTelemetry reporting

8.0.5 (04/21/2025)

• Properly insert ContentSecurityPolicy middleware
• Properly parse query string

8.0.4 (04/18/2025)

• Insert bullet middleware before ContentSecurityPolicy
• Support url query skip_html_injection=true
• Mark object as impossible after updating inversed

8.0.3 (04/04/2025)

• Update non persisted inversed_objects

8.0.2 (04/02/2025)

• Do not cache bullet_key if object is not persisted

8.0.1 (02/10/2025)

• Update benchmark to use sqlite
• Reduce mem allocations
• Require active_support's inflections module before requiring the delegation module

8.0.0 (11/10/2024)

• Support Rails 8
• Drop Rails 4.0 and 4.1 support
• Require Ruby at least 2.7.0
• Store global objects into thread-local variables
• Avoid globally polluting ::String and ::Object classes

7.2.0 (07/12/2024)

• Support Rails 7.2
• Fix count method signature for active_record5 and active_record60

Commits

• 293694b Bumping version to 8.0.6
• da9c70f remove unused focus in spce code
• da89d8e Auto corrected by following Format Ruby Code
• 5b42b44 Merge pull request #746 from vincentjoseph/csp_style_management
• e9ceb62 Add CSP nonce for footer styles as well
• 3805427 Merge pull request #745 from dmathieu/document-otel
• 5c53614 document the uniform notifier support of otel
• d6df5fa Bumping version to 8.0.5
• 4c484a3 check api_only config before insert middleware
• 5723105 properly parse query string
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)