Skip to content

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Dec 5, 2025

Bumps the bundler-production-dependencies group with 7 updates in the /src/email directory:

Package From To
puma 6.6.1 7.1.0
sinatra 4.1.1 4.2.1
rackup 2.2.1 2.3.1
google-protobuf 4.31.1 4.33.1
opentelemetry-sdk 1.8.0 1.10.0
opentelemetry-exporter-otlp 0.30.0 0.31.1
opentelemetry-instrumentation-all 0.78.0 0.89.1

Updates puma from 6.6.1 to 7.1.0

Release notes

Sourced from puma's releases.

v7.1.0

7.1.0 / 2025-10-16 - Neon Witch

neon_witch

  • Features

    • Introduce after_worker_shutdown hook (#3707)
    • Reintroduce keepalive "fast inline" behavior. Provides faster (8x on JRuby & 1.4x on Ruby) pipeline processing (#3794)
  • Bugfixes

    • Skip reading zero bytes when request body is buffered (#3795)
    • Fix PUMA_LOG_CONFIG=1 logging twice with prune_bundler enabled (#3778)
    • Fix prune_bundler not showing in PUMA_LOG_CONFIG=1 output (#3779)
    • Guard ThreadPool method call, which may be nil during shutdown (#3791, #3790)
    • Set Thread.current.puma_server in Thread init code, not every request (#3774)
    • Fix race condition while deleting pidfile (#3657)

New Contributors

Full Changelog: puma/puma@v7.0.4...v7.1.0

v7.0.4

What's Changed

New Contributors

Full Changelog: puma/puma@v7.0.3...v7.0.4

v7.0.3

7.0.3 / 2025-09-13

  • Performance

    • server.rb - process_client - add ka to todo if readable & complete (#3748)
  • Bugfixes

    • Convert PUMA_PERSISTENT_TIMEOUT to an Integer (#3749)

v7.0.2

What's Changed

... (truncated)

Changelog

Sourced from puma's changelog.

7.1.0 / 2025-10-16

  • Features

    • Introduce after_worker_shutdown hook (#3707)
    • Reintroduce keepalive "fast inline" behavior. Provides faster (8x on JRuby & 1.4x on Ruby) pipeline processing (#3794)
  • Bugfixes

    • Skip reading zero bytes when request body is buffered (#3795)
    • Fix PUMA_LOG_CONFIG=1 logging twice with prune_bundler enabled (#3778)
    • Fix prune_bundler not showing in PUMA_LOG_CONFIG=1 output (#3779)
    • Guard ThreadPool method call, which may be nil during shutdown (#3791, #3790)
    • Set Thread.current.puma_server in Thread init code, not every request (#3774)
    • Fix race condition while deleting pidfile (#3657)

7.0.4 / 2025-09-23

  • Bugfixes

    • Fix SSL_shutdown error handling (#3703)
    • Strip whitespace from the beginnings of request header values. (#3742)
  • Performance

    • puma_http11.c: Use interned UTF-8 strings for hash keys (#3754)
    • Move sleep cluster logic to its own class (#3746, #3740)

7.0.3 / 2025-09-13

  • Performance

    • server.rb - process_client - add ka to todo if readable & complete (#3748)
  • Bugfixes

    • Convert PUMA_PERSISTENT_TIMEOUT to an Integer (#3749)

7.0.2 / 2025-09-08

  • Bugfixes
    • bug: control_cli.rb - Fixup pumactl code to load puma.rb for deprecate_method_change (#3736, #3734)
    • Replace sleep spin lock with condition variable (#3729)
    • Fix Puma not booting if queue_requests disabled (#3731)

7.0.1 / 2025-09-06

  • Bugfixes
    • Add backward compatibility aliases for Events class methods (#3725)

7.0.0 / 2025-09-03

  • Breaking changes
    • Set default max_keep_alive to 999 (#3719)
    • Increase persistent_timeout default to 65 seconds (#3378)
    • Raise an ArgumentError if no block given to hooks (#3377)

... (truncated)

Commits
  • fb2a073 v7.1.0 (#3797)
  • 4edb9e9 client.rb - read_body - cleanup last lines of method (#3798)
  • 84a568a Update wait_for_less_busy_worker docs (#3757)
  • e59a604 Initialize only essential Launcher state before prune_bundler restart (#3...
  • 6844de7 client.rb - Skip reading zero bytes when request body is buffered (#3795)
  • 1d3d6b7 Set Thread.current.puma_server in Thread init code, not every request (#3774)
  • 9b34cde Adding syntax highlighting in k8s docs (#3782)
  • a2bd2f6 Add prune_bundler to Configuration::DEFAULTS (#3779)
  • d7a0854 ci: Update hey benchmark files, minor fixes and formatting (#3796)
  • ff08099 ci: Update Update test/rackup/sleep_fibonacci.ru, add test script (#3793)
  • Additional commits viewable in compare view

Updates sinatra from 4.1.1 to 4.2.1

Changelog

Sourced from sinatra's changelog.

4.2.1 / 2025-10-10

4.2.0 / 2025-10-08

  • New: Add :static_headers setting for custom headers in static file responses (#2089)
  • Fix: Fix regex in etag_matches? to prevent ReDoS (#2121)
  • Fix: PATH_INFO can never be empty (#2114)
  • Fix: Fix malformed Content-Type headers (#2081)
  • Fix: Avoid crash for integer values in content_type parameters (#2078)
Commits

Updates rackup from 2.2.1 to 2.3.1

Changelog

Sourced from rackup's changelog.

Releases

All notable changes to this project will be documented in this file. For info on how to format all future additions to this file please reference Keep A Changelog.

Commits
  • f3fa1d6 Bump patch version.
  • 583c7dc Fix WEBrick SERVER_PORT handling.
  • adc9596 Bump minor version.
  • 8e538be Update the webrick handler to support OPTIONS * requests. (#40)
  • 7a3e190 Update workflows.
  • 5d18f5a Update spec_server.rb
  • c6cdd47 Fix references from Rack::Server to Rackup::Server in comments
  • e3df7cb Provide a 'Changelog' link on rubygems.org/gems/rackup
  • 39d5226 Documentation for how to access handlers programatically.
  • 301b6dd Update releases.md - fixes #29.
  • See full diff in compare view

Updates google-protobuf from 4.31.1 to 4.33.1

Commits

Updates opentelemetry-sdk from 1.8.0 to 1.10.0

Release notes

Sourced from opentelemetry-sdk's releases.

opentelemetry-sdk 1.10.0

v1.10.0 / 2025-10-14

  • ADDED: Add span flags support for isRemote property

opentelemetry-sdk 1.9.0

v1.9.0 / 2025-09-16

  • ADDED: Add record_exception option for in_span

opentelemetry-sdk 1.8.1

v1.8.1 / 2025-08-14

  • FIXED: Remove patch constraint on Zipkin exporter
  • DOCS: Fix Resource merge documentation
Changelog

Sourced from opentelemetry-sdk's changelog.

v1.10.0 / 2025-10-14

  • ADDED: Add span flags support for isRemote property

v1.9.0 / 2025-09-16

  • ADDED: Add record_exception option for in_span

v1.8.1 / 2025-08-14

  • FIXED: Remove patch constraint on Zipkin exporter
  • DOCS: Fix Resource merge documentation
Commits

Updates opentelemetry-exporter-otlp from 0.30.0 to 0.31.1

Release notes

Sourced from opentelemetry-exporter-otlp's releases.

opentelemetry-exporter-otlp 0.31.1

v0.31.1 / 2025-10-21

  • FIXED: Requires minimum SDK support for new parent_span_is_remote attribute

opentelemetry-exporter-otlp 0.31.0

v0.31.0 / 2025-10-14

  • ADDED: Add span flags support for isRemote property
Changelog

Sourced from opentelemetry-exporter-otlp's changelog.

v0.31.1 / 2025-10-21

  • FIXED: Requires minimum SDK support for new parent_span_is_remote attribute

v0.31.0 / 2025-10-14

  • ADDED: Add span flags support for isRemote property
Commits

Updates opentelemetry-instrumentation-all from 0.78.0 to 0.89.1

Release notes

Sourced from opentelemetry-instrumentation-all's releases.

opentelemetry-instrumentation-all 0.89.1

v0.89.1 / 2025-12-03

  • ADDED: Upgrade trilogy instrumentation to 0.65.1
  • ADDED: Upgrade mysql2 instrumentation to 0.32.1
  • ADDED: Upgrade pg instrumentation to 0.34.1

opentelemetry-instrumentation-all 0.89.0

v0.89.0 / 2025-12-02

  • ADDED: Upgrade trilogy instrumentation to 0.65.0
  • ADDED: Upgrade mysql2 instrumentation to 0.32.0
  • ADDED: Upgrade pg instrumentation to 0.34.0
  • ADDED: Upgrade que instrumentation to 0.12.0
  • ADDED: Upgrade sidekiq instrumentation to 0.28.1

opentelemetry-instrumentation-all 0.88.0

No release notes provided.

opentelemetry-instrumentation-all 0.87.0

v0.87.0 / 2025-11-05

  • ADDED: upgrade opentelemetry-instrumentation-pg to 0.33.0

opentelemetry-instrumentation-all 0.86.1

v0.86.1 / 2025-10-22

  • ADDED: Updated minimum gem versions for dependent instrumentations

opentelemetry-instrumentation-all 0.86.0

v0.86.0 / 2025-10-21

  • BREAKING CHANGE: Min Version Support For Ruby 3.2 and Rails 7.1

  • ADDED: Min Version Support For Ruby 3.2 and Rails 7.1

Changelog

Sourced from opentelemetry-instrumentation-all's changelog.

v0.89.1 / 2025-12-03

  • ADDED: Upgrade trilogy instrumentation to 0.65.1
  • ADDED: Upgrade mysql2 instrumentation to 0.32.1
  • ADDED: Upgrade pg instrumentation to 0.34.1

v0.89.0 / 2025-12-02

  • ADDED: Upgrade trilogy instrumentation to 0.65.0
  • ADDED: Upgrade mysql2 instrumentation to 0.32.0
  • ADDED: Upgrade pg instrumentation to 0.34.0
  • ADDED: Upgrade que instrumentation to 0.12.0
  • ADDED: Upgrade sidekiq instrumentation to 0.28.1

v0.88.0 / 2025-11-26

  • BREAKING CHANGE: Update Ethon span name when unknown method

  • ADDED: Update Ethon span name when unknown method

v0.87.0 / 2025-11-05

  • ADDED: upgrade opentelemetry-instrumentation-pg to 0.33.0

v0.86.1 / 2025-10-22

  • ADDED: Updated minimum gem versions for dependent instrumentations

v0.86.0 / 2025-10-21

  • BREAKING CHANGE: Min Version Support For Ruby 3.2 and Rails 7.1

  • ADDED: Min Version Support For Ruby 3.2 and Rails 7.1

v0.85.0 / 2025-10-11

  • BREAKING CHANGE: aws_sdk Suppress internal spans by default

v0.84.0 / 2025-09-27

  • ADDED: Minimum version of opentelemetry-api v1.7.0

v0.83.0 / 2025-09-27

  • ADDED: Update trilogy instrumentation to v0.62.0

v0.82.0 / 2025-09-18

  • BREAKING CHANGE: AWS Lambda: Check if span has the attributes method to avoid internal error

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…h 7 updates

Bumps the bundler-production-dependencies group with 7 updates in the /src/email directory:

| Package | From | To |
| --- | --- | --- |
| [puma](https://github.com/puma/puma) | `6.6.1` | `7.1.0` |
| [sinatra](https://github.com/sinatra/sinatra) | `4.1.1` | `4.2.1` |
| [rackup](https://github.com/rack/rackup) | `2.2.1` | `2.3.1` |
| [google-protobuf](https://github.com/protocolbuffers/protobuf) | `4.31.1` | `4.33.1` |
| [opentelemetry-sdk](https://github.com/open-telemetry/opentelemetry-ruby) | `1.8.0` | `1.10.0` |
| [opentelemetry-exporter-otlp](https://github.com/open-telemetry/opentelemetry-ruby) | `0.30.0` | `0.31.1` |
| [opentelemetry-instrumentation-all](https://github.com/open-telemetry/opentelemetry-ruby-contrib) | `0.78.0` | `0.89.1` |



Updates `puma` from 6.6.1 to 7.1.0
- [Release notes](https://github.com/puma/puma/releases)
- [Changelog](https://github.com/puma/puma/blob/main/History.md)
- [Commits](puma/puma@v6.6.1...v7.1.0)

Updates `sinatra` from 4.1.1 to 4.2.1
- [Changelog](https://github.com/sinatra/sinatra/blob/main/CHANGELOG.md)
- [Commits](sinatra/sinatra@v4.1.1...v4.2.1)

Updates `rackup` from 2.2.1 to 2.3.1
- [Release notes](https://github.com/rack/rackup/releases)
- [Changelog](https://github.com/rack/rackup/blob/main/releases.md)
- [Commits](rack/rackup@v2.2.1...v2.3.1)

Updates `google-protobuf` from 4.31.1 to 4.33.1
- [Release notes](https://github.com/protocolbuffers/protobuf/releases)
- [Commits](https://github.com/protocolbuffers/protobuf/commits)

Updates `opentelemetry-sdk` from 1.8.0 to 1.10.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-ruby/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-ruby/blob/main/sdk/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-ruby@opentelemetry-sdk/v1.8.0...opentelemetry-sdk/v1.10.0)

Updates `opentelemetry-exporter-otlp` from 0.30.0 to 0.31.1
- [Release notes](https://github.com/open-telemetry/opentelemetry-ruby/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-ruby/blob/main/exporter/otlp/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-ruby@opentelemetry-exporter-otlp/v0.30.0...opentelemetry-exporter-otlp/v0.31.1)

Updates `opentelemetry-instrumentation-all` from 0.78.0 to 0.89.1
- [Release notes](https://github.com/open-telemetry/opentelemetry-ruby-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-ruby-contrib/blob/main/instrumentation/all/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-ruby-contrib@opentelemetry-instrumentation-all/v0.78.0...opentelemetry-instrumentation-all/v0.89.1)

---
updated-dependencies:
- dependency-name: puma
  dependency-version: 7.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: bundler-production-dependencies
- dependency-name: sinatra
  dependency-version: 4.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bundler-production-dependencies
- dependency-name: rackup
  dependency-version: 2.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bundler-production-dependencies
- dependency-name: google-protobuf
  dependency-version: 4.33.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bundler-production-dependencies
- dependency-name: opentelemetry-sdk
  dependency-version: 1.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bundler-production-dependencies
- dependency-name: opentelemetry-exporter-otlp
  dependency-version: 0.31.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bundler-production-dependencies
- dependency-name: opentelemetry-instrumentation-all
  dependency-version: 0.89.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bundler-production-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code labels Dec 5, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant