[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
puma (source, changelog)	'~> 7.2.0' → '~> 8.0.2'

---

Release Notes

puma/puma (puma)

v8.0.2

Compare Source

• Bugfixes
  • Anchor PROXY protocol v1 regex to string start and enforce max line length to prevent injection via crafted request bodies ([#​3944])
  • Parse PROXY protocol header only on the first request per connection to prevent spoofing on keep-alive connections ([#​3944])

v8.0.1

Compare Source

• Bugfixes

  • Fix prune_bundler stripping user-configured BUNDLE_* env vars (e.g. BUNDLE_WITHOUT) on re-exec, which caused workers to crash on boot ([#​3929])

• Performance

  • Use blocks for debug logging to avoid creating log messages when debug is disabled ([#​3920])

• Docs

  • Fix incorrect hook names in gRPC docs ([#​3923])
  • Reword v8 upgrade guide IPv6 bullet for clarity ([#​3928])

v8.0.0

Compare Source

• Features

  • Add env["puma.mark_as_io_bound"] API and max_io_threads config to allow IO-bound requests to exceed the thread pool max, enabling better handling of mixed workloads ([#​3816], [#​3894])
  • Add single and cluster DSL hooks for mode-specific configuration ([#​3621])
  • Add on_force option to shutdown_debug to only dump thread backtraces on forced (non-graceful) shutdown ([#​3671])
  • Add API to dynamically update min and max thread counts at runtime via update_thread_pool_min_max and ServerPluginControl ([#​3658])
  • Use SIGPWR for thread backtrace dumps on Linux/JRuby where SIGINFO is unavailable ([#​3829])

• Bugfixes

  • Fix phased restart for fork_worker to avoid forking from stale worker 0 when it has been replaced ([#​3853])

• Performance

  • JRuby HTTP parser improvements: pre-allocated header keys, perfect hash lookup, reduced memory copies ([#​3838])
  • Cache downcased header key in str_headers to avoid redundant String#downcase calls, reducing allocations by ~50% per response ([#​3874])

• Refactor

  • Collect env processing into dedicated client_env.rb module ([#​3582])
  • Move event to default configuration ([#​3872])

• Docs

  • Add gRPC guide for configuring gRPC lifecycle hooks in clustered mode ([#​3885])
  • Add 7.0 upgrade guide, move 5.0/6.0 upgrade guides to docs directory ([#​3900])
  • Correct default values for persistent_timeout and worker_boot_timeout in DSL docs ([#​3912])
  • Add file descriptor limit warning in test helper for contributors ([#​3893])

• Breaking changes

  • Default production bind address changed from 0.0.0.0 to :: (IPv6) when a non-loopback IPv6 interface is available; falls back to 0.0.0.0 if IPv6 is unavailable ([#​3847])

---

Configuration

📅 Schedule: (in timezone Europe/Amsterdam)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: def3f467-ff29-4f66-85db-f8e48a5dbbf4

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 77.70%. Comparing base (1f2c702) to head (24f5289).

Additional details and impacted files

@@           Coverage Diff            @@
##           staging    #1271   +/-   ##
========================================
  Coverage    77.70%   77.70%           
========================================
  Files           54       54           
  Lines         1413     1413           
========================================
  Hits          1098     1098           
  Misses         315      315           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.