Bump puma from 6.5.0 to 7.1.0

[dependabot]

Bumps puma from 6.5.0 to 7.1.0.

Release notes

Sourced from puma's releases.

v7.1.0

7.1.0 / 2025-10-16 - Neon Witch

• Features

  • Introduce after_worker_shutdown hook (#3707)
  • Reintroduce keepalive "fast inline" behavior. Provides faster (8x on JRuby & 1.4x on Ruby) pipeline processing (#3794)

• Bugfixes

  • Skip reading zero bytes when request body is buffered (#3795)
  • Fix PUMA_LOG_CONFIG=1 logging twice with prune_bundler enabled (#3778)
  • Fix prune_bundler not showing in PUMA_LOG_CONFIG=1 output (#3779)
  • Guard ThreadPool method call, which may be nil during shutdown (#3791, #3790)
  • Set Thread.current.puma_server in Thread init code, not every request (#3774)
  • Fix race condition while deleting pidfile (#3657)

New Contributors

• @​nerdrew made their first contribution in puma/puma#3707
• @​mopp made their first contribution in puma/puma#3783
• @​marksmith made their first contribution in puma/puma#3657
• @​Nymuxyzo made their first contribution in puma/puma#3762

Full Changelog: puma/puma@v7.0.4...v7.1.0

v7.0.4

What's Changed

• Move sleep cluster logic to its own class by @​schneems in puma/puma#3746
• puma_http11.c: Use interned UTF-8 strings for hash keys by @​byroot in puma/puma#3754
• Strip whitespace from the beginnings of header values by @​kenballus in puma/puma#3742
• Fix SSL_shutdown error handling by @​marshall-lee in puma/puma#3703

New Contributors

• @​kenballus made their first contribution in puma/puma#3742

Full Changelog: puma/puma@v7.0.3...v7.0.4

v7.0.3

7.0.3 / 2025-09-13

• Performance

  • server.rb - process_client - add ka to todo if readable & complete (#3748)

• Bugfixes

  • Convert PUMA_PERSISTENT_TIMEOUT to an Integer (#3749)

v7.0.2

What's Changed

... (truncated)

Changelog

Sourced from puma's changelog.

7.1.0 / 2025-10-16

• Features

  • Introduce after_worker_shutdown hook (#3707)
  • Reintroduce keepalive "fast inline" behavior. Provides faster (8x on JRuby & 1.4x on Ruby) pipeline processing (#3794)

• Bugfixes

  • Skip reading zero bytes when request body is buffered (#3795)
  • Fix PUMA_LOG_CONFIG=1 logging twice with prune_bundler enabled (#3778)
  • Fix prune_bundler not showing in PUMA_LOG_CONFIG=1 output (#3779)
  • Guard ThreadPool method call, which may be nil during shutdown (#3791, #3790)
  • Set Thread.current.puma_server in Thread init code, not every request (#3774)
  • Fix race condition while deleting pidfile (#3657)

7.0.4 / 2025-09-23

• Bugfixes

  • Fix SSL_shutdown error handling (#3703)
  • Strip whitespace from the beginnings of request header values. (#3742)

• Performance

  • puma_http11.c: Use interned UTF-8 strings for hash keys (#3754)
  • Move sleep cluster logic to its own class (#3746, #3740)

7.0.3 / 2025-09-13

• Performance

  • server.rb - process_client - add ka to todo if readable & complete (#3748)

• Bugfixes

  • Convert PUMA_PERSISTENT_TIMEOUT to an Integer (#3749)

7.0.2 / 2025-09-08

• Bugfixes
  • bug: control_cli.rb - Fixup pumactl code to load puma.rb for deprecate_method_change (#3736, #3734)
  • Replace sleep spin lock with condition variable (#3729)
  • Fix Puma not booting if queue_requests disabled (#3731)

7.0.1 / 2025-09-06

• Bugfixes
  • Add backward compatibility aliases for Events class methods (#3725)

7.0.0 / 2025-09-03

• Breaking changes
  • Set default max_keep_alive to 999 (#3719)
  • Increase persistent_timeout default to 65 seconds (#3378)
  • Raise an ArgumentError if no block given to hooks (#3377)

... (truncated)

Commits

• fb2a073 v7.1.0 (#3797)
• 4edb9e9 client.rb - read_body - cleanup last lines of method (#3798)
• 84a568a Update wait_for_less_busy_worker docs (#3757)
• e59a604 Initialize only essential Launcher state before prune_bundler restart (#3...
• 6844de7 client.rb - Skip reading zero bytes when request body is buffered (#3795)
• 1d3d6b7 Set Thread.current.puma_server in Thread init code, not every request (#3774)
• 9b34cde Adding syntax highlighting in k8s docs (#3782)
• a2bd2f6 Add prune_bundler to Configuration::DEFAULTS (#3779)
• d7a0854 ci: Update hey benchmark files, minor fixes and formatting (#3796)
• ff08099 ci: Update Update test/rackup/sleep_fibonacci.ru, add test script (#3793)
• Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[A-Wheeto]

@dependabot close

[A-Wheeto]

Closing as superseded — #2556 bumps puma to a higher version (7.2.1 vs 7.1.0 here) from a fresher base.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.