Skip to content

Bump puma from 6.6.1 to 7.0.4 in /demo - #3705

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bundler/demo/puma-7.0.4
Closed

Bump puma from 6.6.1 to 7.0.4 in /demo#3705
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bundler/demo/puma-7.0.4

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 29, 2025

Copy link
Copy Markdown
Contributor

Bumps puma from 6.6.1 to 7.0.4.

Release notes

Sourced from puma's releases.

v7.0.3

7.0.3 / 2025-09-13

  • Performance

    • server.rb - process_client - add ka to todo if readable & complete (#3748)

  • Bugfixes

    • Convert PUMA_PERSISTENT_TIMEOUT to an Integer (#3749)

v7.0.2

What's Changed

New Contributors

Full Changelog: puma/puma@v7.0.1...v7.0.2

v7.0.1

What's Changed

Full Changelog: puma/puma@v7.0.0...v7.0.1

v7.0.0 - Romantic Warrior

7.0.0

  • Breaking changes
    • Set default max_keep_alive to 999 (#3719)
    • Increase persistent_timeout default to 65 seconds (#3378)
    • Raise an ArgumentError if no block given to hooks (#3377)
    • Don't set env['HTTP_VERSION'] for Rack > 3.1 (#3711, #3576)
    • Runner.rb - remove ruby_engine method, deprecated Nov-2024 (#3701)
    • Set conditional config defaults after CLI options are parsed and config files are loaded (#3297)
    • Response headers set to lowercase (#3704)
    • Update minimum Ruby version to 3.0 (#3698)
    • Rename callback hooks (#3438)
Old hook name New hook name
on_worker_boot before_worker_boot
on_worker_shutdown before_worker_shutdown

... (truncated)

Changelog

Sourced from puma's changelog.

7.0.4 / 2025-09-23

  • Bugfixes

    • Fix SSL_shutdown error handling (#3703)
    • Strip whitespace from the beginnings of request header values. (#3742)

  • Performance

    • puma_http11.c: Use interned UTF-8 strings for hash keys (#3754)
    • Move sleep cluster logic to its own class (#3746, #3740)

7.0.3 / 2025-09-13

  • Performance

    • server.rb - process_client - add ka to todo if readable & complete (#3748)

  • Bugfixes

    • Convert PUMA_PERSISTENT_TIMEOUT to an Integer (#3749)

7.0.2 / 2025-09-08

  • Bugfixes
    • bug: control_cli.rb - Fixup pumactl code to load puma.rb for deprecate_method_change (#3736, #3734)
    • Replace sleep spin lock with condition variable (#3729)
    • Fix Puma not booting if queue_requests disabled (#3731)

7.0.1 / 2025-09-06

  • Bugfixes
    • Add backward compatibility aliases for Events class methods (#3725)

7.0.0 / 2025-09-03

  • Breaking changes
    • Set default max_keep_alive to 999 (#3719)
    • Increase persistent_timeout default to 65 seconds (#3378)
    • Raise an ArgumentError if no block given to hooks (#3377)
    • Don't set env['HTTP_VERSION'] for Rack > 3.1 (#3711, #3576)
    • Runner.rb - remove ruby_engine method, deprecated Nov-2024 (#3701)
    • Config preload_app! is now the default for clustered mode (#3297)
    • Config instance must be clamp-d before reading any values (#3297)
    • Response headers set to lowercase (#3704)
    • Update minimum Ruby version to 3.0 (#3698)
    • Rename callback hooks (#3438)
Old hook name New hook name
on_worker_boot before_worker_boot
on_worker_shutdown before_worker_shutdown
on_restart before_restart
on_booted after_booted

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot
Bump puma from 6.6.1 to 7.0.4 in /demo
c990c55 
Bumps [puma](https://github.com/puma/puma) from 6.6.1 to 7.0.4.
- [Release notes](https://github.com/puma/puma/releases)
- [Changelog](https://github.com/puma/puma/blob/master/History.md)
- [Commits](puma/puma@v6.6.1...v7.0.4)

---
updated-dependencies:
- dependency-name: puma
  dependency-version: 7.0.4
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added bundler Gemfile dependencies dependencies Pull requests that update a dependency file skip changeset Pull requests that don't change the library output labels Sep 29, 2025
@dependabot
dependabot Bot requested a review from a team as a code owner September 29, 2025 12:52
@dependabot
dependabot Bot requested a review from jonrohan September 29, 2025 12:52
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file skip changeset Pull requests that don't change the library output bundler Gemfile dependencies labels Sep 29, 2025
@changeset-bot

changeset-bot Bot commented Sep 29, 2025

Copy link
Copy Markdown

⚠️ No Changeset found

Latest commit: c990c55

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@jonrohan
jonrohan added this pull request to the merge queue Sep 29, 2025
@jonrohan
jonrohan removed this pull request from the merge queue due to a manual request Sep 29, 2025
@jonrohan jonrohan closed this Sep 29, 2025
@dependabot @github

dependabot Bot commented on behalf of github Sep 29, 2025

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/bundler/demo/puma-7.0.4 branch September 29, 2025 21:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@jonrohan jonrohan jonrohan approved these changes

Assignees

No one assigned

Labels

bundler Gemfile dependencies dependencies Pull requests that update a dependency file skip changeset Pull requests that don't change the library output

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@jonrohan