Update dependency puma to v8

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
puma (source, changelog)	"~> 7.0" → "~> 8.0"

---

Release Notes

puma/puma (puma)

v8.0.2

Compare Source

• Bugfixes
  • Anchor PROXY protocol v1 regex to string start and enforce max line length to prevent injection via crafted request bodies ([#​3944])
  • Parse PROXY protocol header only on the first request per connection to prevent spoofing on keep-alive connections ([#​3944])

v8.0.1

Compare Source

• Bugfixes

  • Fix prune_bundler stripping user-configured BUNDLE_* env vars (e.g. BUNDLE_WITHOUT) on re-exec, which caused workers to crash on boot ([#​3929])

• Performance

  • Use blocks for debug logging to avoid creating log messages when debug is disabled ([#​3920])

• Docs

  • Fix incorrect hook names in gRPC docs ([#​3923])
  • Reword v8 upgrade guide IPv6 bullet for clarity ([#​3928])

v8.0.0

Compare Source

• Features

  • Add env["puma.mark_as_io_bound"] API and max_io_threads config to allow IO-bound requests to exceed the thread pool max, enabling better handling of mixed workloads ([#​3816], [#​3894])
  • Add single and cluster DSL hooks for mode-specific configuration ([#​3621])
  • Add on_force option to shutdown_debug to only dump thread backtraces on forced (non-graceful) shutdown ([#​3671])
  • Add API to dynamically update min and max thread counts at runtime via update_thread_pool_min_max and ServerPluginControl ([#​3658])
  • Use SIGPWR for thread backtrace dumps on Linux/JRuby where SIGINFO is unavailable ([#​3829])

• Bugfixes

  • Fix phased restart for fork_worker to avoid forking from stale worker 0 when it has been replaced ([#​3853])

• Performance

  • JRuby HTTP parser improvements: pre-allocated header keys, perfect hash lookup, reduced memory copies ([#​3838])
  • Cache downcased header key in str_headers to avoid redundant String#downcase calls, reducing allocations by ~50% per response ([#​3874])

• Refactor

  • Collect env processing into dedicated client_env.rb module ([#​3582])
  • Move event to default configuration ([#​3872])

• Docs

  • Add gRPC guide for configuring gRPC lifecycle hooks in clustered mode ([#​3885])
  • Add 7.0 upgrade guide, move 5.0/6.0 upgrade guides to docs directory ([#​3900])
  • Correct default values for persistent_timeout and worker_boot_timeout in DSL docs ([#​3912])
  • Add file descriptor limit warning in test helper for contributors ([#​3893])

• Breaking changes

  • Default production bind address changed from 0.0.0.0 to :: (IPv6) when a non-loopback IPv6 interface is available; falls back to 0.0.0.0 if IPv6 is unavailable ([#​3847])

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Container Scanning Status: ❌ Failure

NAME              INSTALLED  FIXED IN  TYPE  VULNERABILITY        SEVERITY  EPSS         RISK   
json              2.18.0     2.19.2    gem   GHSA-3m6g-2423-7cp3  High      0.8% (53rd)  0.7    
net-imap          0.6.2      0.6.4     gem   GHSA-75xq-5h9v-w6px  Medium    0.8% (52nd)  0.4    
picomatch         4.0.3      4.0.4     npm   GHSA-c2c7-rcm5-vvqj  High      0.4% (33rd)  0.3    
addressable       2.8.10     2.9.0     gem   GHSA-h27x-rffw-24p4  High      0.4% (28th)  0.3    
net-imap          0.6.2      0.6.4.1   gem   GHSA-8p34-64r3-mwg8  Medium    0.5% (38th)  0.3    
net-imap          0.6.2      0.6.4     gem   GHSA-vcgp-9326-pqcp  High      0.3% (24th)  0.2    
net-imap          0.6.2      0.6.4     gem   GHSA-hm49-wcqc-g2xg  Medium    0.4% (34th)  0.2    
picomatch         4.0.3      4.0.4     npm   GHSA-3v7f-55p6-f55p  Medium    0.4% (33rd)  0.2    
net-imap          0.6.2      0.6.4     gem   GHSA-87pf-fpwv-p7m7  Medium    0.3% (21st)  0.2    
net-imap          0.6.2      0.6.4     gem   GHSA-q2mw-fvj9-vvcw  Low       0.4% (33rd)  0.1    
net-imap          0.6.2      0.6.4.1   gem   GHSA-46q3-7gv7-qmgg  Medium    0.1% (3rd)   < 0.1  
net-imap          0.6.2      0.6.4.1   gem   GHSA-c4fp-cxrr-mj66  Low       0.2% (14th)  < 0.1  
websocket-driver  0.8.0      0.8.1     gem   GHSA-33ph-fccm-39pj  Medium    N/A          N/A    
websocket-driver  0.8.0      0.8.1     gem   GHSA-8j3g-f24p-4mpw  Medium    N/A          N/A    
websocket-driver  0.8.0      0.8.1     gem   GHSA-ghhp-3qvg-889p  Medium    N/A          N/A