Changelog for ruby2.7-rubygem-puma-6.4.2-123.20.x86_64.rpm :

* Mon Jan 29 2024 Dan Čermák - 6.4.1:
* Bugfixes
* DSL#warn_if_in_single_mode - fixup when workers set via CLI ([#3256])
* Fix `idle-timeout` not working in cluster mode ([#3235], [#3228], [#3282], [#3283])
* Fix worker 0 timing out during phased restart ([#3225], [#2786])
* context_builder.rb - require openssl if verify_mode != \'none\' ([#3179])
* Make puma cluster process suitable as PID 1 ([#3255])
* Improve Puma::NullIO consistency with real IO ([#3276])
* extconf.rb - fixup to detect openssl info in Ruby build ([#3271], [#3266])
* MiniSSL.java - set serialVersionUID, fix RaiseException deprecation ([#3270])
* dsl.rb - fix warn_if_in_single_mode when WEB_CONCURRENCY is set ([#3265], [#3264])
* Maintenance
* LOTS of test refactoring to make tests more stable and easier to write - thanks to AATTMSP-Greg!
* Fix bug in tests re: TestPuma::HOST4 ([#3254])
* Dockerfile for minimal repros: use Ruby 3.2, expect bundler installed ([#3245])
* fix define_method calls, use Symbol parameter instead of String ([#3293])
* Docs
* README.md - add the puma-acme plugin ([#3301])
* Remove `--keep-file-descriptors` flag from systemd docs ([#3248])
* Note symlink mechanism in restart documentation for hot restart ([#3298])
* Sat Nov 04 2023 Marcus Rueckert - Update to 6.4.0
* Features
* on_thread_exit hook ([#2920])
* on_thread_start_hook ([#3195])
* Shutdown on idle ([#3209], [#2580])
* New error message when control server port taken ([#3204])
* Refactor
* Remove `Forwardable` dependency ([#3191], #3190)
* Update URLMap Regexp usage for Ruby v3.3 ([#3165])
* Bugfixes
* Bring the cert_pem: parameter into parity with the cert: parameter to ssl_bind. ([#3174])
* Fix using control server with IPv6 host ([#3181])
* control_cli.rb - add require_relative \'log_writer\' ([#3187])
* Fix cases where fallback Rack response wasn\'t sent to the client ([#3094])
* Fri Nov 03 2023 Dan Čermák - 6.3.1:
* Security
* Address HTTP request smuggling vulnerabilities with zero-length Content Length header and trailer fields ([GHSA-68xg-gqqm-vgj8](https://github.com/puma/puma/security/advisories/GHSA-68xg-gqqm-vgj8))
* Wed Jun 21 2023 Marcus Rueckert - Update to 6.3.0 - Features - Add dsl method `supported_http_methods` ([#3106], [#3014]) - Puma error responses no longer have any fingerprints to indicate Puma ([#3161], [#3037]) - Support decryption of SSL key ([#3133], [#3132]) - Bugfixes - Don\'t send 103 early hints response when only invalid headers are used ([#3163]) - Handle malformed request path ([#3155], [#3148]) - Misc lib file fixes - trapping additional errors, CI helper ([#3129]) - Fixup req form data file upload with \"r\
\" line endings ([#3137]) - Restore rack 1.6 compatibility Restore rack 1.6 compatibility ([#3156]) - Refactor - const.rb - Update Puma::HTTP_STATUS_CODES ([#3162]) - Clarify Reactor#initialize ([#3151])
* Fri Apr 28 2023 Marcus Rueckert - Update to 6.2.2 - Bugfixes - Fix Rack-related NameError by adding :: operator ([#3118], [#3117])- changes from 6.2.1 - Bugfixes - Fix java 8 compatibility ([#3109], [#3108]) - Always write io_buffer when in \"enum bodies\" branch. ([#3113], [#3112]) - Fix warn_if_in_single_mode incorrect message ([#3111])- changes from 6.2.0 - Features - Ability to supply a custom logger ([#2770], [#2511]) - Warn when clustered-only hooks are defined in single mode ([#3089]) - Adds the on_booted event ([#2709]) - Bugfixes - Loggers - internal_write - catch Errno::EINVAL ([#3091]) - commonlogger.rb - fix HIJACK time format, use constants, not strings ([#3074]) - Fixed some edge cases regarding request hijacking ([#3072])- changes from 6.1.1 - Bugfixes - We no longer try to use the systemd plugin for JRuby ([#3079]) - Allow ::Rack::Handler::Puma.run to work regardless of whether Rack/Rackup are loaded ([#3080])- changes from 6.1.0 - Features - WebSocket support via partial hijack ([#3058], [#3007]) - Add built-in systemd notify support ([#3011]) - Periodically send status to systemd ([#3006], [#2604]) - Introduce the ability to return 413: payload too large for requests ([#3040]) - Log loaded extensions when `PUMA_DEBUG` is set ([#3036], [#3020]) - Bugfixes - Fix issue with rack 3 compatibility re: rackup ([#3061], [#3057]) - Allow setting TCP low_latency with SSL listener ([#3065]) - Performance - Reduce memory usage for large file uploads ([#3062])- changes from 6.0.2 - Refactor - Remove use of etc and time gems in Puma ([#3035], [#3033]) - Refactor const.rb - freeze ([#3016])- changes from 6.0.1 - Bugfixes - Handle waking up a closed selector in Reactor#add ([#3005]) - Fixup response processing, enumerable bodies ([#3004], [#3000]) - Correctly close app body for all code paths ([#3002], [#2999]) - Refactor - Add IOBuffer to Client, remove from ThreadPool thread instances ([#3013])
* Fri Apr 28 2023 Marcus Rueckert - Fix file permissions in post_install so we do not get more rpmlint warnings
* Wed Dec 07 2022 Stephan Kulow - updated to version 6.0.0 see installed History.md [#]# 6.0.0 / 2022-10-XX
* Breaking Changes
* Dropping Ruby 2.2 and 2.3 support (now 2.4+) ([#2919])
* Remote_addr functionality has changed ([#2652], [#2653])
* No longer supporting Java 1.7 or below (JRuby 9.1 was the last release to support this) ([#2849])
* Remove nakayoshi GC ([#2933], [#2925])
* wait_for_less_busy_worker is now default on ([#2940])
* Prefix all environment variables with `PUMA_` ([#2924], [#2853])
* Removed some constants ([#2957], [#2958], [#2959], [#2960])
* The following classes are now part of Puma\'s private API: `Client`, `Cluster::Worker`, `Cluster::Worker`, `HandleRequest`. ([#2988])
* Features
* Increase throughput on large (100kb+) response bodies by 3-10x ([#2896], [#2892])
* Increase throughput on file responses ([#2923])
* Add support for streaming bodies in Rack. ([#2740])
* Allow OpenSSL session reuse via a \'reuse\' ssl_bind method or bind string query parameter ([#2845])
* Allow `run_hooks` to pass a hash to blocks for use later ([#2917], [#2915])
* Allow using `preload_app!` with `fork_worker` ([#2907])
* Support request_body_wait metric with higher precision ([#2953])
* Allow header values to be arrays (Rack 3) ([#2936], [#2931])
* Export Puma/Ruby versions in /stats ([#2875])
* Allow configuring request uri max length & request path max length ([#2840])
* Add a couple of public accessors ([#2774])
* Log entire backtrace when worker start fails ([#2891])
* [jruby] Enable TLSv1.3 support ([#2886])
* [jruby] support setting TLS protocols + rename ssl_cipher_list ([#2899])
* [jruby] Support a truststore option ([#2849], [#2904], [#2884])
* Bugfixes
* Load the configuration before passing it to the binder ([#2897])
* Do not raise error raised on HTTP methods we don\'t recognize or support, like CONNECT ([#2932], [#1441])
* Fixed a memory leak when creating a new SSL listener ([#2956])
* Refactor
* log_writer.rb - add internal_write method ([#2888])
* [WIP] Refactor: Split out LogWriter from Events (no logic change) ([#2798])
* Extract prune_bundler code into it\'s own class. ([#2797])
* Refactor Launcher#run to increase readability (no logic change) ([#2795])
* Ruby 3.2 will have native IO#wait_
* methods, don\'t require io/wait ([#2903])
* Various internal API refactorings ([#2942], [#2921], [#2922], [#2955])
* Fri Aug 26 2022 Manuel Schnitzer - updated to version 5.6.5
* Bugfixes
* NullIO#closed should return false ([#2883])
* Puma::ControlCLI - allow refork command to be sent as a request ([#2868], [#2866])
* [jruby] Fix TLS verification hang ([#2890], [#2729])
* extconf.rb - don\'t use pkg_config(\'openssl\') if \'--with-openssl-dir\' is used ([#2885], [#2839])
* MiniSSL - detect SSL_CTX_set_dh_auto ([#2864], [#2863])
* Fix rack.after_reply exceptions breaking connections ([#2861], [#2856])
* Escape SSL cert and filenames ([#2855])
* Fail hard if SSL certs or keys are invalid ([#2848])
* Fail hard if SSL certs or keys cannot be read by user ([#2847])
* Fix build with Opaque DH in LibreSSL 3.5. ([#2838])
* Pre-existing socket file removed when TERM is issued after USR2 (if puma is running in cluster mode) ([#2817])
* Fix Puma::StateFile#load incompatibility ([#2810])
* Wed Mar 30 2022 Marcus Rueckert - Update to version 5.6.4 https://github.com/puma/puma/security/advisories/GHSA-h99w-9q5r-gjq9 https://github.com/puma/puma/releases/tag/v5.6.4
* Sat Feb 12 2022 Marcus Rueckert - Update to version 5.6.2 https://github.com/advisories/GHSA-rmj8-8hhh-gv5h https://rubysec.com/advisories/CVE-2022-23634/ other changes: https://github.com/puma/puma/releases/tag/v5.6.1 https://github.com/puma/puma/releases/tag/v5.6.0
* Tue Dec 21 2021 Marcus Rueckert - Update to version 5.5.2 https://github.com/puma/puma/security/advisories/GHSA-48w2-rm65-62xx Re-allows UTF-8 in HTTP header values
* Sat Oct 09 2021 Manuel Schnitzer - updated to version 5.5.0
* Features
* Automatic SSL certificate provisioning for localhost, via localhost gem ([#2610], [#2257])
* add support for the PROXY protocol (v1 only) ([#2654], [#2651])
* Add a semantic CLI option for no config file ([#2689])
* Bugfixes
* More elaborate exception handling - lets some dead pumas die. ([#2700], [#2699])
* allow multiple after_worker_fork hooks ([#2690])
* Preserve BUNDLE_APP_CONFIG on worker fork ([#2688], [#2687])
* Performance
* Fix performance of server-side SSL connection close. ([#2675])
* Wed Aug 25 2021 Manuel Schnitzer - updated to version 5.4.0
* Features
* Better/expanded names for threadpool threads ([#2657])
* Allow pkg_config for OpenSSL ([#2648], [#1412])
* Add `rack_url_scheme` to Puma::DSL, allows setting of `rack.url_scheme` header ([#2586], [#2569])
* Bugfixes
* `Binder#parse` - allow for symlinked unix path, add create_activated_fds debug ENV ([#2643], [#2638])
* Fix deprecation warning: minissl.c - Use Random.bytes if available ([#2642])
* Client certificates: set session id context while creating SSLContext ([#2633])
* Fix deadlock issue in thread pool ([#2656])
* Refactor
* Replace `IO.select` with `IO#wait_
*` when checking a single IO ([#2666])
* Tue Jun 01 2021 Manuel Schnitzer - updated to version 5.3.2
* Bugfixes
* Gracefully handle Rack not accepting CLI options (#2630, #2626)
* Fix sigterm misbehavior (#2629)
* Improvements to keepalive-connection shedding (#2628)
* Fri May 14 2021 Manuel Schnitzer - updated to version 5.3.1 [#]# 5.3.1 / 2021-05-11
* Security
* Close keepalive connections after the maximum number of fast inlined requests (#2625) [#]# 5.3.0 / 2021-05-07
* Features
* Add support for Linux\'s abstract sockets ([#2564], [#2526])
* Add debug to worker timeout and startup ([#2559], [#2528])
* Print warning when running one-worker cluster ([#2565], [#2534])
* Don\'t close systemd activated socket on pumactl restart ([#2563], [#2504])
* Bugfixes
* systemd - fix event firing ([#2591], [#2572])
* Immediately unlink temporary files ([#2613])
* Improve parsing of HTTP_HOST header ([#2605], [#2584])
* Handle fatal error that has no backtrace ([#2607], [#2552])
* Fix timing out requests too early ([#2606], [#2574])
* Handle segfault in Ruby 2.6.6 on thread-locals ([#2567], [#2566])
* Server#closed_socket? - parameter may be a MiniSSL::Socket ([#2596])
* Define UNPACK_TCP_STATE_FROM_TCP_INFO in the right place ([#2588], [#2556])
* request.rb - fix chunked assembly for ascii incompatible encodings, add test ([#2585], [#2583])
* Performance
* Reset peerip only if remote_addr_header is set ([#2609])
* Reduce puma_parser struct size ([#2590])
* Refactor
* Refactor drain on shutdown ([#2600])
* Micro optimisations in `wait_for_less_busy_worker` feature ([#2579])
* Lots of test fixes
* Mon Mar 15 2021 Manuel Schnitzer - updated to version 5.2.2
* Bugfixes
* Add `#flush` and `#sync` methods to `Puma::NullIO` ([#2553])
* Restore `sync=true` on `STDOUT` and `STDERR` streams ([#2557])
* Sat Feb 06 2021 Manuel Schnitzer - updated to version 5.2.1
* Bugfixes
* Fix TCP cork/uncork operations to work with ssl clients ([#2550])
* Require rack/common_logger explicitly if :verbose is true ([#2547])
* MiniSSL::Socket#write - use data.byteslice(wrote..-1) ([#2543])
* Set `AATTenv[CONTENT_LENGTH]` value as string. ([#2549])