Log message:
www/ruby-puma: update to 5.6.5

5.6.5 (2022-08-23)

Bugfixes

* NullIO#closed should return false ([#2883])
* Puma::ControlCLI - allow refork command to be sent as a request ([#2868],
  [#2866])
* [jruby] Fix TLS verification hang ([#2890], [#2729])
* extconf.rb - don't use pkg_config('openssl') if '--with-openssl-dir' is
  used ([#2885], [#2839])
* MiniSSL - detect SSL_CTX_set_dh_auto ([#2864], [#2863])
* Fix rack.after_reply exceptions breaking connections ([#2861], [#2856])
* Escape SSL cert and filenames ([#2855])
* Fail hard if SSL certs or keys are invalid ([#2848])
* Fail hard if SSL certs or keys cannot be read by user ([#2847])
* Fix build with Opaque DH in LibreSSL 3.5. ([#2838])
* Pre-existing socket file removed when TERM is issued after USR2 (if puma
  is running in cluster mode) ([#2817])
* Fix Puma::StateFile#load incompatibility ([#2810])

Log message:
www/ruby-puma: update to 5.6.4

5.6.4 (2022-03-30)

Security

* Close several HTTP Request Smuggling exploits (CVE-2022-24790)

5.6.2 (2022-02-11)

Bugfix/Security

* Response body will always be closed. (GHSA-rmj8-8hhh-gv5h, related to #2809)

5.6.1 (2022-01-26)

Bugfixes

* Reverted a commit which appeared to be causing occasional blank header
  values (#2809)

5.6.0 (2022-01-25)

Features

* Support localhost integration in ssl_bind (#2764, #2708)
* Allow backlog parameter to be set with ssl_bind DSL (#2780)
* Remove yaml (psych) requirement in StateFile (#2784)
* Allow culling of oldest workers, previously was only youngest (#2773,
  #2794)
* Add worker_check_interval configuration option (#2759)
* Always send lowlevel_error response to client (#2731, #2341)
* Support for cert_pem and key_pem with ssl_bind DSL (#2728)

Bugfixes

* Keep thread names under 15 characters, prevents breakage on some OSes
  (#2733)
* Fix two 'old-style-definition' compile warning (#2807, #2806)
* Log environment correctly using option value (#2799)
* Fix warning from Ruby master (will be 3.2.0) (#2785)
* extconf.rb - fix openssl with old Windows builds (#2757)
* server.rb - rescue handling (Errno::EBADF) for @notify.close (#2745)

Refactor

* server.rb - refactor code using @options[:remote_address] (#2742)
* [jruby] a couple refactorings - avoid copy-ing bytes (#2730)

Log message:
www/ruby-puma: update to 5.5.2

5.5.2 (2021-10-12)

Bugfixes

* Allow UTF-8 in HTTP header values

5.5.1 (2021-10-12)

Feature (added as mistake - we don't normally do this on bugfix releases,
sorry!)

* Allow setting APP_ENV in preference to RACK_ENV or RAILS_ENV (#2702)

Security

* Do not allow LF as a line ending in a header (CVE-2021-41136)

5.5.0 (2021-09-19)

Features

* Automatic SSL certificate provisioning for localhost, via localhost gem
  (#2610, #2257)
* add support for the PROXY protocol (v1 only) (#2654, #2651)
* Add a semantic CLI option for no config file (#2689)

Bugfixes

* More elaborate exception handling - lets some dead pumas die. (#2700,
  #2699)
* allow multiple after_worker_fork hooks (#2690)
* Preserve BUNDLE_APP_CONFIG on worker fork (#2688, #2687)

Performance

* Fix performance of server-side SSL connection close. (#2675)

Log message:
www: Replace RMD160 checksums with BLAKE2s checksums

All checksums have been double-checked against existing RMD160 and
SHA512 hashes

Not committed (merge conflicts):
www/nghttp2/distinfo

Unfetchable distfiles (almost certainly fetched conditionally...):
./www/nginx-devel/distinfo array-var-nginx-module-0.05.tar.gz
./www/nginx-devel/distinfo echo-nginx-module-0.62.tar.gz
./www/nginx-devel/distinfo encrypted-session-nginx-module-0.08.tar.gz
./www/nginx-devel/distinfo form-input-nginx-module-0.12.tar.gz
./www/nginx-devel/distinfo headers-more-nginx-module-0.33.tar.gz
./www/nginx-devel/distinfo lua-nginx-module-0.10.19.tar.gz
./www/nginx-devel/distinfo naxsi-1.3.tar.gz
./www/nginx-devel/distinfo nginx-dav-ext-module-3.0.0.tar.gz
./www/nginx-devel/distinfo nginx-rtmp-module-1.2.2.tar.gz
./www/nginx-devel/distinfo nginx_http_push_module-1.2.10.tar.gz
./www/nginx-devel/distinfo ngx_cache_purge-2.5.1.tar.gz
./www/nginx-devel/distinfo ngx_devel_kit-0.3.1.tar.gz
./www/nginx-devel/distinfo ngx_http_geoip2_module-3.3.tar.gz
./www/nginx-devel/distinfo njs-0.5.0.tar.gz
./www/nginx-devel/distinfo set-misc-nginx-module-0.32.tar.gz
./www/nginx/distinfo array-var-nginx-module-0.05.tar.gz
./www/nginx/distinfo echo-nginx-module-0.62.tar.gz
./www/nginx/distinfo encrypted-session-nginx-module-0.08.tar.gz
./www/nginx/distinfo form-input-nginx-module-0.12.tar.gz
./www/nginx/distinfo headers-more-nginx-module-0.33.tar.gz
./www/nginx/distinfo lua-nginx-module-0.10.19.tar.gz
./www/nginx/distinfo naxsi-1.3.tar.gz
./www/nginx/distinfo nginx-dav-ext-module-3.0.0.tar.gz
./www/nginx/distinfo nginx-rtmp-module-1.2.2.tar.gz
./www/nginx/distinfo nginx_http_push_module-1.2.10.tar.gz
./www/nginx/distinfo ngx_cache_purge-2.5.1.tar.gz
./www/nginx/distinfo ngx_devel_kit-0.3.1.tar.gz
./www/nginx/distinfo ngx_http_geoip2_module-3.3.tar.gz
./www/nginx/distinfo njs-0.5.0.tar.gz
./www/nginx/distinfo set-misc-nginx-module-0.32.tar.gz

Log message:
www: Remove SHA1 hashes for distfiles

Log message:
www/ruby-puma: update to 5.4.0

5.4.0 (2021-07-28)

Features

* Better/expanded names for threadpool threads (#2657)
* Allow pkg_config for OpenSSL (#2648, #1412)
* Add rack_url_scheme to Puma::DSL, allows setting of rack.url_scheme header
  (#2586, #2569)

Bugfixes

* Binder#parse - allow for symlinked unix path, add create_activated_fds
  debug ENV (#2643, #2638)
* Fix deprecation warning: minissl.c - Use Random.bytes if available (#2642)
* Client certificates: set session id context while creating SSLContext
  (#2633)
* Fix deadlock issue in thread pool (#2656)

Refactor

* Replace IO.select with IO#wait_* when checking a single IO (#2666)

Log message:
www/ruby-puma: update to 5.3.2

5.3.2 (2021-05-21)

Bugfixes

* Gracefully handle Rack not accepting CLI options (#2630, #2626)
* Fix sigterm misbehavior (#2629)
* Improvements to keepalive-connection shedding (#2628)

5.3.1 (2021-05-11)

Security

* Close keepalive connections after the maximum number of fast inlined
  requests (CVE-2021-29509) (#2625)

5.3.0 (2021-05-07)

Features

* Add support for Linux's abstract sockets (#2564, #2526)
* Add debug to worker timeout and startup (#2559, #2528)
* Print warning when running one-worker cluster (#2565, #2534)
* Don't close systemd activated socket on pumactl restart (#2563, #2504)

Bugfixes

* systemd - fix event firing (#2591, #2572)
* Immediately unlink temporary files (#2613)
* Improve parsing of HTTP_HOST header (#2605, #2584)
* Handle fatal error that has no backtrace (#2607, #2552)
* Fix timing out requests too early (#2606, #2574)
* Handle segfault in Ruby 2.6.6 on thread-locals (#2567, #2566)
* Server#closed_socket? - parameter may be a MiniSSL::Socket (#2596)
* Define UNPACK_TCP_STATE_FROM_TCP_INFO in the right place (#2588, #2556)
* request.rb - fix chunked assembly for ascii incompatible encodings, add
  test (#2585, #2583)

Performance

* Reset peerip only if remote_addr_header is set (#2609)
* Reduce puma_parser struct size (#2590)

Refactor

* Refactor drain on shutdown (#2600)
* Micro optimisations in wait_for_less_busy_worker feature (#2579)
* Lots of test fixes

Log message:
www/ruby-puma: update to 5.2.2

5.2.2 / 2021-02-22

Bugfixes

* Add #flush and #sync methods to Puma::NullIO (#2553)
* Restore sync=true on STDOUT and STDERR streams (#

Log message:
www/ruby-puma: update to 5.2.1

5.2.1 (2021-02-05)

Bugfixes
* Fix TCP cork/uncork operations to work with ssl clients ([#2550])
* Require rack/common_logger explicitly if :verbose is true ([#2547])
* MiniSSL::Socket#write - use data.byteslice(wrote..-1) ([#2543])
* Set @env[CONTENT_LENGTH] value as string. ([#2549])

Log message:
www/ruby-puma: update to 5.2.0

5.2.0 (2021-01-27)

Features

* 10x latency improvement for MRI on ssl connections by reducing overhead
  ([#2519])
* Add option to specify the desired IO selector backend for libev
  ([#2522])
* Add ability to set OpenSSL verification flags (MRI only) ([#2490])
* Uses flush after writing messages to avoid mutating $stdout and $stderr
  using sync=true ([#2486])

Bugfixes

* MiniSSL - Update dhparam to 2048 bit for use with SSL_CTX_set_tmp_dh
  ([#2535])
* Change 'Goodbye!' message to be output after listeners are closed
  ([#2529])
* Fix ssl bind logging with 0.0.0.0 and localhost ([#2533])
* Fix compiler warnings, but skipped warnings related to ragel state
  machine generated code ([#1953])
* Fix phased restart errors related to nio4r gem when using the Puma
  control server ([#2516])
* Add #string method to Puma::NullIO ([#2520])
* Fix binding via Rack handler to IPv6 addresses ([#2521])

Refactor

* Refactor MiniSSL::Context on MRI, fix MiniSSL::Socket#write ([#2519])
* Remove Server#read_body ([#2531])
* Fail build if compiling extensions raises warnings on GH Actions,
  configurable via MAKE_WARNINGS_INTO_ERRORS ([#1953])