Bump passenger from 3.0.17 to 6.0.4

[dependabot]

Bumps passenger from 3.0.17 to 6.0.4.

Release notes

Sourced from passenger's releases.

Release 6.0.4

• Adds Debian 10 "Buster" packages.

Release 6.0.3

• Add and option to specify the spawn dir during startup, which is specifically useful for CageFS users. Contributed by @​plmnikulin. Closes GH-2145.

  • Apache: PassengerSpawnDir
  • Nginx: passenger_spawn_dir

• [Nginx] Bumps the preferred Nginx version to 1.17.3 (previously 1.15.8).

• [Nginx] The preferred PCRE version is now 8.43 (previously 8.42).

• Adds Ubuntu 19.04 "Disco" packages, and removes Ubuntu 18.10 "Cosmic" and Ubuntu 14.04 "Trusty" packages.

• Changes minimum supported macOS version to 10.12 Sierra.

• Improves container detection and fixes a compilation warning in GCC 8+. Closes GH-2186.

• Allowed externally specifying an app instance to send a request to. Contributed by Mark R. James (@​mrj).

• Fixed an incompatibility with sending requests to specific app instances, when using the rails web-console gem. Contributed by Mark R. James (@​mrj).

• Fixed a regression (introduced in 5.1.9) where some hooks were not called. Closes GH-2103. Contributed by Mark R. James (@​mrj).

• Fixes compilation with clang 8 (latest macOS update) by updating vendored boost library from 1.67 to 1.69.

• Reverts a regression intruduced in 6.0.2 where Passenger would crash if it had to use the disk backed response cache. Closes GH-2189.

• [Nginx] Adds an option passenger_buffer_upload to allow buffering uploaded data in Passenger before forwarding it to the app. As a workaround for apps that cannot handle chunked data.

• [Enterprise] When using deferred port binding, no longer binds port if all apps do not start up.

• Updated various library versions used in precompiled binaries (used for e.g. gem installs):

  • PCRE 8.43 (was 8.42)
  • Curl 7.65.1 (was 7.64.0)
  • ccache 3.7.3 (was 3.6)
  • Git 2.22.0 (was 2.20.1)
  • OpenSSL 1.0.2s (was 1.0.2q)
  • RubyGems 3.0.6 (was 3.0.2)
  • GnuPG 2.2.16 (was 2.2.13)
  • libgcrypt 1.8.5 (was 1.8.4)
  • libgpg_error 1.36 (was 1.35)
  • libiconv 1.16 (was 1.15)
  • Ruby:
    • 2.4.5 -> 2.4.6
    • 2.5.3 -> 2.5.5
    • 2.6.1 -> 2.6.3

Release 6.0.2

• Allow compilation to work when Apple messed up their system ruby headers.

• Only try to read pid 1's /proc files as root, in container detection. Closes GH-2168.

• Add an option to disable prefixing application logs with "App PID stdout": PassengerDisableLogPrefix (Apache) / passenger_disable_log_prefix (Nginx). Closes GH-1915.

• Add support for identifying the Passenger instance by PID. Closes GH-2146. Contributed by Saverio Miroddi (@​saveriomiroddi).

• [Ruby] Made Passenger more resiliant to Rack bugs. Closes GH-2150.

• [Nginx] Do not touch Nginx's proxy_temp_path var in Passenger's nginx modules. Closes GH-2075. Contributed by Roman Berestnikov-Sivolov (@​ROMB).

• Updated Ruby versions used in precompiled binaries (used for e.g. gem installs) to include 2.6.1.

• Updated various library versions used in precompiled binaries (used for e.g. gem installs):

  • Curl: 7.64.0 (was: 7.63.0)
  • Ruby: 2.6.1 (was: 2.6.0)

... (truncated)

Changelog

Sourced from passenger's changelog.

Release 6.0.4

• Adds Debian 10 "Buster" packages.

Release 6.0.3

• Add and option to specify the spawn dir during startup, which is specifically useful for CageFS users. Contributed by @​plmnikulin. Closes GH-2145.

  • Apache: PassengerSpawnDir
  • Nginx: passenger_spawn_dir

• [Nginx] Bumps the preferred Nginx version to 1.17.3 (previously 1.15.8).

• [Nginx] The preferred PCRE version is now 8.43 (previously 8.42).

• Adds Ubuntu 19.04 "Disco" packages, and removes Ubuntu 18.10 "Cosmic" and Ubuntu 14.04 "Trusty" packages.

• Changes minimum supported macOS version to 10.12 Sierra.

• Improves container detection and fixes a compilation warning in GCC 8+. Closes GH-2186.

• Allowed externally specifying an app instance to send a request to. Contributed by Mark R. James (@​mrj).

• Fixed an incompatibility with sending requests to specific app instances, when using the rails web-console gem. Contributed by Mark R. James (@​mrj).

• Fixed a regression (introduced in 5.1.9) where some hooks were not called. Closes GH-2103. Contributed by Mark R. James (@​mrj).

• Fixes compilation with clang 8 (latest macOS update) by updating vendored boost library from 1.67 to 1.69.

• Reverts a regression intruduced in 6.0.2 where Passenger would crash if it had to use the disk backed response cache. Closes GH-2189.

• [Nginx] Adds an option passenger_buffer_upload to allow buffering uploaded data in Passenger before forwarding it to the app. As a workaround for apps that cannot handle chunked data.

• [Enterprise] When using deferred port binding, no longer binds port if all apps do not start up.

• Updated various library versions used in precompiled binaries (used for e.g. gem installs):

  • PCRE 8.43 (was 8.42)
  • Curl 7.65.1 (was 7.64.0)
  • ccache 3.7.3 (was 3.6)
  • Git 2.22.0 (was 2.20.1)
  • OpenSSL 1.0.2s (was 1.0.2q)
  • RubyGems 3.0.6 (was 3.0.2)
  • GnuPG 2.2.16 (was 2.2.13)
  • libgcrypt 1.8.5 (was 1.8.4)
  • libgpg_error 1.36 (was 1.35)
  • libiconv 1.16 (was 1.15)
  • Ruby:
    • 2.4.5 -> 2.4.6
    • 2.5.3 -> 2.5.5
    • 2.6.1 -> 2.6.3

Release 6.0.2

• Allow compilation to work when Apple messed up their system ruby headers.
• Only try to read pid 1's /proc files as root, in container detection. Closes GH-2168.
• Add an option to disable prefixing application logs with "App PID stdout". Contributed by Ian Kottman. Closes GH-1915.

... (truncated)

Commits

• 9c7bc2a actually use new testboxes
• 4fe1623 different appraoch to fixing buster
• 67d3cb2 address failures on old distros
• 8bd3502 attempt to fix buster tests
• f857f5c finish updating buster testbox
• 12d19a1 update debian testboxes
• 0a251cc release Passenger 6.0.4
• e66834d add missing buster CI config
• 0e93273 match upstream homebrew
• 5c0cb18 re-add buster packages
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot ignore this [patch|minor|major] version will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

[dependabot]

Superseded by #20.