chore(deps): bump the bundler-production-dependencies group across 1 directory with 10 updates

[dependabot]

Bumps the bundler-production-dependencies group with 10 updates in the /src/email directory:

Package	From	To
puma	8.0.0	8.0.2
google-protobuf	4.34.1	4.35.0
opentelemetry-sdk	1.11.0	1.12.0
opentelemetry-common	0.24.0	0.25.0
opentelemetry-logs-sdk	0.5.1	0.6.0
opentelemetry-metrics-sdk	0.13.1	0.14.0
opentelemetry-exporter-otlp	0.33.0	0.34.0
opentelemetry-exporter-otlp-metrics	0.8.0	0.9.1
opentelemetry-exporter-otlp-logs	0.4.0	0.5.1
opentelemetry-instrumentation-all	0.92.0	0.94.0

Updates puma from 8.0.0 to 8.0.2

Release notes

Sourced from puma's releases.

v8.0.2

• Bugfixes
  • Anchor PROXY protocol v1 regex to string start and enforce max line length to prevent injection via crafted request bodies (#3944)
  • Parse PROXY protocol header only on the first request per connection to prevent spoofing on keep-alive connections (#3944)

Security advisories

• CVE-2026-47736 / GHSA-qpgp-93vx-g8v8: Puma PROXY Protocol v1 Parser Allows Remote Memory Exhaustion
• CVE-2026-47737 / GHSA-2vqw-3mp8-cgmx: Puma PROXY Protocol v1 Accepts Repeated Protocol Headers on Persistent Connections

v8.0.1

• Bugfixes

  • Fix prune_bundler stripping user-configured BUNDLE_* env vars (e.g. BUNDLE_WITHOUT) on re-exec, which caused workers to crash on boot (#3929)

• Performance

  • Use blocks for debug logging to avoid creating log messages when debug is disabled (#3920)

• Docs

  • Fix incorrect hook names in gRPC docs (#3923)
  • Reword v8 upgrade guide IPv6 bullet for clarity (#3928)

Changelog

Sourced from puma's changelog.

8.0.2 / 2026-05-27

• Bugfixes
  • Anchor PROXY protocol v1 regex to string start and enforce max line length to prevent injection via crafted request bodies (#3944)
  • Parse PROXY protocol header only on the first request per connection to prevent spoofing on keep-alive connections (#3944)

8.0.1 / 2026-04-27

• Bugfixes

  • Fix prune_bundler stripping user-configured BUNDLE_* env vars (e.g. BUNDLE_WITHOUT) on re-exec, which caused workers to crash on boot (#3929)

• Performance

  • Use blocks for debug logging to avoid creating log messages when debug is disabled (#3920)

• Docs

  • Fix incorrect hook names in gRPC docs (#3923)
  • Reword v8 upgrade guide IPv6 bullet for clarity (#3928)

Commits

• 8085b75 Release v8.0.2 (#3945)
• 439c613 8.0.2 backport (#3944)
• cee7e61 Release v8.0.1 (#3932)
• f955caf Fix prune_bundler stripping user-configured BUNDLE_* env vars on re-exec (#3929)
• 97996aa ci: test_error_logger.rb - fix TruffleRuby error (#3930)
• 03825bc Build(deps): Bump actions/github-script from 8 to 9 (#3925)
• 053efae Reword v8 upgrade guide ipv6 bullet (#3928)
• b19f35a Fix incorrect hook names in gRPC docs (#3923)
• eeabe4b Use blocks for debug logging to avoid creating messages if debug disabled (#3...
• See full diff in compare view

Updates google-protobuf from 4.34.1 to 4.35.0

Commits

• See full diff in compare view

Updates opentelemetry-sdk from 1.11.0 to 1.12.0

Release notes

Sourced from opentelemetry-sdk's releases.

opentelemetry-sdk 1.12.0

v1.12.0 / 2026-05-12

• ADDED: Add git tag to source URI in gemspec (#2101)
• FIXED: Consistent labels for otel.bsp.dropped_spans metric (#2108)

Commits

• See full diff in compare view

Updates opentelemetry-common from 0.24.0 to 0.25.0

Release notes

Sourced from opentelemetry-common's releases.

opentelemetry-common 0.25.0

v0.25.0 / 2026-05-12

• ADDED: Add git tag to source URI in gemspec (#2101)

Commits

• See full diff in compare view

Updates opentelemetry-logs-sdk from 0.5.1 to 0.6.0

Release notes

Sourced from opentelemetry-logs-sdk's releases.

opentelemetry-logs-sdk 0.6.0

v0.6.0 / 2026-05-12

• ADDED: Add event_name field to Logs (#2077)
• ADDED: Add git tag to source URI in gemspec (#2101)

Commits

• See full diff in compare view

Updates opentelemetry-metrics-sdk from 0.13.1 to 0.14.0

Release notes

Sourced from opentelemetry-metrics-sdk's releases.

opentelemetry-metrics-sdk 0.14.0

v0.14.0 / 2026-05-12

• BREAKING CHANGE: Use trace_based exemplar filter by default (#2112)
• ADDED: Use trace_based exemplar filter by default (#2112)
• ADDED: Add git tag to source URI in gemspec (#2101)
• FIXED: Return false if it is noop_exemplar_reservoir (#2104)

Commits

• See full diff in compare view

Updates opentelemetry-exporter-otlp from 0.33.0 to 0.34.0

Release notes

Sourced from opentelemetry-exporter-otlp's releases.

opentelemetry-exporter-otlp 0.34.0

v0.34.0 / 2026-05-12

• ADDED: Add git tag to source URI in gemspec (#2101)

Commits

• See full diff in compare view

Updates opentelemetry-exporter-otlp-metrics from 0.8.0 to 0.9.1

Release notes

Sourced from opentelemetry-exporter-otlp-metrics's releases.

opentelemetry-exporter-otlp-metrics 0.9.1

v0.9.1 / 2026-06-02

• FIXED: URI.join dropping path prefix in logs and metrics exporters (#2158)

opentelemetry-exporter-otlp-metrics 0.9.0

v0.9.0 / 2026-05-12

• ADDED: Add git tag to source URI in gemspec (#2101)

Commits

• See full diff in compare view

Updates opentelemetry-exporter-otlp-logs from 0.4.0 to 0.5.1

Release notes

Sourced from opentelemetry-exporter-otlp-logs's releases.

opentelemetry-exporter-otlp-logs 0.5.1

v0.5.1 / 2026-06-02

• FIXED: URI.join dropping path prefix in logs and metrics exporters (#2158)

opentelemetry-exporter-otlp-logs 0.5.0

v0.5.0 / 2026-05-12

• ADDED: Add event_name field to Logs (#2077)
• ADDED: Add git tag to source URI in gemspec (#2101)

Commits

• See full diff in compare view

Updates opentelemetry-instrumentation-all from 0.92.0 to 0.94.0

Release notes

Sourced from opentelemetry-instrumentation-all's releases.

opentelemetry-instrumentation-all 0.94.0

v0.94.0 / 2026-05-21

• ADDED: Upgrade opentelemetry-instrumentation-trilogy to 0.69.0

opentelemetry-instrumentation-all 0.93.0

v0.93.0 / 2026-04-28

• ADDED: Upgrade opentelemetry-instrumentation-rails to 0.42.0

Commits

• See full diff in compare view