build(deps): bump the rubygems group with 2 updates (#953)

Bumps the rubygems group with 2 updates:
[parallel](https://github.com/grosser/parallel) and
[puma](https://github.com/puma/puma).

Updates `parallel` from 1.28.0 to 2.0.1
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/grosser/parallel/blob/master/CHANGELOG.md">parallel's
changelog</a>.</em></p>
<blockquote>
<h2>2.0.1</h2>
<h3>Added</h3>
<ul>
<li>require mfa for gem release</li>
</ul>
<h2>2.0.0</h2>
<h3>Changed</h3>
<ul>
<li>Require Ruby &gt;= 3.3</li>
<li>Add Ruby 4 Ractor support</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/grosser/parallel/commit/f9c570b2eb7f04ad3d36d99cf8f50aaed0250791"><code>f9c570b</code></a>
v2.0.1</li>
<li><a
href="https://github.com/grosser/parallel/commit/45c60ab20425d3399b653e7fc2e4a5fa4d396545"><code>45c60ab</code></a>
Merge pull request <a
href="https://redirect.github.com/grosser/parallel/issues/366">#366</a>
from tagliala/chore/opt-in-for-mfa-explicitly</li>
<li><a
href="https://github.com/grosser/parallel/commit/c80ad3c11ecdb50e692d6cd6c9899facb39066cf"><code>c80ad3c</code></a>
Opt-in for MFA requirement explicitly</li>
<li><a
href="https://github.com/grosser/parallel/commit/e2ad082eb6238e55615efc552baf9032d17a709d"><code>e2ad082</code></a>
simplify changelog</li>
<li><a
href="https://github.com/grosser/parallel/commit/0c2734762d16668b8583e96a14b7db4511a62e8a"><code>0c27347</code></a>
Merge pull request <a
href="https://redirect.github.com/grosser/parallel/issues/364">#364</a>
from sferik/changelog</li>
<li><a
href="https://github.com/grosser/parallel/commit/b76538ae65f0a76bbcf9bee9468eaf765304d4ce"><code>b76538a</code></a>
Add CHANGELOG.md with full release history</li>
<li><a
href="https://github.com/grosser/parallel/commit/090b054b25fd5c1bb2f61b6f25e2cd385510ae2d"><code>090b054</code></a>
v2.0.0</li>
<li><a
href="https://github.com/grosser/parallel/commit/704149de013512f28a0e7cb2c5b96ddbf4681e55"><code>704149d</code></a>
Merge pull request <a
href="https://redirect.github.com/grosser/parallel/issues/363">#363</a>
from grosser/grosser/rac4</li>
<li><a
href="https://github.com/grosser/parallel/commit/6aee485882145a306e89446b30cedf254e85d9eb"><code>6aee485</code></a>
ruby 4 ractors</li>
<li><a
href="https://github.com/grosser/parallel/commit/975c4a9d7a1dc89a120cdc0f23eff2104d75f989"><code>975c4a9</code></a>
Merge pull request <a
href="https://redirect.github.com/grosser/parallel/issues/362">#362</a>
from brandonzylstra/patch-1</li>
<li>Additional commits viewable in <a
href="https://github.com/grosser/parallel/compare/v1.28.0...v2.0.1">compare
view</a></li>
</ul>
</details>
<br />

Updates `puma` from 7.2.0 to 8.0.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/puma/puma/releases">puma's
releases</a>.</em></p>
<blockquote>
<h2>v8.0.0 - Into the Arena</h2>
<!-- raw HTML omitted -->
<p>Read our <a
href="https://github.com/puma/puma/blob/main/docs/8.0-Upgrade.md">Version
8 Upgrade Guide.</a></p>
<ul>
<li>
<p>Features</p>
<ul>
<li>Add <code>env[&quot;puma.mark_as_io_bound&quot;]</code> API and
<code>max_io_threads</code> config to allow IO-bound requests to exceed
the thread pool max, enabling better handling of mixed workloads (<a
href="https://redirect.github.com/puma/puma/issues/3816">#3816</a>, <a
href="https://redirect.github.com/puma/puma/issues/3894">#3894</a>)</li>
<li>Add <code>single</code> and <code>cluster</code> DSL hooks for
mode-specific configuration (<a
href="https://redirect.github.com/puma/puma/issues/3621">#3621</a>)</li>
<li>Add <code>on_force</code> option to <code>shutdown_debug</code> to
only dump thread backtraces on forced (non-graceful) shutdown (<a
href="https://redirect.github.com/puma/puma/issues/3671">#3671</a>)</li>
<li>Add API to dynamically update min and max thread counts at runtime
via <code>update_thread_pool_min_max</code> and
<code>ServerPluginControl</code> (<a
href="https://redirect.github.com/puma/puma/issues/3658">#3658</a>)</li>
<li>Use SIGPWR for thread backtrace dumps on Linux/JRuby where SIGINFO
is unavailable (<a
href="https://redirect.github.com/puma/puma/issues/3829">#3829</a>)</li>
</ul>
</li>
<li>
<p>Bugfixes</p>
<ul>
<li>Fix phased restart for <code>fork_worker</code> to avoid forking
from stale worker 0 when it has been replaced (<a
href="https://redirect.github.com/puma/puma/issues/3853">#3853</a>)</li>
</ul>
</li>
<li>
<p>Performance</p>
<ul>
<li>JRuby HTTP parser improvements: pre-allocated header keys, perfect
hash lookup, reduced memory copies (<a
href="https://redirect.github.com/puma/puma/issues/3838">#3838</a>)</li>
<li>Cache downcased header key in <code>str_headers</code> to avoid
redundant <code>String#downcase</code> calls, reducing allocations by
~50% per response (<a
href="https://redirect.github.com/puma/puma/issues/3874">#3874</a>)</li>
</ul>
</li>
<li>
<p>Refactor</p>
<ul>
<li>Collect <code>env</code> processing into dedicated
<code>client_env.rb</code> module (<a
href="https://redirect.github.com/puma/puma/issues/3582">#3582</a>)</li>
<li>Move event to default configuration (<a
href="https://redirect.github.com/puma/puma/issues/3872">#3872</a>)</li>
</ul>
</li>
<li>
<p>Docs</p>
<ul>
<li>Add gRPC guide for configuring gRPC lifecycle hooks in clustered
mode (<a
href="https://redirect.github.com/puma/puma/issues/3885">#3885</a>)</li>
<li>Add 7.0 upgrade guide, move 5.0/6.0 upgrade guides to docs directory
(<a
href="https://redirect.github.com/puma/puma/issues/3900">#3900</a>)</li>
<li>Correct default values for <code>persistent_timeout</code> and
<code>worker_boot_timeout</code> in DSL docs (<a
href="https://redirect.github.com/puma/puma/issues/3912">#3912</a>)</li>
<li>Add file descriptor limit warning in test helper for contributors
(<a
href="https://redirect.github.com/puma/puma/issues/3893">#3893</a>)</li>
</ul>
</li>
<li>
<p>Breaking changes</p>
<ul>
<li>Default production bind address changed from <code>0.0.0.0</code> to
<code>::</code> (IPv6) when a non-loopback IPv6 interface is available;
falls back to <code>0.0.0.0</code> if IPv6 is unavailable (<a
href="https://redirect.github.com/puma/puma/issues/3847">#3847</a>)</li>
</ul>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/puma/puma/blob/main/History.md">puma's
changelog</a>.</em></p>
<blockquote>
<h2>8.0.0 / 2026-03-27</h2>
<ul>
<li>
<p>Features</p>
<ul>
<li>Add <code>env[&quot;puma.mark_as_io_bound&quot;]</code> API and
<code>max_io_threads</code> config to allow IO-bound requests to exceed
the thread pool max, enabling better handling of mixed workloads (<a
href="https://redirect.github.com/puma/puma/issues/3816">#3816</a>, <a
href="https://redirect.github.com/puma/puma/issues/3894">#3894</a>)</li>
<li>Add <code>single</code> and <code>cluster</code> DSL hooks for
mode-specific configuration (<a
href="https://redirect.github.com/puma/puma/issues/3621">#3621</a>)</li>
<li>Add <code>on_force</code> option to <code>shutdown_debug</code> to
only dump thread backtraces on forced (non-graceful) shutdown (<a
href="https://redirect.github.com/puma/puma/issues/3671">#3671</a>)</li>
<li>Add API to dynamically update min and max thread counts at runtime
via <code>update_thread_pool_min_max</code> and
<code>ServerPluginControl</code> (<a
href="https://redirect.github.com/puma/puma/issues/3658">#3658</a>)</li>
<li>Use SIGPWR for thread backtrace dumps on Linux/JRuby where SIGINFO
is unavailable (<a
href="https://redirect.github.com/puma/puma/issues/3829">#3829</a>)</li>
</ul>
</li>
<li>
<p>Bugfixes</p>
<ul>
<li>Fix phased restart for <code>fork_worker</code> to avoid forking
from stale worker 0 when it has been replaced (<a
href="https://redirect.github.com/puma/puma/issues/3853">#3853</a>)</li>
</ul>
</li>
<li>
<p>Performance</p>
<ul>
<li>JRuby HTTP parser improvements: pre-allocated header keys, perfect
hash lookup, reduced memory copies (<a
href="https://redirect.github.com/puma/puma/issues/3838">#3838</a>)</li>
<li>Cache downcased header key in <code>str_headers</code> to avoid
redundant <code>String#downcase</code> calls, reducing allocations by
~50% per response (<a
href="https://redirect.github.com/puma/puma/issues/3874">#3874</a>)</li>
</ul>
</li>
<li>
<p>Refactor</p>
<ul>
<li>Collect <code>env</code> processing into dedicated
<code>client_env.rb</code> module (<a
href="https://redirect.github.com/puma/puma/issues/3582">#3582</a>)</li>
<li>Move event to default configuration (<a
href="https://redirect.github.com/puma/puma/issues/3872">#3872</a>)</li>
</ul>
</li>
<li>
<p>Docs</p>
<ul>
<li>Add gRPC guide for configuring gRPC lifecycle hooks in clustered
mode (<a
href="https://redirect.github.com/puma/puma/issues/3885">#3885</a>)</li>
<li>Add 7.0 upgrade guide, move 5.0/6.0 upgrade guides to docs directory
(<a
href="https://redirect.github.com/puma/puma/issues/3900">#3900</a>)</li>
<li>Correct default values for <code>persistent_timeout</code> and
<code>worker_boot_timeout</code> in DSL docs (<a
href="https://redirect.github.com/puma/puma/issues/3912">#3912</a>)</li>
<li>Add file descriptor limit warning in test helper for contributors
(<a
href="https://redirect.github.com/puma/puma/issues/3893">#3893</a>)</li>
</ul>
</li>
<li>
<p>Breaking changes</p>
<ul>
<li>Default production bind address changed from <code>0.0.0.0</code> to
<code>::</code> (IPv6) when a non-loopback IPv6 interface is available;
falls back to <code>0.0.0.0</code> if IPv6 is unavailable (<a
href="https://redirect.github.com/puma/puma/issues/3847">#3847</a>)</li>
</ul>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/puma/puma/commit/08f63d495955eaee065d0ee18849f4ddcd52fe72"><code>08f63d4</code></a>
Release v8.0.0 (<a
href="https://redirect.github.com/puma/puma/issues/3914">#3914</a>)</li>
<li><a
href="https://github.com/puma/puma/commit/7406cc192480ce9d01c9a47e6f41fcb1548217a6"><code>7406cc1</code></a>
Fix IPv4-mapped IPv6 addresses in <code>REMOTE_ADDR</code> and request
logs (<a
href="https://redirect.github.com/puma/puma/issues/3916">#3916</a>)</li>
<li><a
href="https://github.com/puma/puma/commit/e090243320eb743a6c03f77f4ffa9e1a24c677b1"><code>e090243</code></a>
Build(deps): Bump actions/checkout from 4 to 6 (<a
href="https://redirect.github.com/puma/puma/issues/3915">#3915</a>)</li>
<li><a
href="https://github.com/puma/puma/commit/7d5dca1a561a95c2a6b8742b52c81c73cd2b95ca"><code>7d5dca1</code></a>
Update SECURITY.md, native Github vuln reports [ci skip] (<a
href="https://redirect.github.com/puma/puma/issues/3913">#3913</a>)</li>
<li><a
href="https://github.com/puma/puma/commit/66e6a32de52d9beed43e1c598bda360f906ccbef"><code>66e6a32</code></a>
Minor correction to defaults documented in dsl.rb (<a
href="https://redirect.github.com/puma/puma/issues/3912">#3912</a>)</li>
<li><a
href="https://github.com/puma/puma/commit/3788eca453a64ffb05a67115d3e2a276bbaf21a3"><code>3788eca</code></a>
ci: limit rack-conform to main pushes and scope ragel PR runs (<a
href="https://redirect.github.com/puma/puma/issues/3908">#3908</a>)</li>
<li><a
href="https://github.com/puma/puma/commit/57b7799201adf43cdf508f90c57b95e23f49bbcd"><code>57b7799</code></a>
ci: run turbo-rails only on latest stable Ruby and Rails (<a
href="https://redirect.github.com/puma/puma/issues/3909">#3909</a>)</li>
<li><a
href="https://github.com/puma/puma/commit/6685d6b8024c5480774b790808e4f0343e414fa5"><code>6685d6b</code></a>
ci: replace skip-duplicate jobs with concurrency and trigger filters (<a
href="https://redirect.github.com/puma/puma/issues/3907">#3907</a>)</li>
<li><a
href="https://github.com/puma/puma/commit/2848c823dfc9838033d6ce342fee917e81aeedc1"><code>2848c82</code></a>
ci: run push workflows only on main and release branches (<a
href="https://redirect.github.com/puma/puma/issues/3906">#3906</a>)</li>
<li><a
href="https://github.com/puma/puma/commit/97a37bb7c6a457f8846eb3ce307daadd4b38b4f8"><code>97a37bb</code></a>
Add release pre-merge checks and align Release.md [ci skip] (<a
href="https://redirect.github.com/puma/puma/issues/3904">#3904</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/puma/puma/compare/v7.2.0...v8.0.0">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Author: dependabot[bot]

Gemfile.lock

@@ -204,7 +204,7 @@ GEM
       racc (~> 1.4)
     nokogiri (1.19.2-x86_64-linux-musl)
       racc (~> 1.4)
-    parallel (1.28.0)
+    parallel (2.0.1)
     parser (3.3.11.1)
       ast (~> 2.4.1)
       racc
@@ -230,7 +230,7 @@ GEM
       date
       stringio
     public_suffix (7.0.5)
-    puma (7.2.0)
+    puma (8.0.0)
       nio4r (~> 2.0)
     puppeteer-ruby (0.51.0)
       async (>= 2.35.1, < 3.0)
@@ -292,11 +292,11 @@ GEM
     rspec-support (3.13.7)
     rss (0.3.2)
       rexml
-    rubocop (1.86.0)
+    rubocop (1.86.1)
       json (~> 2.3)
       language_server-protocol (~> 3.17.0.2)
       lint_roller (~> 1.1.0)
-      parallel (~> 1.10)
+      parallel (>= 1.10)
       parser (>= 3.3.0.2)
       rainbow (>= 2.2.2, < 4.0)
       regexp_parser (>= 2.9.3, < 3.0)
@@ -470,7 +470,7 @@ CHECKSUMS
   nokogiri (1.19.2-x86_64-darwin) sha256=7d9af11fda72dfaa2961d8c4d5380ca0b51bc389dc5f8d4b859b9644f195e7a4
   nokogiri (1.19.2-x86_64-linux-gnu) sha256=fa8feca882b73e871a9845f3817a72e9734c8e974bdc4fbad6e4bc6e8076b94f
   nokogiri (1.19.2-x86_64-linux-musl) sha256=93128448e61a9383a30baef041bf1f5817e22f297a1d400521e90294445069a8
-  parallel (1.28.0) sha256=33e6de1484baf2524792d178b0913fc8eb94c628d6cfe45599ad4458c638c970
+  parallel (2.0.1) sha256=337782d3e39f4121e67563bf91dd8ece67f48923d90698614773a0ec9a5b2c7d
   parser (3.3.11.1) sha256=d17ace7aabe3e72c3cc94043714be27cc6f852f104d81aa284c2281aecc65d54
   pp (0.6.3) sha256=2951d514450b93ccfeb1df7d021cae0da16e0a7f95ee1e2273719669d0ab9df6
   prettyprint (0.2.0) sha256=2bc9e15581a94742064a3cc8b0fb9d45aae3d03a1baa6ef80922627a0766f193
@@ -484,7 +484,7 @@ CHECKSUMS
   protocol-websocket (0.20.2) sha256=c41d93c35fba5dae85375c597f76975f3dbd75d8c5b2f21b33dab4dc22a5a511
   psych (5.3.1) sha256=eb7a57cef10c9d70173ff74e739d843ac3b2c019a003de48447b2963d81b1974
   public_suffix (7.0.5) sha256=1a8bb08f1bbea19228d3bed6e5ed908d1cb4f7c2726d18bd9cadf60bc676f623
-  puma (7.2.0) sha256=bf8ef4ab514a4e6d4554cb4326b2004eba5036ae05cf765cfe51aba9706a72a8
+  puma (8.0.0) sha256=1681050b8b60fab1d3033255ab58b6aec64cd063e43fc6f8204bcb8bf9364b88
   puppeteer-ruby (0.51.0) sha256=8a7637963f8cd5b88416dd8c669a3ec2fe40a42cda2449539d75525a4da2f233
   racc (1.8.1) sha256=4a7f6929691dbec8b5209a0b373bc2614882b55fc5d2e447a21aaa691303d62f
   rack (3.2.6) sha256=5ed78e1f73b2e25679bec7d45ee2d4483cc4146eb1be0264fc4d94cb5ef212c2
@@ -510,7 +510,7 @@ CHECKSUMS
   rspec-openapi (0.25.0) sha256=76e055d3ee421a2a0c5d45986ae958f045f149def995b55ee9d2c68318f38305
   rspec-support (3.13.7) sha256=0640e5570872aafefd79867901deeeeb40b0c9875a36b983d85f54fb7381c47c
   rss (0.3.2) sha256=3bd0446d32d832cda00ba07f4b179401f903b52ea1fdaac0f1f08de61a501efa
-  rubocop (1.86.0) sha256=4ff1186fe16ebe9baff5e7aad66bb0ad4cabf5cdcd419f773146dbba2565d186
+  rubocop (1.86.1) sha256=44415f3f01d01a21e01132248d2fd0867572475b566ca188a0a42133a08d4531
   rubocop-ast (1.49.1) sha256=4412f3ee70f6fe4546cc489548e0f6fcf76cafcfa80fa03af67098ffed755035
   rubocop-performance (1.26.1) sha256=cd19b936ff196df85829d264b522fd4f98b6c89ad271fa52744a8c11b8f71834
   rubocop-rake (0.7.1) sha256=3797f2b6810c3e9df7376c26d5f44f3475eda59eb1adc38e6f62ecf027cbae4d