Bump bullet from 7.1.6 to 8.0.5

[dependabot]

Bumps bullet from 7.1.6 to 8.0.5.

Changelog

Sourced from bullet's changelog.

8.0.5 (04/21/2025)

• Properly insert ContentSecurityPolicy middleware
• Properly parse query string

8.0.4 (04/18/2025)

• Insert bullet middleware before ContentSecurityPolicy
• Support url query skip_html_injection=true
• Mark object as impossible after updating inversed

8.0.3 (04/04/2025)

• Update non persisted inversed_objects

8.0.2 (04/02/2025)

• Do not cache bullet_key if object is not persisted

8.0.1 (02/10/2025)

• Update benchmark to use sqlite
• Reduce mem allocations
• Require active_support's inflections module before requiring the delegation module

8.0.0 (11/10/2024)

• Support Rails 8
• Drop Rails 4.0 and 4.1 support
• Require Ruby at least 2.7.0
• Store global objects into thread-local variables
• Avoid globally polluting ::String and ::Object classes

7.2.0 (07/12/2024)

• Support Rails 7.2
• Fix count method signature for active_record5 and active_record60

Commits

• d6df5fa Bumping version to 8.0.5
• 4c484a3 check api_only config before insert middleware
• 5723105 properly parse query string
• 34cc41a check if content_security_policy is respond
• e714d8d properly check ContentSecurityPolicy middleware exists
• ed75347 fix Rack namespace
• 386746a Bumping version to 8.0.4
• e338b7d support rack used by rails 4.2
• dbfef80 compatible with rack 2.x
• fe38aa4 mark object as impossible after updating inversed
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #18.