Bump dalli from 3.2.8 to 4.1.0

[dependabot]

Bumps dalli from 3.2.8 to 4.1.0.

Changelog

Sourced from dalli's changelog.

4.1.0

New Features:

• Add set_multi for efficient bulk set operations using pipelined requests
• Add delete_multi for efficient bulk delete operations using pipelined requests
• Add fetch_with_lock for thundering herd protection using meta protocol's vivify/recache flags (requires memcached 1.6+)
• Add thundering herd protection support to meta protocol (requires memcached 1.6+):
  • N (vivify) flag for creating stubs on cache miss
  • R (recache) flag for winning recache race when TTL is below threshold
  • Response flags W (won recache), X (stale), Z (lost race)
  • delete_stale method for marking items as stale instead of deleting
• Add get_with_metadata for advanced cache operations with metadata retrieval (requires memcached 1.6+):
  • Returns hash with :value, :cas, :won_recache, :stale, :lost_recache
  • Optional :return_hit_status returns :hit_before (true/false for previous access)
  • Optional :return_last_access returns :last_access (seconds since last access)
  • Optional :skip_lru_bump prevents LRU update on access
  • Optional :vivify_ttl and :recache_ttl for thundering herd protection

Deprecations:

• Binary protocol is deprecated and will be removed in Dalli 5.0. Use protocol: :meta instead (requires memcached 1.6+)
• SASL authentication is deprecated and will be removed in Dalli 5.0. Consider using network-level security or memcached's TLS support

4.0.1

• Add :raw client option to skip serialization entirely, returning raw byte strings
• Handle OpenSSL::SSL::SSLError in connection manager

4.0.0

BREAKING CHANGES:

• Require Ruby 3.1+ (dropped support for Ruby 2.6, 2.7, and 3.0)
• Removed Dalli::Server deprecated alias - use Dalli::Protocol::Binary instead
• Removed :compression option - use :compress instead
• Removed close_on_fork method - use reconnect_on_fork instead

Other changes:

• Add security warning when using default Marshal serializer (silence with silence_marshal_warning: true)
• Add defense-in-depth input validation for stats command arguments
• Add string_fastpath option to skip serialization for simple strings (byroot)
• Meta protocol set performance improvement (danmayer)
• Fix connection_pool 3.0 compatibility for Rack session store
• Fix session recovery after deletion (stengineering0)
• Fix cannot read response data included terminator \r\n when use meta protocol (matsubara0507)

... (truncated)

Commits

• 060cb14 Dalli 4.1.0 release
• 486e3eb Update roadmap: mark h, l, u flags and get_with_metadata as complete
• dc0f230 Add get_with_metadata and meta protocol h, l, u flags
• 0887f4f Fix roadmap: clarify which meta flags are actually implemented
• a17ddf3 Add v5.0 roadmap document
• 692864f Update version to 4.1.0 in CHANGELOG
• c606c87 Add v4.2.0 features: set_multi, delete_multi, thundering herd protection
• 39b5d07 Dalli 4.0.1 release
• 857b4b2 Improve StringMarshaller and :raw option documentation
• 4e6a9ab Add :raw client option
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)