Update dalli requirement from >= 3.2.3, < 4 to >= 3.2.3, < 5

[dependabot]

Updates the requirements on dalli to permit the latest version.

Changelog

Sourced from dalli's changelog.

4.0.0

BREAKING CHANGES:

• Require Ruby 3.1+ (dropped support for Ruby 2.6, 2.7, and 3.0)
• Removed Dalli::Server deprecated alias - use Dalli::Protocol::Binary instead
• Removed :compression option - use :compress instead
• Removed close_on_fork method - use reconnect_on_fork instead

Other changes:

• Add security warning when using default Marshal serializer (silence with silence_marshal_warning: true)
• Add defense-in-depth input validation for stats command arguments
• Add string_fastpath option to skip serialization for simple strings (byroot)
• Meta protocol set performance improvement (danmayer)
• Fix connection_pool 3.0 compatibility for Rack session store
• Fix session recovery after deletion (stengineering0)
• Fix cannot read response data included terminator \r\n when use meta protocol (matsubara0507)
• Support SERVER_ERROR response from Memcached as per the memcached spec (grcooper)
• Update Socket timeout handling to use Socket#timeout= when available (nickamorim)
• Serializer: reraise all .load errors as UnmarshalError (olleolleolle)
• Reconnect gracefully when a fork is detected instead of crashing (PatrickTulskie)
• Update CI to test against memcached 1.6.40

3.2.8

• Handle IO::TimeoutError when establishing connection (eugeneius)
• Drop dependency on base64 gem (Earlopain)
• Address incompatibility with resolv-replace (y9v)
• Add rubygems.org metadata (m-nakamura145)

3.2.7

• Fix cascading error when there's an underlying network error in a pipelined get (eugeneius)
• Ruby 3.4/head compatibility by adding base64 to gemspec (tagliala)
• Add Ruby 3.3 to CI (m-nakamura145)
• Use Socket's connect_timeout when available, and pass timeout to the socket's send and receive timeouts (mlarraz)

3.2.6

• Rescue IO::TimeoutError raised by Ruby since 3.2.0 on blocking reads/writes (skaes)
• Fix rubydoc link (JuanitoFatas)

3.2.5

... (truncated)

Commits

• 9c65c4e Increase benchmark CI job timeout to 30 minutes
• 80b0e32 Fix Rubocop cop name for newer versions
• 48290a7 Dalli 4.0.0 release
• 7a99cda Bump github/codeql-action from 3 to 4
• 95040ba Bump actions/checkout from 4 to 6
• cf320e6 Fix benchmark script GC memory leak causing OOM (exit code 137)
• 1144263 Add Ruby 4.0 to test matrix
• c810c86 Bump actions/upload-artifact from 4 to 6
• 7e8df3d Fix Rubocop offenses
• 352f442 Fix connection_pool 3.0 compatibility
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)