Update dalli requirement from >= 3.2.3, < 5 to >= 3.2.3, < 6

[dependabot]

Updates the requirements on dalli to permit the latest version.

Changelog

Sourced from dalli's changelog.

Dalli Changelog

5.0.0

Breaking Changes:

• Removed binary protocol - The meta protocol is now the only supported protocol

  • The :protocol option is no longer used
  • Requires memcached 1.6+ (for meta protocol support)
  • Users on older memcached versions must upgrade or stay on Dalli 4.x

• Removed SASL authentication - The meta protocol does not support authentication

  • Use network-level security (firewall rules, VPN) or memcached's TLS support instead
  • Users requiring SASL authentication must stay on Dalli 4.x with binary protocol

• Ruby 3.3+ required - Dropped support for Ruby 3.1 and 3.2

  • Ruby 3.2 reached end-of-life in March 2026
  • JRuby remains supported

Performance:

• ~7% read performance improvement (CRuby only)
  • Use native IO#read instead of custom readfull implementation
  • Enabled by Ruby 3.3's IO#timeout= support
  • JRuby continues to use readfull for compatibility

OpenTelemetry:

• Migrate to stable OTel semantic conventions (#1070)
  • db.system renamed to db.system.name
  • db.operation renamed to db.operation.name
  • server.address now contains hostname only; server.port is a separate integer attribute
  • get_with_metadata and fetch_with_lock now include server.address/server.port
• Add db.query.text span attribute with configurable modes
  • :otel_db_statement option: :include, :obfuscate, or nil (default: omitted)
• Add peer.service span attribute
  • :otel_peer_service option for logical service naming

Internal:

• Simplified protocol directory structure: moved lib/dalli/protocol/meta/* to lib/dalli/protocol/
• Removed deprecated binary protocol files and SASL authentication code
• Removed require 'set' (autoloaded in Ruby 3.3+)

4.3.1

Bug Fixes:

... (truncated)

Commits

• 3fd87c5 Skip OTel integration tests when meta protocol unavailable
• 2b4559f Bump version to 4.3.2
• b3404ea Align OTel instrumentation with stable semantic conventions
• ab534ff Merge pull request #1066 from petergoldstein/fix/socket-compatibility-996-1012
• 1ce4cae Update CHANGELOG for PR #1069
• 46a34a4 Fix double recording of exceptions on OTel spans (#1069)
• b0a9506 fix: stop double recording exceptions on spans
• 052ac00 Skip SSL error stub test on JRuby
• a968aa6 Skip MRI-specific socket test on TruffleRuby and JRuby
• 36cc0ce Update CHANGELOG for 4.3.1 with cherry-picked changes
• Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.