[Security] Bump puma from 5.0.2 to 5.4.0

Bumps [puma](https://github.com/puma/puma) from 5.0.2 to 5.4.0. **This update includes security fixes.**
- [Release notes](https://github.com/puma/puma/releases)
- [Changelog](https://github.com/puma/puma/blob/master/History.md)
- [Commits](https://github.com/puma/puma/compare/v5.0.2...v5.4.0)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Gemfile.lock

@@ -247,7 +247,9 @@ GEM
     mime-types (3.2.2)
       mime-types-data (~> 3.2015)
     mime-types-data (3.2018.0812)
-    mimemagic (0.3.3)
+    mimemagic (0.3.10)
+      nokogiri (~> 1)
+      rake
     mini_mime (1.0.1)
     mini_portile2 (2.4.0)
     minitest (5.14.2)
@@ -265,7 +267,7 @@ GEM
     ngannotate-rails (1.2.2)
       execjs
       rails (>= 3.1)
-    nio4r (2.5.4)
+    nio4r (2.5.7)
     nokogiri (1.10.10)
       mini_portile2 (~> 2.4.0)
     oauth2 (1.4.0)
@@ -303,7 +305,7 @@ GEM
     polyamorous (1.3.1)
       activerecord (>= 3.0)
     public_suffix (4.0.6)
-    puma (5.0.2)
+    puma (5.4.0)
       nio4r (~> 2.0)
     pundit (1.1.0)
       activesupport (>= 3.0.0)