[Security] Bump puma from 3.9.1 to 5.0.2

Bumps [puma](https://github.com/puma/puma) from 3.9.1 to 5.0.2. **This update includes security fixes.**
- [Release notes](https://github.com/puma/puma/releases)
- [Changelog](https://github.com/puma/puma/blob/master/History.md)
- [Commits](https://github.com/puma/puma/compare/v3.9.1...v5.0.2)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Gemfile.lock

@@ -266,6 +266,7 @@ GEM
     ngannotate-rails (1.2.2)
       execjs
       rails (>= 3.1)
+    nio4r (2.5.4)
     nokogiri (1.10.9)
       mini_portile2 (~> 2.4.0)
     oauth2 (1.4.0)
@@ -302,7 +303,8 @@ GEM
     polyamorous (1.3.1)
       activerecord (>= 3.0)
     public_suffix (2.0.5)
-    puma (3.9.1)
+    puma (5.0.2)
+      nio4r (~> 2.0)
     pundit (1.1.0)
       activesupport (>= 3.0.0)
     pygments.rb (1.1.2)