From 1eb32475f010fea267c145bb66f6fe3af73fbdae Mon Sep 17 00:00:00 2001
From: Leo Wilkin <leo@wilkin.xyz>
Date: Wed, 21 Oct 2026 19:48:38 +0100
Subject: [PATCH] security: update vulnerable gems
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

- gem: old → new
- concurrent-ruby: 1.3.6 → 1.3.8
- erb: 6.0.2 → 6.0.7
- faraday: 2.14.1 → 2.14.4
- mcp: 0.13.0 → 0.25.0
- net-imap: 0.6.3 → 0.6.8
- nokogiri: 1.19.2 → 1.19.4
- puma: 7.2.0 → 7.2.1
---
 Gemfile.lock | 40 ++++++++++++++++++++++------------------
 1 file changed, 22 insertions(+), 18 deletions(-)

diff --git a/Gemfile.lock b/Gemfile.lock
index 9e8a35a5..ff1eb4d7 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -161,7 +161,7 @@ GEM
       activesupport (>= 7.2.0, < 8.2.0)
       railties (>= 7.2.0, < 8.2.0)
       zeitwerk (>= 2.5.0)
-    concurrent-ruby (1.3.6)
+    concurrent-ruby (1.3.8)
     connection_pool (3.0.2)
     console1984 (0.2.3)
       irb (~> 1.13)
@@ -197,7 +197,7 @@ GEM
     dotenv (3.2.0)
     drb (2.2.3)
     dry-cli (1.4.1)
-    erb (6.0.2)
+    erb (6.0.7)
     erb_lint (0.9.0)
       activesupport
       better_html (>= 2.0.1)
@@ -215,7 +215,7 @@ GEM
       railties (>= 6.1.0)
     faker (3.6.1)
       i18n (>= 1.8.11, < 2)
-    faraday (2.14.1)
+    faraday (2.14.4)
       faraday-net_http (>= 2.0, < 3.5)
       json
       logger
@@ -272,6 +272,7 @@ GEM
       thor (>= 1.0.0)
     groupdate (6.7.0)
       activesupport (>= 7.1)
+    hana (1.3.7)
     hashdiff (1.2.1)
     hashid-rails (1.4.1)
       activerecord (>= 4.0)
@@ -302,9 +303,11 @@ GEM
     jb (0.8.2)
     jmespath (1.6.2)
     json (2.18.1)
-    json-schema (6.2.0)
-      addressable (~> 2.8)
-      bigdecimal (>= 3.1, < 5)
+    json_schemer (2.5.0)
+      bigdecimal
+      hana (~> 1.3)
+      regexp_parser (~> 2.0)
+      simpleidn (~> 0.2)
     jwt (3.2.0)
       base64
     kaminari (1.2.2)
@@ -350,8 +353,8 @@ GEM
       net-pop
       net-smtp
     marcel (1.1.0)
-    mcp (0.13.0)
-      json-schema (>= 4.1)
+    mcp (0.25.0)
+      json_schemer (>= 2.4)
     mini_magick (5.3.1)
       logger
     mini_mime (1.1.5)
@@ -363,7 +366,7 @@ GEM
     mutex_m (0.3.0)
     net-http (0.9.1)
       uri (>= 0.11.1)
-    net-imap (0.6.3)
+    net-imap (0.6.8)
       date
       net-protocol
     net-pop (0.1.2)
@@ -373,21 +376,21 @@ GEM
     net-smtp (0.5.1)
       net-protocol
     nio4r (2.7.5)
-    nokogiri (1.19.2-aarch64-linux-gnu)
+    nokogiri (1.19.4-aarch64-linux-gnu)
       racc (~> 1.4)
-    nokogiri (1.19.2-aarch64-linux-musl)
+    nokogiri (1.19.4-aarch64-linux-musl)
       racc (~> 1.4)
-    nokogiri (1.19.2-arm-linux-gnu)
+    nokogiri (1.19.4-arm-linux-gnu)
       racc (~> 1.4)
-    nokogiri (1.19.2-arm-linux-musl)
+    nokogiri (1.19.4-arm-linux-musl)
       racc (~> 1.4)
-    nokogiri (1.19.2-arm64-darwin)
+    nokogiri (1.19.4-arm64-darwin)
       racc (~> 1.4)
-    nokogiri (1.19.2-x86_64-darwin)
+    nokogiri (1.19.4-x86_64-darwin)
       racc (~> 1.4)
-    nokogiri (1.19.2-x86_64-linux-gnu)
+    nokogiri (1.19.4-x86_64-linux-gnu)
       racc (~> 1.4)
-    nokogiri (1.19.2-x86_64-linux-musl)
+    nokogiri (1.19.4-x86_64-linux-musl)
       racc (~> 1.4)
     nokogiri-xmlsec-instructure (0.12.0)
       nokogiri (~> 1.13)
@@ -441,7 +444,7 @@ GEM
       i18n (>= 0.5.0)
       railties (>= 6.1)
     public_suffix (7.0.5)
-    puma (7.2.0)
+    puma (7.2.1)
       nio4r (~> 2.0)
     pundit (2.5.2)
       activesupport (>= 3.0.0)
@@ -591,6 +594,7 @@ GEM
       concurrent-ruby (~> 1.0, >= 1.0.2)
     serve_byte_range (1.0.0)
       rack (>= 1.0)
+    simpleidn (0.3.0)
     slack-ruby-client (2.7.0)
       faraday (>= 2.0.1)
       faraday-mashify