Merge pull request opf#14479 from opf/fix/bump_gems

Fix/bump gems

Gemfile

@@ -123,7 +123,7 @@ gem 'daemons'
 gem 'delayed_cron_job', '~> 0.9.0'
 gem 'delayed_job_active_record', '~> 4.1.5'
 
-gem 'rack-protection', '~> 3.1.0'
+gem 'rack-protection', '~> 3.2.0'
 
 # Rack::Attack is a rack middleware to protect your web app from bad clients.
 # It allows whitelisting, blacklisting, throttling, and tracking based
@@ -157,7 +157,7 @@ gem 'prawn', '~> 2.4'
 # prawn implicitly depends on matrix gem no longer in ruby core with 3.1
 gem 'matrix', '~> 0.4.2'
 
-gem 'meta-tags', '~> 2.19.0'
+gem 'meta-tags', '~> 2.20.0'
 
 gem "paper_trail", "~> 12.3"
 
@@ -178,7 +178,7 @@ gem 'puma', '~> 6.3', '>= 6.3.1'
 gem 'puma-plugin-statsd', '~> 2.0'
 gem 'rack-timeout', '~> 0.6.3', require: "rack/timeout/base"
 
-gem 'nokogiri', '~> 1.15.1'
+gem 'nokogiri', '~> 1.16.0'
 
 gem 'carrierwave', '~> 1.3.1'
 gem 'carrierwave_direct', '~> 2.1.0'
@@ -273,7 +273,7 @@ group :test do
 
   gem 'equivalent-xml', '~> 0.6'
   gem 'json_spec', '~> 1.1.4'
-  gem 'shoulda-matchers', '~> 5.0', require: nil
+  gem 'shoulda-matchers', '~> 6.0', require: nil
 
   gem 'parallel_tests', '~> 4.0'
 end

Gemfile.lock

@@ -314,16 +314,16 @@ GEM
       airbrake-ruby (~> 6.0)
     airbrake-ruby (6.2.2)
       rbtree3 (~> 0.6)
-    appsignal (3.5.0)
+    appsignal (3.5.2)
       rack
     ast (2.4.2)
-    attr_required (1.0.1)
+    attr_required (1.0.2)
     auto_strip_attributes (2.6.0)
       activerecord (>= 4.0)
     awesome_nested_set (3.6.0)
       activerecord (>= 4.0.0, < 7.2)
     aws-eventstream (1.3.0)
-    aws-partitions (1.871.0)
+    aws-partitions (1.876.0)
     aws-sdk-core (3.190.1)
       aws-eventstream (~> 1, >= 1.3.0)
       aws-partitions (~> 1, >= 1.651.0)
@@ -332,7 +332,7 @@ GEM
     aws-sdk-kms (1.75.0)
       aws-sdk-core (~> 3, >= 3.188.0)
       aws-sigv4 (~> 1.1)
-    aws-sdk-s3 (1.141.0)
+    aws-sdk-s3 (1.142.0)
       aws-sdk-core (~> 3, >= 3.189.0)
       aws-sdk-kms (~> 1)
       aws-sigv4 (~> 1.8)
@@ -365,7 +365,8 @@ GEM
     bindata (2.4.15)
     bootsnap (1.17.0)
       msgpack (~> 1.2)
-    brakeman (6.1.0)
+    brakeman (6.1.1)
+      racc
     browser (5.3.1)
     builder (3.2.4)
     byebug (11.1.3)
@@ -489,9 +490,9 @@ GEM
     eventmachine (1.2.7)
     eventmachine_httpserver (0.2.1)
     excon (0.108.0)
-    factory_bot (6.4.2)
+    factory_bot (6.4.5)
       activesupport (>= 5.0.0)
-    factory_bot_rails (6.4.2)
+    factory_bot_rails (6.4.3)
       factory_bot (~> 6.4)
       railties (>= 5.0.0)
     faraday (2.8.1)
@@ -551,7 +552,7 @@ GEM
       retriable (>= 2.0, < 4.a)
       rexml
       webrick
-    google-apis-gmail_v1 (0.36.0)
+    google-apis-gmail_v1 (0.37.0)
       google-apis-core (>= 0.11.0, < 2.a)
     google-cloud-env (2.1.0)
       faraday (>= 1.0, < 3.a)
@@ -614,7 +615,7 @@ GEM
     iso8601 (0.13.0)
     jmespath (1.6.2)
     json (2.7.1)
-    json-jwt (1.16.3)
+    json-jwt (1.16.4)
       activesupport (>= 4.2)
       aes_key_wrap
       bindata
@@ -673,10 +674,10 @@ GEM
     marcel (1.0.2)
     matrix (0.4.2)
     messagebird-rest (1.4.2)
-    meta-tags (2.19.0)
-      actionpack (>= 3.2.0, < 7.2)
+    meta-tags (2.20.0)
+      actionpack (>= 6.0.0, < 7.2)
     method_source (1.0.0)
-    mime-types (3.5.1)
+    mime-types (3.5.2)
       mime-types-data (~> 3.2015)
     mime-types-data (3.2023.1205)
     mini_magick (4.12.0)
@@ -689,7 +690,7 @@ GEM
       ruby2_keywords (~> 0.0.1)
     mustermann-grape (1.0.2)
       mustermann (>= 1.0.0)
-    net-imap (0.4.8)
+    net-imap (0.4.9)
       date
       net-protocol
     net-ldap (0.18.0)
@@ -700,7 +701,7 @@ GEM
     net-smtp (0.4.0)
       net-protocol
     nio4r (2.7.0)
-    nokogiri (1.15.5)
+    nokogiri (1.16.0)
       mini_portile2 (~> 2.8.2)
       racc (~> 1.4)
     oj (3.16.3)
@@ -710,13 +711,12 @@ GEM
       omniauth (~> 1.3, >= 1.3.2)
       ruby-saml (~> 1.9)
     open4 (1.3.4)
-    openid_connect (2.2.0)
+    openid_connect (2.2.1)
       activemodel
       attr_required (>= 1.0.0)
       faraday (~> 2.0)
       faraday-follow_redirects
       json-jwt (>= 1.16)
-      net-smtp
       rack-oauth2 (~> 2.2)
       swd (~> 2.0)
       tzinfo
@@ -749,7 +749,7 @@ GEM
     pdf-core (0.9.0)
     pdf-inspector (1.3.0)
       pdf-reader (>= 1.0, < 3.0.a)
-    pdf-reader (2.11.0)
+    pdf-reader (2.12.0)
       Ascii85 (~> 1.0)
       afm (~> 0.2.1)
       hashery (~> 2.0)
@@ -802,14 +802,15 @@ GEM
       rack (>= 2.0.0)
     rack-mini-profiler (3.3.0)
       rack (>= 1.2.0)
-    rack-oauth2 (2.2.0)
+    rack-oauth2 (2.2.1)
       activesupport
       attr_required
       faraday (~> 2.0)
       faraday-follow_redirects
       json-jwt (>= 1.11.0)
       rack (>= 2.1.0)
-    rack-protection (3.1.0)
+    rack-protection (3.2.0)
+      base64 (>= 0.1.0)
       rack (~> 2.2, >= 2.2.4)
     rack-test (2.1.0)
       rack (>= 1.3)
@@ -864,7 +865,7 @@ GEM
     redcarpet (3.6.0)
     redis (5.0.8)
       redis-client (>= 0.17.0)
-    redis-client (0.19.0)
+    redis-client (0.19.1)
       connection_pool
     regexp_parser (2.8.3)
     reline (0.4.1)
@@ -929,10 +930,10 @@ GEM
       activesupport
       rubocop
       rubocop-rspec
-    rubocop-performance (1.20.0)
+    rubocop-performance (1.20.1)
       rubocop (>= 1.48.1, < 2.0)
       rubocop-ast (>= 1.30.0, < 2.0)
-    rubocop-rails (2.23.0)
+    rubocop-rails (2.23.1)
       activesupport (>= 4.2.0)
       rack (>= 1.1)
       rubocop (>= 1.33.0, < 2.0)
@@ -953,7 +954,7 @@ GEM
       nokogiri (>= 1.13.10)
       rexml
     ruby2_keywords (0.0.5)
-    rubytree (2.0.2)
+    rubytree (2.0.3)
       json (~> 2.0, > 2.3.1)
     rubyzip (2.3.2)
     sanitize (6.1.0)
@@ -968,7 +969,7 @@ GEM
       websocket (~> 1.0)
     semantic (1.6.1)
     shoulda-context (2.0.0)
-    shoulda-matchers (5.3.0)
+    shoulda-matchers (6.0.0)
       activesupport (>= 5.2.0)
     signet (0.18.0)
       addressable (~> 2.8)
@@ -1000,7 +1001,7 @@ GEM
     stringio (3.1.0)
     structured_warnings (0.4.0)
     svg-graph (2.2.2)
-    swd (2.0.2)
+    swd (2.0.3)
       activesupport (>= 3)
       attr_required (>= 0.0.5)
       faraday (~> 2.0)
@@ -1026,7 +1027,7 @@ GEM
       rails (>= 5.0.4)
     tzinfo (2.0.6)
       concurrent-ruby (~> 1.0)
-    tzinfo-data (1.2023.3)
+    tzinfo-data (1.2023.4)
       tzinfo (>= 1.0.0)
     uber (0.1.0)
     unf (0.1.4)
@@ -1052,7 +1053,7 @@ GEM
       rack (>= 2.0.9)
     warden-basic_auth (0.2.1)
       warden (~> 1.2)
-    webfinger (2.1.2)
+    webfinger (2.1.3)
       activesupport
       faraday (~> 2.0)
       faraday-follow_redirects
@@ -1155,12 +1156,12 @@ DEPENDENCIES
   mail (= 2.8.1)
   matrix (~> 0.4.2)
   md_to_pdf!
-  meta-tags (~> 2.19.0)
+  meta-tags (~> 2.20.0)
   mini_magick (~> 4.12.0)
   multi_json (~> 1.15.0)
   my_page!
   net-ldap (~> 0.18.0)
-  nokogiri (~> 1.15.1)
+  nokogiri (~> 1.16.0)
   oj (~> 3.16.0)
   okcomputer (~> 1.18.1)
   omniauth!
@@ -1209,7 +1210,7 @@ DEPENDENCIES
   rack-attack (~> 6.7.0)
   rack-cors (~> 2.0.0)
   rack-mini-profiler
-  rack-protection (~> 3.1.0)
+  rack-protection (~> 3.2.0)
   rack-test (~> 2.1.0)
   rack-timeout (~> 0.6.3)
   rack_session_access
@@ -1242,7 +1243,7 @@ DEPENDENCIES
   selenium-webdriver (~> 4.16.0)
   semantic (~> 1.6.1)
   shoulda-context (~> 2.0)
-  shoulda-matchers (~> 5.0)
+  shoulda-matchers (~> 6.0)
   spring
   spring-commands-rspec
   spring-commands-rubocop