From 0c6f8e0c90c940bd44fece37688dfefcd986e38c Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Fri, 20 Mar 2026 23:31:52 +0000
Subject: [PATCH] fix: Gemfile to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-RUBY-DEVISE-15678508
---
 Gemfile | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/Gemfile b/Gemfile
index 01c7a9f83..793ce1488 100644
--- a/Gemfile
+++ b/Gemfile
@@ -79,11 +79,11 @@ gem 'vite_rails'
 gem 'barnes'
 
 ##--- gems for authentication & authorization ---##
-gem 'devise', '>= 4.9.4'
+gem 'devise', '>= 5.0.3'
 gem 'devise-secure_password', git: 'https://github.com/chatwoot/devise-secure_password', branch: 'chatwoot'
 gem 'devise_token_auth', '>= 1.2.3'
 # two-factor authentication
-gem 'devise-two-factor', '>= 5.0.0'
+gem 'devise-two-factor', '>= 6.4.0'
 # authorization
 gem 'jwt'
 gem 'pundit'