fix: Gemfile to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-RUBY-BCRYPT-15700501 - https://snyk.io/vuln/SNYK-RUBY-DEVISE-15678508
2026-03-20 23:31:30 +00:00
parent 4b849cdd11
commit 6f99a45837
1 changed files with 3 additions and 3 deletions
@@ -79,11 +79,11 @@ gem 'vite_rails'
 gem 'barnes'

 ##--- gems for authentication & authorization ---##
-gem 'devise', '>= 4.9.4'
+gem 'devise', '>= 5.0.3'
 gem 'devise-secure_password', git: 'https://github.com/chatwoot/devise-secure_password', branch: 'chatwoot'
-gem 'devise_token_auth', '>= 1.2.3'
+gem 'devise_token_auth', '>= 1.2.6'
 # two-factor authentication
-gem 'devise-two-factor', '>= 5.0.0'
+gem 'devise-two-factor', '>= 6.4.0'
 # authorization
 gem 'jwt'
 gem 'pundit'