From 6f99a45837de9c7bdcea4bb4e91634eee942709d Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Fri, 20 Mar 2026 23:31:30 +0000
Subject: [PATCH] fix: Gemfile to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-RUBY-BCRYPT-15700501
- https://snyk.io/vuln/SNYK-RUBY-DEVISE-15678508
---
 Gemfile | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/Gemfile b/Gemfile
index 01c7a9f83..96f73d477 100644
--- a/Gemfile
+++ b/Gemfile
@@ -79,11 +79,11 @@ gem 'vite_rails'
 gem 'barnes'
 
 ##--- gems for authentication & authorization ---##
-gem 'devise', '>= 4.9.4'
+gem 'devise', '>= 5.0.3'
 gem 'devise-secure_password', git: 'https://github.com/chatwoot/devise-secure_password', branch: 'chatwoot'
-gem 'devise_token_auth', '>= 1.2.3'
+gem 'devise_token_auth', '>= 1.2.6'
 # two-factor authentication
-gem 'devise-two-factor', '>= 5.0.0'
+gem 'devise-two-factor', '>= 6.4.0'
 # authorization
 gem 'jwt'
 gem 'pundit'