diff --git a/Gemfile b/Gemfile
index be2ac4088..be0e0ac92 100644
--- a/Gemfile
+++ b/Gemfile
@@ -15,7 +15,7 @@ gem 'webpacker', '~> 5.4.4'
 gem 'good_job', '~> 3.99'
 
 # fix for https://www.ruby-lang.org/en/news/2021/11/15/date-parsing-method-regexp-dos-cve-2021-41817/
-gem "date", "~> 3.4.0"
+gem "date", "~> 3.4.1"
 
 gem 'httparty', '~> 0.22.0' # https://github.com/jnunemaker/httparty
 gem 'sprockets', '~> 3.7'
diff --git a/Gemfile.lock b/Gemfile.lock
index d123bf79c..2b080eeed 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -157,7 +157,7 @@ GEM
     database_cleaner-active_record (1.99.0)
       activerecord
       database_cleaner (~> 1.99.0)
-    date (3.4.0)
+    date (3.4.1)
     debug (1.9.2)
       irb (~> 1.10)
       reline (>= 0.3.8)
@@ -235,7 +235,7 @@ GEM
     jbuilder (2.13.0)
       actionview (>= 5.0.0)
       activesupport (>= 5.0.0)
-    js-routes (2.3.0)
+    js-routes (2.3.3)
       railties (>= 5)
       sorbet-runtime
     json (2.7.2)
@@ -272,7 +272,7 @@ GEM
     mini_magick (4.13.2)
     mini_mime (1.1.5)
     mini_portile2 (2.8.8)
-    minitest (5.25.2)
+    minitest (5.25.4)
     money (6.19.0)
       i18n (>= 0.6.4, <= 2)
     msgpack (1.7.2)
@@ -289,7 +289,7 @@ GEM
       net-protocol
     netrc (0.11.0)
     nio4r (2.7.3)
-    nokogiri (1.16.8)
+    nokogiri (1.17.0)
       mini_portile2 (~> 2.8.2)
       racc (~> 1.4)
     orm_adapter (0.5.0)
@@ -443,7 +443,7 @@ GEM
     simple_po_parser (1.1.6)
     sixarm_ruby_unaccent (1.2.0)
     smart_properties (1.17.0)
-    sorbet-runtime (0.5.11647)
+    sorbet-runtime (0.5.11690)
     sprockets (3.7.5)
       base64
       concurrent-ruby (~> 1.0)
@@ -513,7 +513,7 @@ DEPENDENCIES
   countries (~> 4.2)
   csv
   database_cleaner-active_record
-  date (~> 3.4.0)
+  date (~> 3.4.1)
   debug
   devise (~> 4.9)
   devise-async (~> 1.0)