From 1139a28378712886c132d02c857c80c2a3236a9c Mon Sep 17 00:00:00 2001
From: Josh Nichols <josh.nichols+agent@gusto.com>
Date: Thu, 18 Jun 2026 16:45:29 -0400
Subject: [PATCH] Security: bump activesupport, addressable, json, mcp, yard

---
 Gemfile.lock | 11 ++++++-----
 1 file changed, 6 insertions(+), 5 deletions(-)

diff --git a/Gemfile.lock b/Gemfile.lock
index a865eb9..46fc421 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -15,7 +15,7 @@ PATH
 GEM
   remote: https://rubygems.org/
   specs:
-    activesupport (8.1.2)
+    activesupport (8.1.3)
       base64
       bigdecimal
       concurrent-ruby (~> 1.0, >= 1.3.1)
@@ -28,7 +28,7 @@ GEM
       securerandom (>= 0.3)
       tzinfo (~> 2.0, >= 2.0.5)
       uri (>= 0.13.1)
-    addressable (2.8.9)
+    addressable (2.9.0)
       public_suffix (>= 2.0.2, < 8.0)
     ast (2.4.3)
     base64 (0.3.0)
@@ -42,14 +42,14 @@ GEM
     erubi (1.13.1)
     i18n (1.14.8)
       concurrent-ruby (~> 1.0)
-    json (2.18.1)
+    json (2.19.9)
     json-schema (6.1.0)
       addressable (~> 2.8)
       bigdecimal (>= 3.1, < 5)
     language_server-protocol (3.17.0.5)
     lint_roller (1.1.0)
     logger (1.7.0)
-    mcp (0.8.0)
+    mcp (0.9.2)
       json-schema (>= 4.1)
     minitest (6.0.2)
       drb (~> 2.0)
@@ -175,7 +175,7 @@ GEM
       unicode-emoji (~> 4.1)
     unicode-emoji (4.2.0)
     uri (1.1.1)
-    yard (0.9.38)
+    yard (0.9.44)
     yard-sorbet (0.9.0)
       sorbet-runtime
       yard
@@ -195,6 +195,7 @@ DEPENDENCIES
   simplecov
   sorbet
   tapioca
+  yard (>= 0.9.42, < 0.10.0)
 
 BUNDLED WITH
   4.0.7