diff --git a/Gemfile b/Gemfile
index 38bc321e8..a1b947453 100644
--- a/Gemfile
+++ b/Gemfile
@@ -59,7 +59,7 @@ gem 'coffee-rails', '~> 5.0.0'
 gem 'darlingtonia', '~> 3.2.2'
 
 # user management
-gem 'devise', '~> 4.9.0'
+gem 'devise', '~> 4.9.3'
 gem 'devise_cas_authenticatable', '~> 2.0.2'
 gem 'devise-guests', '~> 0.8.1'
 
diff --git a/Gemfile.lock b/Gemfile.lock
index caee98d1e..d5213c85e 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -107,7 +107,7 @@ GEM
       validatable (~> 1.6)
     bcp47 (0.3.3)
       i18n
-    bcrypt (3.1.19)
+    bcrypt (3.1.20)
     bibtex-ruby (6.0.0)
       latex-decode (~> 0.0)
     bixby (5.0.2)
@@ -213,7 +213,7 @@ GEM
     declarative-option (0.1.0)
     deprecation (1.1.0)
       activesupport
-    devise (4.9.2)
+    devise (4.9.3)
       bcrypt (~> 3.0)
       orm_adapter (~> 0.1)
       railties (>= 4.1.0)
@@ -594,7 +594,7 @@ GEM
       rb-fsevent (~> 0.10, >= 0.10.3)
       rb-inotify (~> 0.9, >= 0.9.10)
     logger (1.5.3)
-    loofah (2.21.3)
+    loofah (2.22.0)
       crass (~> 1.0.2)
       nokogiri (>= 1.12.0)
     mail (2.8.1)
@@ -614,7 +614,7 @@ GEM
     mime-types-data (3.2023.0218.1)
     mini_magick (4.12.0)
     mini_mime (1.1.2)
-    mini_portile2 (2.8.4)
+    mini_portile2 (2.8.5)
     minitest (5.20.0)
     msgpack (1.7.2)
     multi_json (1.15.0)
@@ -639,7 +639,7 @@ GEM
     noid-rails (3.0.3)
       actionpack (>= 5.0.0, < 7)
       noid (~> 0.9)
-    nokogiri (1.15.4)
+    nokogiri (1.16.0)
       mini_portile2 (~> 2.8.2)
       racc (~> 1.4)
     non-digest-assets (2.2.0)
@@ -688,7 +688,7 @@ GEM
       rails (>= 5.0, < 7.1)
       rdf
     raabro (1.4.0)
-    racc (1.7.1)
+    racc (1.7.3)
     rack (2.2.8)
     rack-cas (0.16.1)
       addressable (~> 2.3)
@@ -733,7 +733,7 @@ GEM
       rake (>= 0.8.7)
       thor (>= 0.19.0, < 2.0)
     rainbow (3.1.1)
-    rake (13.0.6)
+    rake (13.1.0)
     rb-fsevent (0.11.2)
     rb-inotify (0.10.1)
       ffi (~> 1.0)
@@ -819,7 +819,7 @@ GEM
       uber (< 0.2.0)
     request_store (1.5.1)
       rack (>= 1.4)
-    responders (3.1.0)
+    responders (3.1.1)
       actionpack (>= 5.2)
       railties (>= 5.2)
     retriable (3.1.2)
@@ -988,7 +988,7 @@ GEM
     temple (0.10.2)
     terminal-table (3.0.2)
       unicode-display_width (>= 1.1.1, < 3)
-    thor (1.2.2)
+    thor (1.3.0)
     thread_safe (0.3.6)
     tilt (2.2.0)
     timeout (0.4.0)
@@ -1068,7 +1068,7 @@ DEPENDENCIES
   coffee-rails (~> 5.0.0)
   darlingtonia (~> 3.2.2)
   database_cleaner (~> 2.0.1)
-  devise (~> 4.9.0)
+  devise (~> 4.9.3)
   devise-guests (~> 0.8.1)
   devise_cas_authenticatable (~> 2.0.2)
   dotenv-rails (~> 2.7.6)