[Snyk] Fix for 4 vulnerabilities

[busterb]

Snyk has created this PR to fix 4 vulnerabilities in the rubygems dependencies of this project.

Snyk changed the following file(s):

• Gemfile

⚠️ Warning

Failed to update the Gemfile.lock, please update manually before merging.

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Expired Pointer Dereference SNYK-RUBY-NOKOGIRI-10674184	****
	Allocation of Resources Without Limits or Throttling SNYK-RUBY-RACK-13378930	****
	Denial of Service (DoS) SNYK-RUBY-RACK-15878260	****
	Uncontrolled Recursion SNYK-RUBY-FARADAY-17400242	542

Breaking Change Risk

Notice: This assessment is enhanced by AI.

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Uncontrolled Recursion
🦉 Allocation of Resources Without Limits or Throttling
🦉 Denial of Service (DoS)

[busterb]

This upgrade includes a major version bump for octokit which carries a high risk due to the likelihood of breaking changes and a lack of specific release notes for this version range.

Top Impacts

• octokit 4.25.1 → 5.0.0 (High Risk): This is a major version upgrade. While specific release notes for v5.0.0 of the Ruby gem were not found, major version upgrades in this library historically introduce significant breaking changes. For example, previous major upgrades have renamed common parameters (e.g., :oauth_token to :access_token) and changed response objects. Due to the high uncertainty and the major version increment, this change should be carefully validated.

  • Recommendation: Review the official octokit.rb upgrade guides and test authentication, API calls, and response handling thoroughly before merging.

• factory_bot_rails 6.4.4 → 6.5.0 (Medium Risk): This minor upgrade drops support for Ruby 3.0. The required Ruby version is now >= 3.1. If your environment is still using Ruby 3.0, you will need to upgrade your Ruby version.

Other Upgrades

• rspec-rails 7.0.1 → 7.0.2 (Low Risk): This is a patch release that contains a bug fix for the have_enqueued_mail matcher and has no documented breaking changes.

Notice 🤖: This content was augmented using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.

[houndci-bot]

Bundler/OrderedGems: Gems should be sorted in an alphabetical order within their section of the Gemfile. Gem factory_bot_rails should appear before test-prof.