From 2782feb48993a79ae67fd34190531cfa616cba98 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sun, 12 Jul 2026 07:15:36 +0000
Subject: [PATCH] Bump devise from 4.9.4 to 5.0.4 in /backend

Bumps [devise](https://github.com/heartcombo/devise) from 4.9.4 to 5.0.4.
- [Release notes](https://github.com/heartcombo/devise/releases)
- [Changelog](https://github.com/heartcombo/devise/blob/main/CHANGELOG.md)
- [Commits](https://github.com/heartcombo/devise/compare/v4.9.4...v5.0.4)

---
updated-dependencies:
- dependency-name: devise
  dependency-version: 5.0.4
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 backend/Gemfile      |  2 +-
 backend/Gemfile.lock | 61 ++++++++++++++++++++++++--------------------
 2 files changed, 34 insertions(+), 29 deletions(-)

diff --git a/backend/Gemfile b/backend/Gemfile
index 7d2a28f7..09725131 100644
--- a/backend/Gemfile
+++ b/backend/Gemfile
@@ -23,7 +23,7 @@ gem "puma", "5.6.8"
 # Authentication libraries
 gem "cancancan", "~> 3.6.1"
 gem "cancancan-mongoid", "~> 2.0"
-gem "devise", "~> 4.8"
+gem "devise", "~> 5.0"
 gem "devise_invitable", "~> 2.0"
 gem "omniauth", "~> 1.8"
 gem "omniauth-facebook", "~> 3.0"
diff --git a/backend/Gemfile.lock b/backend/Gemfile.lock
index 3ffebe8a..a56067ca 100644
--- a/backend/Gemfile.lock
+++ b/backend/Gemfile.lock
@@ -90,7 +90,7 @@ GEM
     ast (2.4.2)
     awesome_print (1.9.2)
     base64 (0.3.0)
-    bcrypt (3.1.20)
+    bcrypt (3.1.22)
     benchmark (0.5.0)
     better_errors (2.10.1)
       erubi (>= 1.0.0)
@@ -103,7 +103,7 @@ GEM
       erubi (~> 1.4)
       parser (>= 2.4)
       smart_properties
-    bigdecimal (3.3.1)
+    bigdecimal (4.1.2)
     brakeman (6.1.2)
       racc
     bson (4.15.0)
@@ -130,15 +130,15 @@ GEM
     coercible (1.0.0)
       descendants_tracker (~> 0.0.1)
     colored (1.2)
-    concurrent-ruby (1.3.5)
-    connection_pool (2.5.5)
+    concurrent-ruby (1.3.7)
+    connection_pool (3.0.2)
     countries (4.0.1)
       i18n_data (~> 0.13.0)
       sixarm_ruby_unaccent (~> 1.1)
     crack (1.0.1)
       bigdecimal
       rexml
-    crass (1.0.6)
+    crass (1.0.7)
     csv (3.3.0)
     cuprite (0.15)
       capybara (~> 3.0)
@@ -152,13 +152,13 @@ GEM
     database_cleaner-mongoid (2.0.1)
       database_cleaner-core (~> 2.0.0)
       mongoid
-    date (3.5.0)
+    date (3.5.1)
     descendants_tracker (0.0.4)
       thread_safe (~> 0.3, >= 0.3.1)
-    devise (4.9.4)
+    devise (5.0.4)
       bcrypt (~> 3.0)
       orm_adapter (~> 0.1)
-      railties (>= 4.1.0)
+      railties (>= 7.0)
       responders
       warden (~> 1.2.3)
     devise_invitable (2.0.11)
@@ -171,7 +171,7 @@ GEM
       dotenv (= 3.1.0)
       railties (>= 6.1)
     drb (2.2.3)
-    erb (6.0.0)
+    erb (6.0.4)
     erb_lint (0.5.0)
       activesupport
       better_html (>= 2.0.1)
@@ -223,12 +223,13 @@ GEM
     hashdiff (1.2.1)
     hashie (3.5.7)
     httpclient (2.8.3)
-    i18n (1.14.7)
+    i18n (1.15.2)
       concurrent-ruby (~> 1.0)
     i18n_data (0.13.0)
-    io-console (0.8.1)
-    irb (1.15.3)
+    io-console (0.8.2)
+    irb (1.18.0)
       pp (>= 0.6.0)
+      prism (>= 1.3.0)
       rdoc (>= 4.0.0)
       reline (>= 0.4.2)
     json (2.7.1)
@@ -248,7 +249,7 @@ GEM
       launchy (>= 2.2, < 4)
     lint_roller (1.1.0)
     logger (1.7.0)
-    loofah (2.24.1)
+    loofah (2.25.1)
       crass (~> 1.0.2)
       nokogiri (>= 1.12.0)
     mail (2.9.0)
@@ -262,7 +263,9 @@ GEM
     method_source (1.1.0)
     mini_mime (1.1.5)
     mini_portile2 (2.8.9)
-    minitest (5.26.2)
+    minitest (6.0.6)
+      drb (~> 2.0)
+      prism (~> 1.5)
     mongo (2.20.1)
       bson (>= 4.14.1, < 6.0.0)
     mongoid (8.1.3)
@@ -294,7 +297,7 @@ GEM
     net-smtp (0.5.1)
       net-protocol
     nio4r (2.7.3)
-    nokogiri (1.18.10)
+    nokogiri (1.19.4)
       mini_portile2 (~> 2.8.2)
       racc (~> 1.4)
     oauth2 (1.4.7)
@@ -317,9 +320,10 @@ GEM
       ast (~> 2.4.1)
       racc
     pg (1.5.6)
-    pp (0.6.3)
+    pp (0.6.4)
       prettyprint
     prettyprint (0.2.0)
+    prism (1.9.0)
     pry (0.14.2)
       coderay (~> 1.1)
       method_source (~> 1.0)
@@ -331,9 +335,6 @@ GEM
       yard (~> 0.9.11)
     pry-rails (0.3.11)
       pry (>= 0.13.0)
-    psych (5.2.6)
-      date
-      stringio
     public_suffix (6.0.2)
     puma (5.6.8)
       nio4r (~> 2.0)
@@ -343,7 +344,7 @@ GEM
       pusher-signature (~> 0.1.8)
     pusher-signature (0.1.8)
     racc (1.8.1)
-    rack (2.2.21)
+    rack (2.2.23)
     rack-cors (2.0.1)
       rack (>= 2.0.0)
     rack-session (1.0.2)
@@ -372,8 +373,8 @@ GEM
       activesupport (>= 5.0.0)
       minitest
       nokogiri (>= 1.6)
-    rails-html-sanitizer (1.6.2)
-      loofah (~> 2.21)
+    rails-html-sanitizer (1.7.0)
+      loofah (~> 2.25)
       nokogiri (>= 1.15.7, != 1.16.7, != 1.16.6, != 1.16.5, != 1.16.4, != 1.16.3, != 1.16.2, != 1.16.1, != 1.16.0.rc1, != 1.16.0)
     rails_12factor (0.0.3)
       rails_serve_static_assets
@@ -390,9 +391,14 @@ GEM
       zeitwerk (~> 2.6)
     rainbow (3.1.1)
     rake (13.2.1)
-    rdoc (6.16.0)
+    rbs (4.0.3)
+      logger
+      prism (>= 1.6.0)
+      tsort
+    rdoc (8.0.0)
       erb
-      psych (>= 4.0.0)
+      prism (>= 1.6.0)
+      rbs (>= 4.0.0)
       tsort
     redis-client (0.26.1)
       connection_pool
@@ -483,10 +489,9 @@ GEM
       rubocop-performance (~> 1.20.2)
     standardrb (1.0.1)
       standard
-    stringio (3.1.8)
     symmetric-encryption (4.6.0)
       coercible (~> 1.0)
-    thor (1.4.0)
+    thor (1.5.0)
     thread_safe (0.3.6)
     timeout (0.4.4)
     tomorrowio_rb (0.0.3)
@@ -510,7 +515,7 @@ GEM
     xpath (3.2.0)
       nokogiri (~> 1.8)
     yard (0.9.36)
-    zeitwerk (2.7.3)
+    zeitwerk (2.8.2)
 
 PLATFORMS
   ruby
@@ -532,7 +537,7 @@ DEPENDENCIES
   cuprite
   database_cleaner
   database_cleaner-mongoid
-  devise (~> 4.8)
+  devise (~> 5.0)
   devise_invitable (~> 2.0)
   dotenv-rails
   erb_lint