diff --git a/.github/workflows/ruby.yml b/.github/workflows/ruby.yml
index 7e849439e..674c27679 100644
--- a/.github/workflows/ruby.yml
+++ b/.github/workflows/ruby.yml
@@ -36,7 +36,7 @@ jobs:
       uses: ruby/setup-ruby@v1
       # uses: ruby/setup-ruby@b12138f02d7d0c4d36f463e0885dc47ec25a52fe
       with:
-        ruby-version: 3.4.5
+        ruby-version: 3.4.9
     - name: Install dependencies
       run: |
         bundle install
@@ -57,7 +57,7 @@ jobs:
       uses: ruby/setup-ruby@v1
       # uses: ruby/setup-ruby@b12138f02d7d0c4d36f463e0885dc47ec25a52fe
       with:
-        ruby-version: 3.4.5
+        ruby-version: 3.4.9
     - name: Install dependencies
       run: |
         . $HOME/.nvm/nvm.sh
@@ -91,7 +91,7 @@ jobs:
       uses: ruby/setup-ruby@v1
       # uses: ruby/setup-ruby@b12138f02d7d0c4d36f463e0885dc47ec25a52fe
       with:
-        ruby-version: 3.4.5
+        ruby-version: 3.4.9
     - name: Install dependencies
       run: |
         . $HOME/.nvm/nvm.sh
@@ -134,7 +134,7 @@ jobs:
       uses: ruby/setup-ruby@v1
       # uses: ruby/setup-ruby@b12138f02d7d0c4d36f463e0885dc47ec25a52fe
       with:
-        ruby-version: 3.4.5
+        ruby-version: 3.4.9
     - name: Install dependencies
       run: |
         . $HOME/.nvm/nvm.sh
@@ -177,7 +177,7 @@ jobs:
       uses: ruby/setup-ruby@v1
       # uses: ruby/setup-ruby@b12138f02d7d0c4d36f463e0885dc47ec25a52fe
       with:
-        ruby-version: 3.4.5
+        ruby-version: 3.4.9
     - name: Install dependencies
       run: |
         . $HOME/.nvm/nvm.sh
@@ -220,7 +220,7 @@ jobs:
       uses: ruby/setup-ruby@v1
       # uses: ruby/setup-ruby@b12138f02d7d0c4d36f463e0885dc47ec25a52fe
       with:
-        ruby-version: 3.4.5
+        ruby-version: 3.4.9
     - name: Install dependencies
       run: |
         . $HOME/.nvm/nvm.sh
@@ -260,7 +260,7 @@ jobs:
       uses: ruby/setup-ruby@v1
       # uses: ruby/setup-ruby@b12138f02d7d0c4d36f463e0885dc47ec25a52fe
       with:
-        ruby-version: 3.4.5
+        ruby-version: 3.4.9
     - name: Install dependencies
       run: |
         . $HOME/.nvm/nvm.sh
@@ -327,7 +327,7 @@ jobs:
       uses: ruby/setup-ruby@v1
       # uses: ruby/setup-ruby@b12138f02d7d0c4d36f463e0885dc47ec25a52fe
       with:
-        ruby-version: 3.4.5
+        ruby-version: 3.4.9
     - name: Install dependencies
       run: |
         . $HOME/.nvm/nvm.sh
@@ -385,7 +385,7 @@ jobs:
       uses: ruby/setup-ruby@v1
       # uses: ruby/setup-ruby@b12138f02d7d0c4d36f463e0885dc47ec25a52fe
       with:
-        ruby-version: 3.4.5
+        ruby-version: 3.4.9
     - name: Install dependencies
       run: |
         . $HOME/.nvm/nvm.sh
diff --git a/.ruby-version b/.ruby-version
index 3ec370e15..e0940d40c 100644
--- a/.ruby-version
+++ b/.ruby-version
@@ -1 +1 @@
-3.4.5
\ No newline at end of file
+3.4.9
\ No newline at end of file
diff --git a/Dockerfile b/Dockerfile
index fb4280f00..6b17c623b 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,7 +1,7 @@
 ############################################
 #  🏗  Stage 1 – build gems + assets
 ############################################
-FROM ruby:3.4.5-slim AS builder
+FROM ruby:3.4.9-slim AS builder
 
 # Essential OS packages (compile + JS pipeline)
 # RUN apt-get update
@@ -32,7 +32,7 @@ RUN RAILS_ENV=production DISABLE_DB=true SECRET_KEY_BASE=precompile_only bundle
 ################################################
 #  🏃‍♂️  Stage 2 – production image
 ################################################
-FROM ruby:3.4.5-slim AS prod
+FROM ruby:3.4.9-slim AS prod
 
 # ➜ install only the shared lib, not the dev headers
 RUN --mount=type=cache,target=/var/cache/apt \
@@ -68,7 +68,7 @@ CMD ["/usr/local/bin/docker_entrypoint.sh"]
 ############################################
 #  🏗  Stage 3 – development environment
 ############################################
-FROM ruby:3.4.5-slim AS dev
+FROM ruby:3.4.9-slim AS dev
 
 # Essential OS packages (compile + JS pipeline)
 RUN apt-get update && \
diff --git a/Gemfile b/Gemfile
index 679505e74..f228fde82 100644
--- a/Gemfile
+++ b/Gemfile
@@ -2,7 +2,7 @@
 
 source 'https://rubygems.org'
 
-ruby '3.4.5'
+ruby '3.4.9'
 
 # Bundle edge Rails instead: gem 'rails', github: 'rails/rails'
 gem 'rails', '~> 8.0.0', '>= 8.0.2.1'
diff --git a/Gemfile.lock b/Gemfile.lock
index 2a0026cc7..94c6e4656 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -80,8 +80,8 @@ GEM
       securerandom (>= 0.3)
       tzinfo (~> 2.0, >= 2.0.5)
       uri (>= 0.13.1)
-    addressable (2.8.7)
-      public_suffix (>= 2.0.2, < 7.0)
+    addressable (2.9.0)
+      public_suffix (>= 2.0.2, < 8.0)
     ansi (1.5.0)
     ast (2.4.3)
     axe-core-api (4.10.3)
@@ -422,9 +422,25 @@ GEM
     netrc (0.11.0)
     newrelic_rpm (9.21.0)
     nio4r (2.7.5)
-    nokogiri (1.19.1)
+    nokogiri (1.19.2)
       mini_portile2 (~> 2.8.2)
       racc (~> 1.4)
+    nokogiri (1.19.2-aarch64-linux-gnu)
+      racc (~> 1.4)
+    nokogiri (1.19.2-aarch64-linux-musl)
+      racc (~> 1.4)
+    nokogiri (1.19.2-arm-linux-gnu)
+      racc (~> 1.4)
+    nokogiri (1.19.2-arm-linux-musl)
+      racc (~> 1.4)
+    nokogiri (1.19.2-arm64-darwin)
+      racc (~> 1.4)
+    nokogiri (1.19.2-x86_64-darwin)
+      racc (~> 1.4)
+    nokogiri (1.19.2-x86_64-linux-gnu)
+      racc (~> 1.4)
+    nokogiri (1.19.2-x86_64-linux-musl)
+      racc (~> 1.4)
     orm_adapter (0.5.0)
     ostruct (0.6.3)
     overcommit (0.68.0)
@@ -452,12 +468,12 @@ GEM
     psych (5.3.1)
       date
       stringio
-    public_suffix (6.0.2)
+    public_suffix (7.0.5)
     puma (6.6.1)
       nio4r (~> 2.0)
     racc (1.8.1)
-    rack (3.2.5)
-    rack-session (2.1.1)
+    rack (3.2.6)
+    rack-session (2.1.2)
       base64 (>= 0.1.0)
       rack (>= 3.0.0)
     rack-test (2.2.0)
@@ -773,7 +789,7 @@ DEPENDENCIES
   webrick
 
 RUBY VERSION
-   ruby 3.4.5p51
+   ruby 3.4.9p82
 
 BUNDLED WITH
    2.6.9