#450 updating some gems suggested by dependabot due security vulnerab…

…ility

Gemfile

@@ -17,7 +17,10 @@ gem "sprockets-rails"
 # gem "sqlite3", "~> 1.4"
 
 # Use the Puma web server [https://github.com/puma/puma]
-gem "puma", ">= 5.0"
+gem "puma", ">= 6.4.2"
+
+# HTML and XML parser
+gem "nokogiri", ">= 1.16.2"
 
 # Use JavaScript with ESM import maps [https://github.com/rails/importmap-rails]
 # gem "importmap-rails"
@@ -102,7 +105,7 @@ gem "simple-navigation"
 gem "rufus-scheduler"
 
 # Image
-gem "carrierwave"
+gem "carrierwave", ">= 3.0.5"
 gem "carrierwave-activerecord", git: "https://github.com/gems-uff/carrierwave-activerecord.git", branch: "rails7"
 
 # Nested Forms / ApplicationProcess and FormTemplates functionalities.

Gemfile.lock

@@ -127,7 +127,7 @@ GEM
       rack-test (>= 0.6.3)
       regexp_parser (>= 1.5, < 3.0)
       xpath (~> 3.2)
-    carrierwave (3.0.4)
+    carrierwave (3.0.5)
       activemodel (>= 6.0.0)
       activesupport (>= 6.0.0)
       addressable (~> 2.6)
@@ -272,10 +272,10 @@ GEM
     net-smtp (0.4.0)
       net-protocol
     nio4r (2.5.9)
-    nokogiri (1.15.4)
+    nokogiri (1.16.2)
       mini_portile2 (~> 2.8.2)
       racc (~> 1.4)
-    nokogiri (1.15.4-x86-mingw32)
+    nokogiri (1.16.2-x86-mingw32)
       racc (~> 1.4)
     orm_adapter (0.5.0)
     paper_trail (15.1.0)
@@ -301,7 +301,7 @@ GEM
     psych (5.1.1.1)
       stringio
     public_suffix (5.0.3)
-    puma (6.4.0)
+    puma (6.4.2)
       nio4r (~> 2.0)
     raabro (1.4.0)
     racc (1.7.3)
@@ -498,7 +498,7 @@ DEPENDENCIES
   bootsnap
   cancancan
   capybara
-  carrierwave
+  carrierwave (>= 3.0.5)
   carrierwave-activerecord!
   caxlsx
   caxlsx_rails
@@ -522,12 +522,13 @@ DEPENDENCIES
   net-http
   net-imap
   net-smtp
+  nokogiri (>= 1.16.2)
   paper_trail
   prawn
   prawn-rails
   prawn-table
   pry
-  puma (>= 5.0)
+  puma (>= 6.4.2)
   rails (~> 7.0.7)
   rails-erd
   rdoc