Auto-update dependencies.

[dpebot]

Brought to you by your friendly Repository Gardener.

[wiz-9635d3485b]

Wiz Scan Summary

Scanner	Findings
Vulnerabilities	3
Sensitive Data	-
Secrets	-
IaC Misconfigurations	-
SAST Findings	-
Software Management Findings	-
Total	3

View scan details in Wiz

To detect these findings earlier in the dev lifecycle, try using Wiz Code VS Code Extension.

[gemini-code-assist]

Code Review

This pull request modifies the Gemfile.lock, but instead of updating dependencies as the title suggests, it introduces several downgrades. Specifically, activesupport is downgraded from 7.2.3.1 to 7.0.10, minitest from 5.27.0 to 5.26.1, and securerandom from 0.4.1 to 0.3.2. The review feedback correctly identifies these changes as regressions that could lead to security vulnerabilities and compatibility issues, contradicting the intended purpose of the PR.

[gemini-code-assist]

This pull request is titled "Auto-update dependencies", but it significantly downgrades activesupport from 7.2.3.1 to 7.0.10. Downgrading core libraries can re-introduce security vulnerabilities and lead to compatibility issues.

[gemini-code-assist]

This change downgrades minitest from 5.27.0 to 5.26.1. This is a regression that contradicts the pull request's intent to update dependencies.

[gemini-code-assist]

This change downgrades securerandom from 0.4.1 to 0.3.2. This is a regression that contradicts the pull request's intent to update dependencies.