NHSDigital · dependabot · Mar 24, 2026
diff --git a/Gemfile.lock b/Gemfile.lock
@@ -1,68 +1,70 @@
 GEM
   remote: https://rubygems.org/
   specs:
-    actioncable (7.2.2.2)
-      actionpack (= 7.2.2.2)
-      activesupport (= 7.2.2.2)
+    actioncable (7.2.3.1)
+      actionpack (= 7.2.3.1)
+      activesupport (= 7.2.3.1)
       nio4r (~> 2.0)
       websocket-driver (>= 0.6.1)
       zeitwerk (~> 2.6)
-    actionmailbox (7.2.2.2)
-      actionpack (= 7.2.2.2)
-      activejob (= 7.2.2.2)
-      activerecord (= 7.2.2.2)
-      activestorage (= 7.2.2.2)
-      activesupport (= 7.2.2.2)
+    actionmailbox (7.2.3.1)
+      actionpack (= 7.2.3.1)
+      activejob (= 7.2.3.1)
+      activerecord (= 7.2.3.1)
+      activestorage (= 7.2.3.1)
+      activesupport (= 7.2.3.1)
       mail (>= 2.8.0)
-    actionmailer (7.2.2.2)
-      actionpack (= 7.2.2.2)
-      actionview (= 7.2.2.2)
-      activejob (= 7.2.2.2)
-      activesupport (= 7.2.2.2)
+    actionmailer (7.2.3.1)
+      actionpack (= 7.2.3.1)
+      actionview (= 7.2.3.1)
+      activejob (= 7.2.3.1)
+      activesupport (= 7.2.3.1)
       mail (>= 2.8.0)
       rails-dom-testing (~> 2.2)
-    actionpack (7.2.2.2)
-      actionview (= 7.2.2.2)
-      activesupport (= 7.2.2.2)
+    actionpack (7.2.3.1)
+      actionview (= 7.2.3.1)
+      activesupport (= 7.2.3.1)
+      cgi
       nokogiri (>= 1.8.5)
       racc
-      rack (>= 2.2.4, < 3.2)
+      rack (>= 2.2.4, < 3.3)
       rack-session (>= 1.0.1)
       rack-test (>= 0.6.3)
       rails-dom-testing (~> 2.2)
       rails-html-sanitizer (~> 1.6)
       useragent (~> 0.16)
-    actiontext (7.2.2.2)
-      actionpack (= 7.2.2.2)
-      activerecord (= 7.2.2.2)
-      activestorage (= 7.2.2.2)
-      activesupport (= 7.2.2.2)
+    actiontext (7.2.3.1)
+      actionpack (= 7.2.3.1)
+      activerecord (= 7.2.3.1)
+      activestorage (= 7.2.3.1)
+      activesupport (= 7.2.3.1)
       globalid (>= 0.6.0)
       nokogiri (>= 1.8.5)
-    actionview (7.2.2.2)
-      activesupport (= 7.2.2.2)
+    actionview (7.2.3.1)
+      activesupport (= 7.2.3.1)
       builder (~> 3.1)
+      cgi
       erubi (~> 1.11)
       rails-dom-testing (~> 2.2)
       rails-html-sanitizer (~> 1.6)
-    activejob (7.2.2.2)
-      activesupport (= 7.2.2.2)
+    activejob (7.2.3.1)
+      activesupport (= 7.2.3.1)
       globalid (>= 0.3.6)
-    activemodel (7.2.2.2)
-      activesupport (= 7.2.2.2)
-    activerecord (7.2.2.2)
-      activemodel (= 7.2.2.2)
-      activesupport (= 7.2.2.2)
+    activemodel (7.2.3.1)
+      activesupport (= 7.2.3.1)
+    activerecord (7.2.3.1)
+      activemodel (= 7.2.3.1)
+      activesupport (= 7.2.3.1)
       timeout (>= 0.4.0)
     activerecord-import (2.2.0)
       activerecord (>= 4.2)
-    activestorage (7.2.2.2)
-      actionpack (= 7.2.2.2)
-      activejob (= 7.2.2.2)
-      activerecord (= 7.2.2.2)
-      activesupport (= 7.2.2.2)
+    activestorage (7.2.3.1)
+      actionpack (= 7.2.3.1)
+      activejob (= 7.2.3.1)
+      activerecord (= 7.2.3.1)
+      activesupport (= 7.2.3.1)
       marcel (~> 1.0)
-    activesupport (7.2.2.2)
+    activesupport (7.2.3.1)
       base64
       benchmark (>= 0.3)
       bigdecimal
@@ -71,16 +73,16 @@ GEM
       drb
       i18n (>= 1.6, < 2)
       logger (>= 1.4.2)
-      minitest (>= 5.1)
+      minitest (>= 5.1, < 6)
       securerandom (>= 0.3)
       tzinfo (~> 2.0, >= 2.0.5)
     addressable (2.8.7)
       public_suffix (>= 2.0.2, < 7.0)
     ast (2.4.3)
     base64 (0.3.0)
     bcrypt (3.1.20)
-    benchmark (0.4.1)
-    bigdecimal (3.2.2)
+    benchmark (0.5.0)
+    bigdecimal (4.0.1)
     bootsnap (1.18.6)
       msgpack (~> 1.2)
     brakeman (7.1.0)
@@ -114,8 +116,8 @@ GEM
     childprocess (5.1.0)
       logger (~> 1.5)
     coderay (1.1.3)
-    concurrent-ruby (1.3.5)
-    connection_pool (2.5.3)
+    concurrent-ruby (1.3.6)
+    connection_pool (3.0.2)
     crass (1.0.6)
     csv (3.3.5)
     date (3.1.3)
@@ -133,11 +135,11 @@ GEM
       charlock_holmes (~> 0.7.7)
       mini_mime (~> 1.0)
       rugged (~> 1.0)
-    globalid (1.2.1)
+    globalid (1.3.0)
       activesupport (>= 6.1)
     highline (3.1.2)
       reline
-    i18n (1.14.7)
+    i18n (1.14.8)
       concurrent-ruby (~> 1.0)
     io-console (0.8.1)
     irb (1.15.2)
@@ -155,20 +157,20 @@ GEM
       rb-fsevent (~> 0.10, >= 0.10.3)
       rb-inotify (~> 0.9, >= 0.9.10)
     logger (1.7.0)
-    loofah (2.24.1)
+    loofah (2.25.1)
       crass (~> 1.0.2)
       nokogiri (>= 1.12.0)
     mail (2.8.1)
       mini_mime (>= 0.1.1)
       net-imap
       net-pop
       net-smtp
-    marcel (1.0.4)
+    marcel (1.1.0)
     matrix (0.4.3)
     method_source (1.1.0)
     mini_mime (1.1.5)
     mini_portile2 (2.8.9)
-    minitest (5.25.5)
+    minitest (5.27.0)
     mocha (2.7.1)
       ruby2_keywords (>= 0.0.5)
     msgpack (1.8.0)
@@ -250,42 +252,44 @@ GEM
       puma (>= 5.0)
       rack
     racc (1.8.1)
-    rack (3.1.20)
+    rack (3.2.5)
     rack-session (2.1.1)
       base64 (>= 0.1.0)
       rack (>= 3.0.0)
     rack-test (2.2.0)
       rack (>= 1.3)
     rackup (2.2.1)
       rack (>= 3)
-    rails (7.2.2.2)
-      actioncable (= 7.2.2.2)
-      actionmailbox (= 7.2.2.2)
-      actionmailer (= 7.2.2.2)
-      actionpack (= 7.2.2.2)
-      actiontext (= 7.2.2.2)
-      actionview (= 7.2.2.2)
-      activejob (= 7.2.2.2)
-      activemodel (= 7.2.2.2)
-      activerecord (= 7.2.2.2)
-      activestorage (= 7.2.2.2)
-      activesupport (= 7.2.2.2)
+    rails (7.2.3.1)
+      actioncable (= 7.2.3.1)
+      actionmailbox (= 7.2.3.1)
+      actionmailer (= 7.2.3.1)
+      actionpack (= 7.2.3.1)
+      actiontext (= 7.2.3.1)
+      actionview (= 7.2.3.1)
+      activejob (= 7.2.3.1)
+      activemodel (= 7.2.3.1)
+      activerecord (= 7.2.3.1)
+      activestorage (= 7.2.3.1)
+      activesupport (= 7.2.3.1)
       bundler (>= 1.15.0)
-      railties (= 7.2.2.2)
+      railties (= 7.2.3.1)
     rails-dom-testing (2.3.0)
       activesupport (>= 5.0.0)
       minitest
       nokogiri (>= 1.6)
-    rails-html-sanitizer (1.6.2)
-      loofah (~> 2.21)
+    rails-html-sanitizer (1.7.0)
+      loofah (~> 2.25)
       nokogiri (>= 1.15.7, != 1.16.7, != 1.16.6, != 1.16.5, != 1.16.4, != 1.16.3, != 1.16.2, != 1.16.1, != 1.16.0.rc1, != 1.16.0)
-    railties (7.2.2.2)
-      actionpack (= 7.2.2.2)
-      activesupport (= 7.2.2.2)
+    railties (7.2.3.1)
+      actionpack (= 7.2.3.1)
+      activesupport (= 7.2.3.1)
+      cgi
       irb (~> 1.13)
       rackup (>= 1.0.0)
       rake (>= 12.2)
       thor (~> 1.0, >= 1.2.2)
+      tsort (>= 0.2)
       zeitwerk (~> 2.6)
     rainbow (3.1.1)
     rake (13.3.0)
@@ -347,7 +351,8 @@ GEM
       spring (>= 4)
     stringio (3.1.1)
     thor (1.4.0)
-    timeout (0.4.3)
+    timeout (0.6.1)
+    tsort (0.2.0)
     tzinfo (2.0.6)
       concurrent-ruby (~> 1.0)
     unicode-display_width (3.1.4)

diff --git a/vendor/cache/actioncable-7.2.2.2.gem b/vendor/cache/actioncable-7.2.2.2.gem
diff --git a/vendor/cache/actioncable-7.2.3.1.gem b/vendor/cache/actioncable-7.2.3.1.gem
diff --git a/vendor/cache/actionmailbox-7.2.2.2.gem b/vendor/cache/actionmailbox-7.2.2.2.gem
diff --git a/vendor/cache/actionmailbox-7.2.3.1.gem b/vendor/cache/actionmailbox-7.2.3.1.gem
diff --git a/vendor/cache/actionmailer-7.2.2.2.gem b/vendor/cache/actionmailer-7.2.2.2.gem
diff --git a/vendor/cache/actionmailer-7.2.3.1.gem b/vendor/cache/actionmailer-7.2.3.1.gem
diff --git a/vendor/cache/actionpack-7.2.2.2.gem b/vendor/cache/actionpack-7.2.2.2.gem
diff --git a/vendor/cache/actionpack-7.2.3.1.gem b/vendor/cache/actionpack-7.2.3.1.gem
diff --git a/vendor/cache/actiontext-7.2.2.2.gem b/vendor/cache/actiontext-7.2.2.2.gem
diff --git a/vendor/cache/actiontext-7.2.3.1.gem b/vendor/cache/actiontext-7.2.3.1.gem
diff --git a/vendor/cache/actionview-7.2.2.2.gem b/vendor/cache/actionview-7.2.2.2.gem
diff --git a/vendor/cache/actionview-7.2.3.1.gem b/vendor/cache/actionview-7.2.3.1.gem
diff --git a/vendor/cache/activejob-7.2.2.2.gem b/vendor/cache/activejob-7.2.2.2.gem
diff --git a/vendor/cache/activejob-7.2.3.1.gem b/vendor/cache/activejob-7.2.3.1.gem
diff --git a/vendor/cache/activemodel-7.2.2.2.gem b/vendor/cache/activemodel-7.2.2.2.gem
diff --git a/vendor/cache/activemodel-7.2.3.1.gem b/vendor/cache/activemodel-7.2.3.1.gem
diff --git a/vendor/cache/activerecord-7.2.2.2.gem b/vendor/cache/activerecord-7.2.2.2.gem
diff --git a/vendor/cache/activerecord-7.2.3.1.gem b/vendor/cache/activerecord-7.2.3.1.gem
diff --git a/vendor/cache/activestorage-7.2.2.2.gem b/vendor/cache/activestorage-7.2.2.2.gem
diff --git a/vendor/cache/activestorage-7.2.3.1.gem b/vendor/cache/activestorage-7.2.3.1.gem
diff --git a/vendor/cache/activesupport-7.2.2.2.gem b/vendor/cache/activesupport-7.2.2.2.gem
diff --git a/vendor/cache/activesupport-7.2.3.1.gem b/vendor/cache/activesupport-7.2.3.1.gem
diff --git a/vendor/cache/benchmark-0.4.1.gem b/vendor/cache/benchmark-0.4.1.gem
diff --git a/vendor/cache/benchmark-0.5.0.gem b/vendor/cache/benchmark-0.5.0.gem
diff --git a/vendor/cache/bigdecimal-3.2.2.gem b/vendor/cache/bigdecimal-3.2.2.gem
diff --git a/vendor/cache/bigdecimal-4.0.1.gem b/vendor/cache/bigdecimal-4.0.1.gem
diff --git a/vendor/cache/concurrent-ruby-1.3.5.gem b/vendor/cache/concurrent-ruby-1.3.5.gem
diff --git a/vendor/cache/concurrent-ruby-1.3.6.gem b/vendor/cache/concurrent-ruby-1.3.6.gem
diff --git a/vendor/cache/connection_pool-2.5.3.gem b/vendor/cache/connection_pool-2.5.3.gem
diff --git a/vendor/cache/connection_pool-3.0.2.gem b/vendor/cache/connection_pool-3.0.2.gem
diff --git a/vendor/cache/globalid-1.2.1.gem b/vendor/cache/globalid-1.2.1.gem
diff --git a/vendor/cache/globalid-1.3.0.gem b/vendor/cache/globalid-1.3.0.gem
diff --git a/vendor/cache/i18n-1.14.7.gem b/vendor/cache/i18n-1.14.7.gem
diff --git a/vendor/cache/i18n-1.14.8.gem b/vendor/cache/i18n-1.14.8.gem
diff --git a/vendor/cache/loofah-2.24.1.gem b/vendor/cache/loofah-2.24.1.gem
diff --git a/vendor/cache/loofah-2.25.1.gem b/vendor/cache/loofah-2.25.1.gem
diff --git a/vendor/cache/marcel-1.0.4.gem b/vendor/cache/marcel-1.0.4.gem
diff --git a/vendor/cache/marcel-1.1.0.gem b/vendor/cache/marcel-1.1.0.gem
diff --git a/vendor/cache/minitest-5.25.5.gem b/vendor/cache/minitest-5.25.5.gem
diff --git a/vendor/cache/minitest-5.27.0.gem b/vendor/cache/minitest-5.27.0.gem
diff --git a/vendor/cache/rack-3.1.20.gem b/vendor/cache/rack-3.1.20.gem
diff --git a/vendor/cache/rack-3.2.5.gem b/vendor/cache/rack-3.2.5.gem
diff --git a/vendor/cache/rails-7.2.2.2.gem → vendor/cache/rails-7.2.3.1.gem b/vendor/cache/rails-7.2.2.2.gem → vendor/cache/rails-7.2.3.1.gem
diff --git a/vendor/cache/rails-html-sanitizer-1.6.2.gem b/vendor/cache/rails-html-sanitizer-1.6.2.gem
diff --git a/vendor/cache/rails-html-sanitizer-1.7.0.gem b/vendor/cache/rails-html-sanitizer-1.7.0.gem
diff --git a/vendor/cache/railties-7.2.2.2.gem b/vendor/cache/railties-7.2.2.2.gem
diff --git a/vendor/cache/railties-7.2.3.1.gem b/vendor/cache/railties-7.2.3.1.gem
diff --git a/vendor/cache/timeout-0.4.3.gem b/vendor/cache/timeout-0.4.3.gem
diff --git a/vendor/cache/timeout-0.6.1.gem b/vendor/cache/timeout-0.6.1.gem
diff --git a/vendor/cache/tsort-0.2.0.gem b/vendor/cache/tsort-0.2.0.gem