From 85f672d2ee3fd6361d701b81dfe5428e62cb7721 Mon Sep 17 00:00:00 2001
From: Dave Orweller <david.orweller@tithe.ly>
Date: Mon, 11 Aug 2025 11:51:55 -0400
Subject: [PATCH] IN-2714 - Address Security Vulnerabilities

---
 CHANGELOG.md              | 6 ++++++
 Gemfile.lock              | 9 +++++----
 faithteams-api.gemspec    | 5 +++--
 lib/faithteams/version.rb | 2 +-
 4 files changed, 15 insertions(+), 7 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 848443a..833fd6a 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -7,6 +7,12 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [4.3.0]
+
+### Changed
+
+1. Bump dependencies to address security vulnerabilities. (IN-2714)
+
 ## [4.2.0] - 2025-02-18
 
 ### Changed
diff --git a/Gemfile.lock b/Gemfile.lock
index e051752..1b16b3e 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -1,12 +1,13 @@
 PATH
   remote: .
   specs:
-    faithteams-api (4.2.0)
+    faithteams-api (4.3.0)
       activesupport (~> 7.2.2)
       http (~> 5.1)
       logger (~> 1.6.1)
       ostruct (~> 0.6.0)
-      rexml (~> 3.3.6)
+      rexml (~> 3.3.9)
+      thor (~> 1.4.0)
 
 GEM
   remote: https://rubygems.org/
@@ -145,7 +146,7 @@ GEM
       simplecov_json_formatter (~> 0.1)
     simplecov-html (0.13.1)
     simplecov_json_formatter (0.1.4)
-    thor (1.3.2)
+    thor (1.4.0)
     tzinfo (2.0.6)
       concurrent-ruby (~> 1.0)
     unicode-display_width (3.1.2)
@@ -172,7 +173,7 @@ DEPENDENCIES
   rubocop-rspec (~> 1.42)
   simplecov (~> 0.21)
   webmock (~> 3.18)
-  yard (~> 0.9)
+  yard (~> 0.9.36)
 
 BUNDLED WITH
    2.5.7
diff --git a/faithteams-api.gemspec b/faithteams-api.gemspec
index 22823e2..3fbe192 100644
--- a/faithteams-api.gemspec
+++ b/faithteams-api.gemspec
@@ -36,7 +36,8 @@ Gem::Specification.new do |spec|
   spec.add_dependency "http", "~> 5.1"
   spec.add_dependency "logger", "~> 1.6.1"
   spec.add_dependency "ostruct", "~> 0.6.0"
-  spec.add_dependency "rexml", "~> 3.3.6" # only needs to be specified to address security warning
+  spec.add_dependency "rexml", "~> 3.3.9" # only needs to be specified to address security warning
+  spec.add_dependency "thor", "~> 1.4.0"
 
   spec.add_development_dependency "byebug", "~> 11.1"
   spec.add_development_dependency "guard-rspec", "~> 4.7"
@@ -48,5 +49,5 @@ Gem::Specification.new do |spec|
   spec.add_development_dependency "rubocop-rake", "~> 0.6"
   spec.add_development_dependency "rubocop-rspec", "~> 1.42"
   spec.add_development_dependency "webmock", "~> 3.18"
-  spec.add_development_dependency "yard", "~> 0.9"
+  spec.add_development_dependency "yard", "~> 0.9.36"
 end
diff --git a/lib/faithteams/version.rb b/lib/faithteams/version.rb
index 443b1af..853b9e4 100644
--- a/lib/faithteams/version.rb
+++ b/lib/faithteams/version.rb
@@ -2,5 +2,5 @@
 
 module FaithTeams
   # Current version number.
-  VERSION = "4.2.0"
+  VERSION = "4.3.0"
 end