From c409a496564915ad96f4626792c3d474db391ea2 Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Fri, 19 Dec 2025 06:02:25 +0000
Subject: [PATCH] fix: Gemfile & Gemfile.lock to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-RUBY-AWSSDKS3-14465282
---
 Gemfile      |  2 +-
 Gemfile.lock | 35 +++++++++++++++++++----------------
 2 files changed, 20 insertions(+), 17 deletions(-)

diff --git a/Gemfile b/Gemfile
index 50263ea66..2a10c94f4 100644
--- a/Gemfile
+++ b/Gemfile
@@ -56,7 +56,7 @@ gem 'simple_form', '>= 5.3.1'
 gem 'importmap-rails', '~> 2.2'
 
 gem 'aws-sdk-cloudwatch', require: false
-gem 'aws-sdk-s3', require: false
+gem 'aws-sdk-s3', '>= 1.208.0', require: false
 gem 'azure-storage-blob', '>= 2.0.3', require: false
 
 # Exception tracking
diff --git a/Gemfile.lock b/Gemfile.lock
index c7f47d7b7..f07b492c9 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -99,24 +99,27 @@ GEM
       rest-client (~> 2.1)
       retryable (~> 3.0)
       zache (~> 0.12)
-    aws-eventstream (1.2.0)
-    aws-partitions (1.554.0)
+    aws-eventstream (1.4.0)
+    aws-partitions (1.1197.0)
     aws-sdk-cloudwatch (1.7.0)
       aws-sdk-core (~> 3)
       aws-sigv4 (~> 1.0)
-    aws-sdk-core (3.126.0)
-      aws-eventstream (~> 1, >= 1.0.2)
-      aws-partitions (~> 1, >= 1.525.0)
-      aws-sigv4 (~> 1.1)
-      jmespath (~> 1.0)
-    aws-sdk-kms (1.54.0)
-      aws-sdk-core (~> 3, >= 3.126.0)
-      aws-sigv4 (~> 1.1)
-    aws-sdk-s3 (1.112.0)
-      aws-sdk-core (~> 3, >= 3.126.0)
+    aws-sdk-core (3.240.0)
+      aws-eventstream (~> 1, >= 1.3.0)
+      aws-partitions (~> 1, >= 1.992.0)
+      aws-sigv4 (~> 1.9)
+      base64
+      bigdecimal
+      jmespath (~> 1, >= 1.6.1)
+      logger
+    aws-sdk-kms (1.118.0)
+      aws-sdk-core (~> 3, >= 3.239.1)
+      aws-sigv4 (~> 1.5)
+    aws-sdk-s3 (1.208.0)
+      aws-sdk-core (~> 3, >= 3.234.0)
       aws-sdk-kms (~> 1)
-      aws-sigv4 (~> 1.4)
-    aws-sigv4 (1.4.0)
+      aws-sigv4 (~> 1.5)
+    aws-sigv4 (1.12.1)
       aws-eventstream (~> 1, >= 1.0.2)
     azure-storage-blob (2.0.3)
       azure-storage-common (~> 2.0)
@@ -255,7 +258,7 @@ GEM
     jbuilder (2.14.1)
       actionview (>= 7.0.0)
       activesupport (>= 7.0.0)
-    jmespath (1.6.1)
+    jmespath (1.6.2)
     jquery-rails (4.6.0)
       rails-dom-testing (>= 1, < 3)
       railties (>= 4.2.0)
@@ -626,7 +629,7 @@ DEPENDENCIES
   akami (>= 1.3.2)
   auth0 (~> 5.1, >= 5.1.2)
   aws-sdk-cloudwatch
-  aws-sdk-s3
+  aws-sdk-s3 (>= 1.208.0)
   azure-storage-blob (>= 2.0.3)
   bootsnap (~> 1.11, >= 1.11.1)
   brakeman