diff --git a/spec/conformance/Gemfile.lock b/spec/conformance/Gemfile.lock
index a71b4040..6e5235b3 100644
--- a/spec/conformance/Gemfile.lock
+++ b/spec/conformance/Gemfile.lock
@@ -1,13 +1,13 @@
 PATH
   remote: ../..
   specs:
-    webauthn (3.4.1)
+    webauthn (3.4.2)
       android_key_attestation (~> 0.3.0)
       bindata (~> 2.4)
       cbor (~> 0.5.9)
       cose (~> 1.1)
       openssl (>= 2.2)
-      safety_net_attestation (~> 0.4.0)
+      safety_net_attestation (~> 0.5.0)
       tpm-key_attestation (~> 0.14.0)
 
 GEM
@@ -36,10 +36,10 @@ GEM
       openssl (> 2.0)
     puma (6.6.1)
       nio4r (~> 2.0)
-    rack (3.2.1)
+    rack (3.2.3)
     rack-contrib (2.5.0)
       rack (< 4)
-    rack-protection (4.1.1)
+    rack-protection (4.2.1)
       base64 (>= 0.1.0)
       logger (>= 1.6.0)
       rack (>= 3.0.0, < 4)
@@ -50,20 +50,20 @@ GEM
       rack (>= 3)
     ruby2_keywords (0.0.5)
     rubyzip (3.1.0)
-    safety_net_attestation (0.4.0)
-      jwt (~> 2.0)
-    sinatra (4.1.1)
+    safety_net_attestation (0.5.0)
+      jwt (>= 2.0, < 4.0)
+    sinatra (4.2.1)
       logger (>= 1.6.0)
       mustermann (~> 3.0)
       rack (>= 3.0.0, < 4)
-      rack-protection (= 4.1.1)
+      rack-protection (= 4.2.1)
       rack-session (>= 2.0.0, < 3)
       tilt (~> 2.0)
-    sinatra-contrib (4.1.1)
+    sinatra-contrib (4.2.1)
       multi_json (>= 0.0.2)
       mustermann (~> 3.0)
-      rack-protection (= 4.1.1)
-      sinatra (= 4.1.1)
+      rack-protection (= 4.2.1)
+      sinatra (= 4.2.1)
       tilt (~> 2.0)
     tilt (2.6.1)
     tpm-key_attestation (0.14.1)