Security: bump rexml, yard (#53)

* Security: bump rexml, yard

Bumped rexml from 3.2.6 to 3.4.4 (addresses multiple CVEs)
Bumped yard from 0.9.36 to 0.9.44 (addresses GHSA-3jfp-46x4-xgfj)

Tests passing: rspec (55 examples, 0 failures)

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* Fix CI: bump pry for Ruby 4 compatibility

---------

Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Author: technicalpickles

Gemfile.lock

@@ -16,26 +16,30 @@ GEM
     diff-lcs (1.5.1)
     erubi (1.12.0)
     hashdiff (1.0.1)
+    io-console (0.8.2)
     json (2.7.1)
     language_server-protocol (3.17.0.3)
-    method_source (1.0.0)
+    method_source (1.1.0)
     netrc (0.11.0)
     parallel (1.24.0)
     parser (3.3.0.5)
       ast (~> 2.4.1)
       racc
     prism (0.24.0)
-    pry (0.14.2)
+    pry (0.16.0)
       coderay (~> 1.1)
       method_source (~> 1.0)
+      reline (>= 0.6.0)
     racc (1.7.3)
     rainbow (3.1.1)
     rake (13.0.6)
     rbi (0.1.9)
       prism (>= 0.18.0, < 0.25)
       sorbet-runtime (>= 0.5.9204)
     regexp_parser (2.8.3)
-    rexml (3.2.6)
+    reline (0.6.3)
+      io-console (~> 0.5)
+    rexml (3.4.4)
     rspec (3.12.0)
       rspec-core (~> 3.12.0)
       rspec-expectations (~> 3.12.0)
@@ -88,7 +92,7 @@ GEM
       yard-sorbet
     thor (1.3.1)
     unicode-display_width (2.5.0)
-    yard (0.9.36)
+    yard (0.9.44)
     yard-sorbet (0.8.1)
       sorbet-runtime (>= 0.5)
       yard (>= 0.9)

sorbet/rbi/gems/.gitattributes

@@ -0,0 +1 @@
+**/*.rbi linguist-generated=true