Update gems and fix failing dependabot CI check

[dadachi]

Runs a full bundle update, which supersedes dependabot PR #95 and resolves its failing scan_ruby job.

Why #95 was failing

bin/brakeman passes --ensure-latest, so brakeman exits 5 whenever the locked version trails the latest on rubygems:

Brakeman 8.0.5 is not the latest version 8.0.6
##[error]Process completed with exit code 5.

Brakeman 8.0.6 shipped after dependabot opened #95, which still locked 8.0.5. Nothing was wrong with the dependency bumps themselves — the lockfile had simply gone stale relative to rubygems. This PR bumps brakeman to 8.0.6 and the check passes again.

Updates

Includes everything from the minor-and-patch group in #95, plus the gems that have been released since:

Package	From	To
devise	4.9.4	5.0.4
devise_token_auth	1.2.6	1.3.0
madmin	2.3.3	2.6.0
solid_queue	1.5.0	1.6.0
resend	1.6.0	1.9.0
brakeman	8.0.5	8.0.6
rubocop	1.88.2	1.89.0
rubocop-rails	2.36.0	2.37.0
rubocop-performance	1.26.1	1.27.0
bootsnap	1.24.6	1.25.0
overcommit	0.71.0	0.72.0
selenium-webdriver	4.46.0	4.47.0
image_processing	2.0.2	2.0.3
rack	3.2.6	3.2.7
rubyzip	3.4.1	3.5.0
tailwindcss-ruby	4.3.2	4.3.3
googleauth	1.17.1	1.17.3
httpx	1.8.0	1.8.1
reline	0.7.0	0.7.0
rbs, msgpack, io-console		patch bumps

Only Gemfile.lock changes — no Gemfile constraints were touched.

Note on devise 5.0.4

devise_token_auth 1.3.0 relaxed its devise constraint, which pulls devise across the 4.x → 5.x major boundary. No application changes were required: the app boots on 5.0.4, config/initializers/devise.rb needed no edits, and the full auth test suite passes. (Devise::VERSION was removed in 5.x, but nothing in this codebase referenced it.)

Verification

Ran the complete bin/ci step list locally, all green:

• bin/rubocop — 253 files, no offenses
• bundle exec erb_lint --lint-all — no errors
• bin/bundler-audit — no vulnerabilities
• bin/brakeman --no-pager — 0 security warnings, exit 0
• bin/rails test — 438 runs, 916 assertions, 0 failures, 0 errors, 0 skips
• RAILS_ENV=test bin/rails db:seed_fu — exit 0

Also confirmed no pending migrations from the solid_queue and madmin bumps.

Closes #95

🤖 Generated with Claude Code

https://claude.ai/code/session_01SLqBocYtUNzw7H3tNWAtjF