From f76ebd9a3fc848837087d2cc1b271cb5ab4a1eff Mon Sep 17 00:00:00 2001
From: Tim Watson <tim@pipelinecrm.com>
Date: Thu, 23 Jul 2026 21:13:07 -0700
Subject: [PATCH] Bump concurrent-ruby to 1.3.8 (fixes 3 Dependabot advisories)

Transitive dep via activesupport. Clears GHSA-h8w8-99g7-qmvj (high),
GHSA-wv3x-4vxv-whpp, GHSA-6wx8-w4f5-wwcr - all patched in 1.3.7.
Lockfile-only change; full suite green.

Closes #43
---
 Gemfile.lock | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Gemfile.lock b/Gemfile.lock
index e7f02d0..dc10b0f 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -20,7 +20,7 @@ GEM
     benchmark (0.5.0)
     bigdecimal (4.0.1)
     coderay (1.1.3)
-    concurrent-ruby (1.3.6)
+    concurrent-ruby (1.3.8)
     connection_pool (3.0.2)
     crack (0.4.5)
       rexml