Dependencies: 2026-06-26

.github/dependabot.yml

@@ -5,8 +5,19 @@ updates:
   schedule:
     interval: daily
   open-pull-requests-limit: 10
+  cooldown:
+    default-days: 7
 - package-ecosystem: github-actions
   directory: "/"
   schedule:
     interval: daily
   open-pull-requests-limit: 10
+  cooldown:
+    default-days: 7
+- package-ecosystem: npm
+  directory: "/"
+  schedule:
+    interval: daily
+  open-pull-requests-limit: 10
+  cooldown:
+    default-days: 7

.github/workflows/ci.yml

@@ -22,10 +22,10 @@ jobs:
           --health-retries 5
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Set up Ruby
-        uses: ruby/setup-ruby@v1
+        uses: ruby/setup-ruby@v1.313.0
         with:
           bundler-cache: true
 

.github/workflows/deploy.yml

@@ -52,7 +52,7 @@ jobs:
         run: echo "Deploying to ${{ needs.determine_environment.outputs.env_name }}"
 
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Debug OIDC claims
         run: |
@@ -72,7 +72,7 @@ jobs:
           echo "Repository ref: repo:${{ github.repository }}:ref:${{ github.ref }}"
 
       - name: Configure AWS credentials
-        uses: aws-actions/configure-aws-credentials@v6
+        uses: aws-actions/configure-aws-credentials@v6.1.3
         with:
           role-to-assume: ${{ vars.AWS_ROLE_ARN }}
           aws-region: ${{ vars.AWS_REGION }}
@@ -83,7 +83,7 @@ jobs:
 
       - name: Login to Amazon ECR
         id: login-ecr
-        uses: aws-actions/amazon-ecr-login@v2
+        uses: aws-actions/amazon-ecr-login@v2.1.5
 
       - name: Build, tag, and push Document Inference Lambda image to ECR
         id: build-document-inference-image
@@ -145,7 +145,7 @@ jobs:
 
       - name: Debug deployment failure
         if: failure() && steps.deploy.outcome == 'failure'
-        uses: aws-actions/configure-aws-credentials@v6
+        uses: aws-actions/configure-aws-credentials@v6.1.3
         with:
           role-to-assume: ${{ vars.AWS_ROLE_ARN }}
           aws-region: ${{ vars.AWS_REGION }}

.github/workflows/eval.yml

@@ -52,7 +52,7 @@ jobs:
       matrix: ${{ steps.set-matrix.outputs.matrix }}
       runs: ${{ steps.set-runs.outputs.runs }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - name: Debug OIDC claims
         run: |
           echo "GitHub repository: ${{ github.repository }}"
@@ -73,7 +73,7 @@ jobs:
 
       - name: Configure AWS credentials
         if: ${{ github.event.inputs.should_rebuild_images == 'true' }}
-        uses: aws-actions/configure-aws-credentials@v6
+        uses: aws-actions/configure-aws-credentials@v6.1.3
         with:
           role-to-assume: ${{ vars.AWS_ROLE_ARN }}
           aws-region: ${{ vars.AWS_REGION }}
@@ -85,7 +85,7 @@ jobs:
       - name: Login to Amazon ECR
         id: login-ecr
         if: ${{ github.event.inputs.should_rebuild_images == 'true' }}
-        uses: aws-actions/amazon-ecr-login@v2
+        uses: aws-actions/amazon-ecr-login@v2.1.5
 
       - name: Build, tag, and push Evaluation Lambda image to ECR
         id: build-evaluation-image
@@ -188,9 +188,9 @@ jobs:
         run: ${{ fromJson(needs.build.outputs.runs) }}
       max-parallel: 10
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - name: Configure AWS credentials
-        uses: aws-actions/configure-aws-credentials@v6
+        uses: aws-actions/configure-aws-credentials@v6.1.3
         with:
           role-to-assume: ${{ vars.AWS_ROLE_ARN }}
           aws-region: ${{ vars.AWS_REGION }}
@@ -201,7 +201,7 @@ jobs:
 
       - name: Login to Amazon ECR
         id: login-ecr
-        uses: aws-actions/amazon-ecr-login@v2
+        uses: aws-actions/amazon-ecr-login@v2.1.5
 
       - name: Invoke Evaluation Lambda
         id: invoke-evaluation-lambda

.github/workflows/plan.yml

@@ -27,10 +27,10 @@ jobs:
         run: echo "Tofu config directory ./terraform/config/${{ github.event.inputs.environment }}"
 
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Configure AWS credentials
-        uses: aws-actions/configure-aws-credentials@v6
+        uses: aws-actions/configure-aws-credentials@v6.1.3
         with:
           role-to-assume: ${{ vars.AWS_ROLE_ARN }}
           aws-region: ${{ vars.AWS_REGION }}
@@ -41,7 +41,7 @@ jobs:
 
       - name: Login to Amazon ECR
         id: login-ecr
-        uses: aws-actions/amazon-ecr-login@v2
+        uses: aws-actions/amazon-ecr-login@v2.1.5
 
       - name: Setup OpenTofu
         uses: opentofu/setup-opentofu@v2

.github/workflows/python_components.yml

@@ -14,11 +14,11 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v7
       with:
         fetch-depth: 0
     - name: Set up Python 3.12
-      uses: actions/setup-python@v6
+      uses: actions/setup-python@v6.2.0
       with:
         python-version: "3.12"
     - name: Install dependencies

Gemfile

@@ -26,14 +26,14 @@ gem "devise", "~> 5.0"
 gem "activerecord-session_store"
 
 group :development, :test do
-  gem "brakeman", "~> 7.1", require: false
+  gem "brakeman", "~> 8.0", require: false
   gem "debug", platforms: %i[mri windows], require: "debug/prelude"
   gem "dotenv-rails", "~> 3.1"
   gem "standard"
 end
 
 group :development do
-  gem "overcommit", "~> 0.68.0"
+  gem "overcommit", "~> 0.69.0"
   gem "better_errors", "~> 2.10"
   gem "ruby-lsp", "~> 0.26"
   gem "web-console"
@@ -61,7 +61,7 @@ gem "aws-sdk-lambda"
 gem "aws-sigv4"
 
 # API and Documentation
-gem "grape", "~> 2.4"
+gem "grape", "~> 3.2"
 gem "grape-swagger"
 
 gem "paper_trail", "~> 17.0"