From a062bf476f8bbd1d05e0387bf7cfe85492ead364 Mon Sep 17 00:00:00 2001
From: Steven Woods <steven.woods@citizensadvice.org.uk>
Date: Thu, 11 Jun 2026 08:58:33 +0100
Subject: [PATCH] Patch bump puma to resolve CVEs

---
 Gemfile      | 2 +-
 Gemfile.lock | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/Gemfile b/Gemfile
index a20673f..7c44aed 100644
--- a/Gemfile
+++ b/Gemfile
@@ -9,7 +9,7 @@ gem "sinatra-contrib", require: false
 
 gem "activesupport"
 gem "http"
-gem "puma"
+gem "puma", "~> 7.2.1"
 gem "rackup"
 gem "redis"
 
diff --git a/Gemfile.lock b/Gemfile.lock
index 2a6680b..0f911a1 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -98,7 +98,7 @@ GEM
       date
       stringio
     public_suffix (7.0.5)
-    puma (7.2.0)
+    puma (7.2.1)
       nio4r (~> 2.0)
     racc (1.8.1)
     rack (3.2.6)
@@ -226,7 +226,7 @@ DEPENDENCIES
   debug
   http
   newrelic_rpm
-  puma
+  puma (~> 7.2.1)
   rack-test
   rackup
   redis