From 3293cdca1699c8936cd3d641c331c773186f968f Mon Sep 17 00:00:00 2001
From: Simon Pickup <simon@pickupinfinity.com>
Date: Mon, 17 Aug 2026 08:54:16 +0000
Subject: [PATCH] build(deps): resolve Jekyll security alerts

---
 Gemfile      | 5 +++--
 Gemfile.lock | 8 ++++----
 2 files changed, 7 insertions(+), 6 deletions(-)

diff --git a/Gemfile b/Gemfile
index 87c593b..5a415cd 100644
--- a/Gemfile
+++ b/Gemfile
@@ -29,7 +29,8 @@ end
 gem "wdm", "~> 0.1.1", :platforms => [:mingw, :x64_mingw, :mswin]
 
 # Dependabot security alert fixes
-gem "rexml", ">= 3.2.5"
+# Keep explicit secure floors so future lockfile refreshes cannot regress them.
+gem "rexml", ">= 3.3.9"
 gem "kramdown", ">= 2.3.1"
 
-gem "webrick", "~> 1.8"
+gem "webrick", ">= 1.8.2", "< 2"
diff --git a/Gemfile.lock b/Gemfile.lock
index 4c3ab7f..5574c82 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -56,7 +56,7 @@ GEM
     rb-fsevent (0.11.0)
     rb-inotify (0.10.1)
       ffi (~> 1.0)
-    rexml (3.2.5)
+    rexml (3.4.4)
     rouge (3.26.0)
     safe_yaml (1.0.5)
     sassc (2.4.0)
@@ -64,7 +64,7 @@ GEM
     terminal-table (1.8.0)
       unicode-display_width (~> 1.1, >= 1.1.1)
     unicode-display_width (1.7.0)
-    webrick (1.8.1)
+    webrick (1.9.2)
 
 PLATFORMS
   ruby
@@ -74,11 +74,11 @@ DEPENDENCIES
   jekyll-feed (~> 0.12)
   kramdown (>= 2.3.1)
   minima (~> 2.5)
-  rexml (>= 3.2.5)
+  rexml (>= 3.3.9)
   tzinfo (~> 1.2)
   tzinfo-data
   wdm (~> 0.1.1)
-  webrick (~> 1.8)
+  webrick (>= 1.8.2, < 2)
 
 BUNDLED WITH
    2.3.26