diff --git a/Gemfile.lock b/Gemfile.lock
index bb2beb18..17fb5608 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -163,16 +163,16 @@ GEM
       warden-oauth2 (~> 0.0.1)
     globalid (1.2.1)
       activesupport (>= 6.1)
-    google-protobuf (4.27.4)
+    google-protobuf (4.28.0)
       bigdecimal
       rake (>= 13)
-    google-protobuf (4.27.4-aarch64-linux)
+    google-protobuf (4.28.0-aarch64-linux)
       bigdecimal
       rake (>= 13)
-    google-protobuf (4.27.4-arm64-darwin)
+    google-protobuf (4.28.0-arm64-darwin)
       bigdecimal
       rake (>= 13)
-    google-protobuf (4.27.4-x86_64-linux)
+    google-protobuf (4.28.0-x86_64-linux)
       bigdecimal
       rake (>= 13)
     googleapis-common-protos-types (1.15.0)
@@ -192,7 +192,7 @@ GEM
     govuk_personalisation (1.0.0)
       plek (>= 1.9.0)
       rails (>= 6, < 8)
-    govuk_publishing_components (43.0.1)
+    govuk_publishing_components (43.1.0)
       govuk_app_config
       govuk_personalisation (>= 0.7.0)
       kramdown
@@ -275,7 +275,7 @@ GEM
       bigdecimal (~> 3.1)
     net-http (0.4.1)
       uri
-    net-imap (0.4.15)
+    net-imap (0.4.16)
       date
       net-protocol
     net-pop (0.1.2)
@@ -325,7 +325,7 @@ GEM
       tzinfo
       validate_url
       webfinger (~> 2.0)
-    opentelemetry-api (1.3.0)
+    opentelemetry-api (1.4.0)
     opentelemetry-common (0.21.0)
       opentelemetry-api (~> 1.0)
     opentelemetry-exporter-otlp (0.28.1)
@@ -647,8 +647,7 @@ GEM
       http-cookie (>= 1.0.2, < 2.0)
       mime-types (>= 1.16, < 4.0)
       netrc (~> 0.8)
-    rexml (3.3.6)
-      strscan
+    rexml (3.3.7)
     rouge (4.3.0)
     rspec (3.13.0)
       rspec-core (~> 3.13.0)
@@ -750,7 +749,6 @@ GEM
       sprockets (>= 3.0.0)
     statsd-ruby (1.5.0)
     stringio (3.1.1)
-    strscan (3.1.0)
     swd (2.0.3)
       activesupport (>= 3)
       attr_required (>= 0.0.5)