diff --git a/Gemfile.lock b/Gemfile.lock
index d75634b4..1d265f09 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -179,8 +179,8 @@ GEM
       rake (>= 13)
     googleapis-common-protos-types (1.16.0)
       google-protobuf (>= 3.18, < 5.a)
-    govspeak (8.8.2)
-      actionview (>= 6, < 7.2.3)
+    govspeak (8.8.3)
+      actionview (>= 6, < 8.0.2)
       addressable (>= 2.3.8, < 2.8.8)
       govuk_publishing_components (>= 35.1)
       htmlentities (~> 4)
@@ -188,7 +188,7 @@ GEM
       kramdown (>= 2.3.1, < 2.5.2)
       nokogiri (~> 1.12)
       rinku (~> 2.0)
-      sanitize (~> 6)
+      sanitize (>= 6, < 8)
     govuk_admin_template (7.0.0)
       bootstrap-sass (~> 3.4)
       jquery-rails (~> 4.3)
@@ -300,7 +300,7 @@ GEM
     multi_xml (0.6.0)
     net-http (0.4.1)
       uri
-    net-imap (0.5.4)
+    net-imap (0.5.5)
       date
       net-protocol
     net-pop (0.1.2)
@@ -568,7 +568,8 @@ GEM
       rack (>= 3.0.0, < 4)
     rack-proxy (0.7.7)
       rack
-    rack-session (2.0.0)
+    rack-session (2.1.0)
+      base64 (>= 0.1.0)
       rack (>= 3.0.0)
     rack-test (2.2.0)
       rack (>= 1.3)
@@ -674,9 +675,9 @@ GEM
       rubocop (~> 1.61)
     ruby-progressbar (1.13.0)
     rubyzip (2.3.2)
-    sanitize (6.1.3)
+    sanitize (7.0.0)
       crass (~> 1.0.2)
-      nokogiri (>= 1.12.0)
+      nokogiri (>= 1.16.8)
     sass-embedded (1.77.8)
       google-protobuf (~> 4.26)
       rake (>= 13)
@@ -742,7 +743,8 @@ GEM
       hashdiff (>= 0.4.0, < 2.0.0)
     webrick (1.9.1)
     websocket (1.2.10)
-    websocket-driver (0.7.6)
+    websocket-driver (0.7.7)
+      base64
       websocket-extensions (>= 0.1.0)
     websocket-extensions (0.1.5)
     xpath (3.2.0)