diff --git a/Gemfile b/Gemfile
index 0a851079286..4ff541bb874 100644
--- a/Gemfile
+++ b/Gemfile
@@ -3,7 +3,7 @@ git_source(:github) { |repo_name| "https://github.com/#{repo_name}.git" }
 
 ruby "~> #{File.read(File.join(__dir__, '.ruby-version')).strip}"
 
-gem 'rails', '~> 7.1.3'
+gem 'rails', '~> 7.1.3', '>= 7.1.3.4'
 
 gem 'ahoy_matey', '~> 3.0'
 gem 'aws-sdk-kms', '~> 1.4'
@@ -24,22 +24,22 @@ gem 'concurrent-ruby'
 gem 'connection_pool'
 gem 'csv'
 gem 'cssbundling-rails'
-gem 'devise', '~> 4.8'
+gem 'devise', '~> 4.9', '>= 4.9.4'
 gem 'dotiw', '>= 4.0.1'
 gem 'faraday', '~> 2'
 gem 'faker'
 gem 'faraday-retry'
 gem 'foundation_emails'
-gem 'good_job', '~> 3.0'
+gem 'good_job', '~> 3.21', '>= 3.21.2'
 gem 'http_accept_language'
 gem 'identity-hostdata', github: '18F/identity-hostdata', tag: 'v4.0.0'
 gem 'identity-logging', github: '18F/identity-logging', tag: 'v0.1.0'
 gem 'identity_validations', github: '18F/identity-validations', tag: 'v0.7.2'
-gem 'jsbundling-rails', '~> 1.1.2'
+gem 'jsbundling-rails', '~> 1.2.0'
 gem 'jwe'
 gem 'jwt'
-gem 'lograge', '>= 0.11.2'
-gem 'lookbook', '~> 2.2', require: false
+gem 'lograge', '>= 0.12.0'
+gem 'lookbook', '~> 2.2', '>= 2.2.1', require: false
 gem 'lru_redux'
 gem 'mail'
 gem 'msgpack', '~> 1.6'
@@ -53,7 +53,7 @@ gem 'pg'
 gem 'phonelib'
 gem 'premailer-rails', '>= 1.12.0'
 gem 'profanity_filter'
-gem 'propshaft'
+gem 'propshaft', '>= 0.8.0'
 gem 'rack', '>= 3.0'
 gem 'rack-attack', github: 'rack/rack-attack', ref: 'd9fedfae4f7f6409f33857763391f4e18a6d7467'
 gem 'rack-cors', '> 2.0.1', require: 'rack/cors'
@@ -70,14 +70,14 @@ gem 'ruby-saml'
 gem 'safe_target_blank', '>= 1.0.2'
 gem 'saml_idp', github: '18F/saml_idp', tag: '0.21.0-18f'
 gem 'scrypt'
-gem 'simple_form', '>= 5.0.2'
+gem 'simple_form', '>= 5.3.1'
 gem 'stringex', require: false
 gem 'strong_migrations', '>= 0.4.2'
 gem 'terminal-table', require: false
 # until a release includes https://github.com/hallelujah/valid_email/pull/126
 gem 'valid_email', '>= 0.1.3', github: 'hallelujah/valid_email', ref: '486b860'
 gem 'view_component', '~> 3.0'
-gem 'webauthn', '~> 2.5.2'
+gem 'webauthn', '~> 3.0.0'
 gem 'xmldsig', '~> 0.6'
 gem 'xmlenc', '~> 0.7', '>= 0.7.1'
 gem 'yard', require: false
@@ -100,7 +100,7 @@ group :development, :test do
   gem 'bullet', '~> 7.0'
   gem 'capybara-webmock', git: 'https://github.com/hashrocket/capybara-webmock.git', ref: 'd3f3b7c'
   gem 'erb_lint', '~> 0.4.0', require: false
-  gem 'i18n-tasks', '~> 1.0'
+  gem 'i18n-tasks', '~> 1.0', '>= 1.0.13'
   gem 'knapsack'
   gem 'listen'
   gem 'net-http-persistent', '~> 4.0.2', require: false
@@ -111,7 +111,7 @@ group :development, :test do
   gem 'pry-rails'
   gem 'psych'
   gem 'rspec', '~> 3.13.0'
-  gem 'rspec-rails', '~> 6.0'
+  gem 'rspec-rails', '~> 6.0', '>= 6.0.4'
   gem 'rubocop', '~> 1.62.0', require: false
   gem 'rubocop-performance', '~> 1.20.2', require: false
   gem 'rubocop-rails', '>= 2.5.2', require: false
@@ -125,7 +125,7 @@ group :test do
   gem 'simplecov-cobertura'
   gem 'simplecov_json_formatter'
   gem 'email_spec'
-  gem 'factory_bot_rails', '>= 6.2.0'
+  gem 'factory_bot_rails', '>= 6.3.0'
   gem 'rack_session_access', '>= 0.2.0'
   gem 'rack-test', '>= 1.1.0'
   gem 'rails-controller-testing', '>= 1.0.4'