diff --git a/Gemfile.lock b/Gemfile.lock
index 2e58579c8..4d2884102 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -104,7 +104,7 @@ GEM
     execjs (2.7.0)
     faker (2.13.0)
       i18n (>= 1.6, < 2)
-    faraday (2.1.0)
+    faraday (2.2.0)
       faraday-net_http (~> 2.0)
       ruby2_keywords (>= 0.0.4)
     faraday-net_http (2.0.1)
@@ -128,12 +128,12 @@ GEM
     govuk_personalisation (0.11.2)
       plek (>= 1.9.0)
       rails (>= 6, < 8)
-    govuk_publishing_components (28.5.0)
+    govuk_publishing_components (28.6.0)
       govuk_app_config
       govuk_personalisation (>= 0.7.0)
       kramdown
       plek
-      rails (>= 6)
+      rails (~> 6)
       rouge
       sprockets (< 4)
     govuk_schemas (4.3.0)
@@ -150,7 +150,7 @@ GEM
     http-accept (1.7.0)
     http-cookie (1.0.4)
       domain_name (~> 0.5)
-    i18n (1.9.1)
+    i18n (1.10.0)
       concurrent-ruby (~> 1.0)
     i18n-coverage (0.2.0)
     i18n-tasks (0.9.37)
@@ -197,7 +197,7 @@ GEM
     mime-types-data (3.2022.0105)
     mini_magick (4.10.1)
     mini_mime (1.1.2)
-    mini_portile2 (2.7.1)
+    mini_portile2 (2.8.0)
     minitest (5.15.0)
     minitest-reporters (1.4.2)
       ansi
@@ -207,8 +207,8 @@ GEM
     mocha (1.11.2)
     netrc (0.11.0)
     nio4r (2.5.8)
-    nokogiri (1.13.1)
-      mini_portile2 (~> 2.7.0)
+    nokogiri (1.13.3)
+      mini_portile2 (~> 2.8.0)
       racc (~> 1.4)
     null_logger (0.0.1)
     parallel (1.21.0)
@@ -278,7 +278,7 @@ GEM
       netrc (~> 0.8)
     rexml (3.2.5)
     robotex (1.0.0)
-    rouge (3.27.0)
+    rouge (3.28.0)
     rubocop (1.25.0)
       parallel (~> 1.10)
       parser (>= 3.1.0.0)