diff --git a/Gemfile b/Gemfile
index 80ecf53e8e..2cdcf8ca19 100644
--- a/Gemfile
+++ b/Gemfile
@@ -66,7 +66,7 @@ gem 'ace-rails-ap', '~>4.5'
 gem 'autoprefixer-rails', '~>10.4.15'
 
 # saml authentication
-gem 'devise', '~>4.9.2'
+gem 'devise', '~>4.9.3'
 gem 'ruby-saml', '~> 1.15.0'
 
 # omniauth
diff --git a/Gemfile.lock b/Gemfile.lock
index 6a9e9f0661..3f92a20393 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -91,7 +91,7 @@ GEM
     autoprefixer-rails (10.4.15.0)
       execjs (~> 2)
     base64 (0.1.1)
-    bcrypt (3.1.18)
+    bcrypt (3.1.19)
     bcrypt_pbkdf (1.1.0)
     bigdecimal (3.1.4)
     bindata (2.4.15)
@@ -163,7 +163,7 @@ GEM
       delayed_job (> 2.0.3)
       rack-protection (>= 1.5.5)
       sinatra (>= 1.4.4)
-    devise (4.9.2)
+    devise (4.9.3)
       bcrypt (~> 3.0)
       orm_adapter (~> 0.1)
       railties (>= 4.1.0)
@@ -225,7 +225,7 @@ GEM
       mini_magick (>= 4.9.5, < 5)
       ruby-vips (>= 2.0.17, < 3)
     io-console (0.6.0)
-    irb (1.8.1)
+    irb (1.8.3)
       rdoc
       reline (>= 0.3.8)
     jbuilder (2.11.5)
@@ -260,7 +260,7 @@ GEM
     listen (3.8.0)
       rb-fsevent (~> 0.10, >= 0.10.3)
       rb-inotify (~> 0.9, >= 0.9.10)
-    loofah (2.21.3)
+    loofah (2.21.4)
       crass (~> 1.0.2)
       nokogiri (>= 1.12.0)
     mail (2.8.1)
@@ -358,7 +358,7 @@ GEM
       premailer (~> 1.7, >= 1.7.9)
     pretender (0.5.0)
       actionpack (>= 6.1)
-    psych (5.1.0)
+    psych (5.1.1.1)
       stringio
     public_suffix (5.0.3)
     puma (6.4.0)
@@ -432,7 +432,7 @@ GEM
     regexp_parser (2.8.1)
     reline (0.3.9)
       io-console (~> 0.5)
-    responders (3.1.0)
+    responders (3.1.1)
       actionpack (>= 5.2)
       railties (>= 5.2)
     rexml (3.2.6)
@@ -578,7 +578,7 @@ DEPENDENCIES
   ddtrace (~> 1.15.0)
   delayed_job_active_record (~> 4.1.7)
   delayed_job_web (~> 1.4.4)
-  devise (~> 4.9.2)
+  devise (~> 4.9.3)
   diff-lcs (~> 1.5)
   docker-api (~> 2.2.0)
   ed25519