diff --git a/backend/Gemfile b/backend/Gemfile
index b10c380f..2951a450 100644
--- a/backend/Gemfile
+++ b/backend/Gemfile
@@ -23,12 +23,12 @@ gem "mongoid", "9.0.11" # https://www.mongodb.com/docs/mongoid/current/reference
 gem "pg"
 
 # Use Puma as the app server
-gem "puma", "~> 6.6"
+gem "puma", "~> 7.2"
 
 # Authentication libraries
 gem "cancancan", "~> 3.6.1"
 gem "cancancan-mongoid", "~> 2.0"
-gem "devise", "~> 4.8"
+gem "devise", "~> 5.0"
 gem "devise_invitable", "~> 2.0"
 gem "omniauth", "~> 1.8"
 gem "omniauth-facebook", "~> 3.0"
@@ -66,7 +66,7 @@ gem "ruby-progressbar", require: false
 
 gem "kaminari-actionview"
 gem "kaminari-mongoid"
-gem "rack-cors", "2.0.1", require: "rack/cors" # freezing to gemfile.lock version because heroku is not respecting lockfile
+gem "rack-cors", "2.0.2", require: "rack/cors" # freezing to gemfile.lock version because heroku is not respecting lockfile
 gem "simplecov", require: false, group: :test
 
 group :development, :test do
diff --git a/backend/Gemfile.lock b/backend/Gemfile.lock
index ef1fbeca..84c7b47d 100644
--- a/backend/Gemfile.lock
+++ b/backend/Gemfile.lock
@@ -77,8 +77,8 @@ GEM
       minitest (>= 5.1, < 6)
       securerandom (>= 0.3)
       tzinfo (~> 2.0, >= 2.0.5)
-    addressable (2.8.7)
-      public_suffix (>= 2.0.2, < 7.0)
+    addressable (2.9.0)
+      public_suffix (>= 2.0.2, < 8.0)
     andand (1.3.3)
     annotate (3.2.0)
       activerecord (>= 3.2, < 8.0)
@@ -86,7 +86,7 @@ GEM
     ast (2.4.2)
     awesome_print (1.9.2)
     base64 (0.3.0)
-    bcrypt (3.1.20)
+    bcrypt (3.1.22)
     benchmark (0.5.0)
     better_errors (2.10.1)
       erubi (>= 1.0.0)
@@ -137,9 +137,9 @@ GEM
       rexml
     crass (1.0.7)
     csv (3.3.0)
-    cuprite (0.15)
+    cuprite (0.18)
       capybara (~> 3.0)
-      ferrum (~> 0.14.0)
+      ferrum (~> 0.18.0)
     database_cleaner (2.1.0)
       database_cleaner-active_record (>= 2, < 3)
     database_cleaner-active_record (2.2.2)
@@ -152,10 +152,10 @@ GEM
     date (3.5.1)
     descendants_tracker (0.0.4)
       thread_safe (~> 0.3, >= 0.3.1)
-    devise (4.9.4)
+    devise (5.0.4)
       bcrypt (~> 3.0)
       orm_adapter (~> 0.1)
-      railties (>= 4.1.0)
+      railties (>= 7.0)
       responders
       warden (~> 1.2.3)
     devise_invitable (2.0.11)
@@ -181,30 +181,34 @@ GEM
     factory_bot_rails (6.4.3)
       factory_bot (~> 6.4)
       railties (>= 5.0.0)
-    faraday (1.8.0)
+    faraday (1.10.6)
       faraday-em_http (~> 1.0)
       faraday-em_synchrony (~> 1.0)
       faraday-excon (~> 1.1)
-      faraday-httpclient (~> 1.0.1)
+      faraday-httpclient (~> 1.0)
+      faraday-multipart (~> 1.0)
       faraday-net_http (~> 1.0)
-      faraday-net_http_persistent (~> 1.1)
+      faraday-net_http_persistent (~> 1.0)
       faraday-patron (~> 1.0)
       faraday-rack (~> 1.0)
-      multipart-post (>= 1.2, < 3)
+      faraday-retry (~> 1.0)
       ruby2_keywords (>= 0.0.4)
     faraday-em_http (1.0.0)
-    faraday-em_synchrony (1.0.0)
+    faraday-em_synchrony (1.0.1)
     faraday-excon (1.1.0)
     faraday-httpclient (1.0.1)
-    faraday-net_http (1.0.1)
+    faraday-multipart (1.2.0)
+      multipart-post (~> 2.0)
+    faraday-net_http (1.0.2)
     faraday-net_http_persistent (1.2.0)
     faraday-patron (1.0.0)
     faraday-rack (1.0.0)
-    ferrum (0.14)
+    faraday-retry (1.0.4)
+    ferrum (0.18.0)
       addressable (~> 2.5)
+      base64 (~> 0.2)
       concurrent-ruby (~> 1.1)
-      webrick (~> 1.7)
-      websocket-driver (>= 0.6, < 0.8)
+      websocket-driver (~> 0.7)
     ffaker (2.23.0)
     foreman (0.88.1)
     geocoder (1.8.3)
@@ -230,7 +234,8 @@ GEM
       rdoc (>= 4.0.0)
       reline (>= 0.4.2)
     json (2.7.1)
-    jwt (2.3.0)
+    jwt (2.10.3)
+      base64
     kaminari-actionview (1.2.2)
       actionview
       kaminari-core (= 1.2.2)
@@ -277,7 +282,7 @@ GEM
       mongoid-compatibility (>= 0.5.1)
     multi_json (1.15.0)
     multi_xml (0.6.0)
-    multipart-post (2.1.1)
+    multipart-post (2.4.1)
     nearest_time_zone (0.0.4)
       andand
       kdtree
@@ -331,8 +336,8 @@ GEM
       yard (~> 0.9.11)
     pry-rails (0.3.11)
       pry (>= 0.13.0)
-    public_suffix (6.0.2)
-    puma (6.6.1)
+    public_suffix (7.0.5)
+    puma (7.2.1)
       nio4r (~> 2.0)
     pusher (2.0.3)
       httpclient (~> 2.8)
@@ -341,7 +346,7 @@ GEM
     pusher-signature (0.1.8)
     racc (1.8.1)
     rack (2.2.24)
-    rack-cors (2.0.1)
+    rack-cors (2.0.2)
       rack (>= 2.0.0)
     rack-session (1.0.2)
       rack (< 3)
@@ -401,7 +406,7 @@ GEM
     request_store (1.7.0)
       rack (>= 1.4)
     require_all (3.0.0)
-    responders (3.2.0)
+    responders (3.2.1)
       actionpack (>= 7.0)
       railties (>= 7.0)
     rexml (3.4.4)
@@ -498,13 +503,13 @@ GEM
       crack (>= 0.3.2)
       hashdiff (>= 0.4.0, < 2.0.0)
     webrick (1.9.2)
-    websocket-driver (0.7.7)
+    websocket-driver (0.8.2)
       base64
       websocket-extensions (>= 0.1.0)
     websocket-extensions (0.1.5)
     xpath (3.2.0)
       nokogiri (~> 1.8)
-    yard (0.9.36)
+    yard (0.9.44)
     zeitwerk (2.8.3)
 
 PLATFORMS
@@ -527,7 +532,7 @@ DEPENDENCIES
   cuprite
   database_cleaner
   database_cleaner-mongoid
-  devise (~> 4.8)
+  devise (~> 5.0)
   devise_invitable (~> 2.0)
   dotenv-rails
   erb_lint (~> 0.5.0)
@@ -548,9 +553,9 @@ DEPENDENCIES
   pry-byebug
   pry-doc
   pry-rails
-  puma (~> 6.6)
+  puma (~> 7.2)
   pusher
-  rack-cors (= 2.0.1)
+  rack-cors (= 2.0.2)
   rack-timeout
   rails (~> 7.2.0, >= 7.2.3.2)
   rake