diff --git a/Gemfile.lock b/Gemfile.lock
index aee601b34..a6e46d819 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -205,12 +205,20 @@ GEM
     fuzzyurl (0.2.2)
     globalid (1.2.1)
       activesupport (>= 6.1)
-    google-protobuf (3.25.3-aarch64-linux)
-    google-protobuf (3.25.3-arm64-darwin)
-    google-protobuf (3.25.3-x86_64-darwin)
-    google-protobuf (3.25.3-x86_64-linux)
-    googleapis-common-protos-types (1.14.0)
-      google-protobuf (~> 3.18)
+    google-protobuf (4.28.2-aarch64-linux)
+      bigdecimal
+      rake (>= 13)
+    google-protobuf (4.28.2-arm64-darwin)
+      bigdecimal
+      rake (>= 13)
+    google-protobuf (4.28.2-x86_64-darwin)
+      bigdecimal
+      rake (>= 13)
+    google-protobuf (4.28.2-x86_64-linux)
+      bigdecimal
+      rake (>= 13)
+    googleapis-common-protos-types (1.16.0)
+      google-protobuf (>= 3.18, < 5.a)
     hal_api-rails (1.2.2)
       activemodel
       activesupport
@@ -319,8 +327,8 @@ GEM
     opentelemetry-api (1.2.5)
     opentelemetry-common (0.21.0)
       opentelemetry-api (~> 1.0)
-    opentelemetry-exporter-otlp (0.26.3)
-      google-protobuf (~> 3.14)
+    opentelemetry-exporter-otlp (0.29.0)
+      google-protobuf (>= 3.18)
       googleapis-common-protos-types (~> 1.3)
       opentelemetry-api (~> 1.1)
       opentelemetry-common (~> 0.20)
@@ -548,7 +556,7 @@ GEM
     psych (5.1.2)
       stringio
     public_suffix (5.0.0)
-    puma (5.6.8)
+    puma (5.6.9)
       nio4r (~> 2.0)
     pundit (2.3.0)
       activesupport (>= 3.0.0)
@@ -617,8 +625,7 @@ GEM
     responders (3.0.1)
       actionpack (>= 5.0)
       railties (>= 5.0)
-    rexml (3.2.8)
-      strscan (>= 3.0.9)
+    rexml (3.3.8)
     roar (1.1.1)
       representable (~> 3.0)
     rubocop (1.44.1)
@@ -691,7 +698,6 @@ GEM
     stimulus-rails (1.2.1)
       railties (>= 6.0.0)
     stringio (3.1.1)
-    strscan (3.1.0)
     test_xml (0.1.8)
       diffy (~> 3.0)
       nokogiri (>= 1.3.2)