Upgrade Ruby to 3.4.9 and drop resolved CVE ignores

.github/workflows/ci.yml

@@ -34,9 +34,9 @@ jobs:
       - name: Security audit dependencies
         run: bundle exec bundler-audit --update --ignore CVE-2024-21510 CVE-2025-61921
       - name: Security audit ruby
-        # These ignores can be removed once the Ruby version is upgraded (>= 3.4.8 for the
-        # 2025 CVEs; >= 4.0.3 for CVE-2026-41316, whose bundled erb we already override).
-        run: bundle exec ruby-audit update && bundle exec ruby-audit check --ignore CVE-2025-61594 CVE-2025-58767 CVE-2026-41316
+        # This ignore can be removed once the Ruby version is upgraded to >= 4.0.3 for
+        # CVE-2026-41316, whose bundled erb we already override.
+        run: bundle exec ruby-audit update && bundle exec ruby-audit check --ignore CVE-2026-41316
       - name: Security audit application code
         run: bundle exec brakeman -q -w2
       - name: Lint changed files

.ruby-version

@@ -1 +1 @@
-3.4.6
+3.4.9

CHANGELOG

@@ -32,7 +32,8 @@
 v5.1.0 (May 2026)
   - DataTables: add sticky table toolbar that tracks below the navigation bar when scrolling
   - Mail: add support for SMTP configuration via environment variables for Docker deployments; smtp.yml remains supported for VM deployments during the deprecation transition
-  - Show don't gate: 
+  - Ruby: Upgrade Ruby version to 3.4.9
+  - Show don't gate:
     - Node-level Methodologies
     - Projects
   - Upgraded gems:

Gemfile

@@ -2,7 +2,7 @@ source 'https://rubygems.org'
 
 git_source(:github) { |repo| "https://github.com/#{repo}.git" }
 
-ruby '3.4.6'
+ruby '3.4.9'
 
 # Bundle edge Rails instead: gem 'rails', github: 'rails/rails'
 gem 'rails', '~> 8.0.5'

Gemfile.lock

@@ -708,7 +708,7 @@ DEPENDENCIES
   whenever
 
 RUBY VERSION
-   ruby 3.4.6p54
+   ruby 3.4.9p82
 
 BUNDLED WITH
    2.3.16