updates to gems to address vulnerabilities

.gitignore

@@ -5,4 +5,6 @@ _site/
 .DS_Store
 .vendor/
 vendor/
-.bundle/
+.bundle/
+node_modules
+assets/uswds/*

Gemfile

@@ -10,3 +10,4 @@ gem "html-proofer", "~> 3.19", ">= 3.19.4"
 gem "jekyll-redirect-from", ">= 0.16.0"
 gem "kramdown-parser-gfm", ">= 1.1.0"
 gem "jekyll-sitemap", ">= 1.4.0"
+gem 'rexml', '~> 3.3', '>= 3.3.8'

Gemfile.lock

@@ -1,21 +1,26 @@
 GEM
   remote: https://rubygems.org/
   specs:
-    addressable (2.8.6)
-      public_suffix (>= 2.0.2, < 6.0)
+    addressable (2.8.7)
+      public_suffix (>= 2.0.2, < 7.0)
+    bigdecimal (3.1.8)
     colorator (1.1.0)
-    concurrent-ruby (1.2.3)
+    concurrent-ruby (1.3.4)
     em-websocket (0.5.3)
       eventmachine (>= 0.12.9)
       http_parser.rb (~> 0)
     ethon (0.16.0)
       ffi (>= 1.15.0)
     eventmachine (1.2.7)
-    ffi (1.16.3)
+    ffi (1.17.0-arm64-darwin)
+    ffi (1.17.0-x86_64-darwin)
     forwardable-extended (2.6.0)
-    google-protobuf (3.25.5)
-    google-protobuf (3.25.5-x86_64-darwin)
-    google-protobuf (3.25.5-x86_64-linux)
+    google-protobuf (4.28.2-arm64-darwin)
+      bigdecimal
+      rake (>= 13)
+    google-protobuf (4.28.2-x86_64-darwin)
+      bigdecimal
+      rake (>= 13)
     html-proofer (3.19.4)
       addressable (~> 2.3)
       mercenary (~> 0.3)
@@ -25,9 +30,9 @@ GEM
       typhoeus (~> 1.3)
       yell (~> 2.0)
     http_parser.rb (0.8.0)
-    i18n (1.14.5)
+    i18n (1.14.6)
       concurrent-ruby (~> 1.0)
-    jekyll (4.3.3)
+    jekyll (4.3.4)
       addressable (~> 2.4)
       colorator (~> 1.0)
       em-websocket (~> 0.5)
@@ -60,46 +65,38 @@ GEM
       rb-fsevent (~> 0.10, >= 0.10.3)
       rb-inotify (~> 0.9, >= 0.9.10)
     mercenary (0.4.0)
-    mini_portile2 (2.8.1)
-    nokogiri (1.14.3)
-      mini_portile2 (~> 2.8.0)
+    nokogiri (1.16.7-arm64-darwin)
       racc (~> 1.4)
-    nokogiri (1.14.3-x86_64-darwin)
+    nokogiri (1.16.7-x86_64-darwin)
       racc (~> 1.4)
-    nokogiri (1.14.3-x86_64-linux)
-      racc (~> 1.4)
-    parallel (1.22.1)
+    parallel (1.26.3)
     pathutil (0.16.2)
       forwardable-extended (~> 2.6)
-    public_suffix (5.0.5)
-    racc (1.6.2)
+    public_suffix (6.0.1)
+    racc (1.8.1)
     rainbow (3.1.1)
     rake (13.2.1)
     rb-fsevent (0.11.2)
-    rb-inotify (0.10.1)
+    rb-inotify (0.11.1)
       ffi (~> 1.0)
-    rexml (3.2.8)
-      strscan (>= 3.0.9)
-    rouge (4.2.1)
+    rexml (3.3.8)
+    rouge (4.4.0)
     safe_yaml (1.0.5)
-    sass-embedded (1.54.6)
-      google-protobuf (~> 3.19)
-      rake (>= 10.0.0)
-    sass-embedded (1.54.6-x86_64-darwin)
-      google-protobuf (~> 3.19)
-    strscan (3.1.0)
+    sass-embedded (1.79.5-arm64-darwin)
+      google-protobuf (~> 4.27)
+    sass-embedded (1.79.5-x86_64-darwin)
+      google-protobuf (~> 4.27)
     terminal-table (3.0.2)
       unicode-display_width (>= 1.1.1, < 3)
-    typhoeus (1.4.0)
+    typhoeus (1.4.1)
       ethon (>= 0.9.0)
-    unicode-display_width (2.5.0)
+    unicode-display_width (2.6.0)
     webrick (1.8.2)
     yell (2.2.2)
 
 PLATFORMS
-  ruby
-  x86_64-darwin-21
-  x86_64-linux
+  arm64-darwin
+  x86_64-darwin
 
 DEPENDENCIES
   html-proofer (~> 3.19, >= 3.19.4)
@@ -108,6 +105,7 @@ DEPENDENCIES
   jekyll-sitemap (>= 1.4.0)
   kramdown-parser-gfm (>= 1.1.0)
   nokogiri (~> 1.14)
+  rexml (~> 3.3, >= 3.3.8)
 
 BUNDLED WITH
-   2.4.2
+   2.5.12