CLDC-4068 Update vulnerable dependencies

Gemfile

@@ -71,6 +71,10 @@ gem "sidekiq"
 gem "sidekiq-cron"
 gem "unread"
 
+# Pinning versions to address vulnerabilities
+gem "nokogiri", "~> 1.18.9"
+gem "thor", "~> 1.4.0"
+
 group :development, :test do
   # Check gems for known vulnerabilities
   gem "bundler-audit"

Gemfile.lock

@@ -289,13 +289,13 @@ GEM
     net-smtp (0.5.1)
       net-protocol
     nio4r (2.7.4)
-    nokogiri (1.18.8-arm64-darwin)
+    nokogiri (1.18.9-arm64-darwin)
       racc (~> 1.4)
-    nokogiri (1.18.8-x86_64-darwin)
+    nokogiri (1.18.9-x86_64-darwin)
       racc (~> 1.4)
-    nokogiri (1.18.8-x86_64-linux-gnu)
+    nokogiri (1.18.9-x86_64-linux-gnu)
       racc (~> 1.4)
-    nokogiri (1.18.8-x86_64-linux-musl)
+    nokogiri (1.18.9-x86_64-linux-musl)
       racc (~> 1.4)
     notifications-ruby-client (6.0.0)
       jwt (>= 1.5, < 3)
@@ -498,7 +498,7 @@ GEM
     stimulus-rails (1.3.3)
       railties (>= 6.0.0)
     stringio (3.1.5)
-    thor (1.3.2)
+    thor (1.4.0)
     thread_safe (0.3.6)
     timecop (0.9.8)
     timeout (0.4.3)
@@ -572,6 +572,7 @@ DEPENDENCIES
   json-schema
   listen (~> 3.3)
   method_source (~> 1.1)
+  nokogiri (~> 1.18.9)
   notifications-ruby-client
   overcommit (>= 0.37.0)
   paper_trail (~> 15.2)
@@ -603,6 +604,7 @@ DEPENDENCIES
   sidekiq-cron
   simplecov
   stimulus-rails
+  thor (~> 1.4.0)
   timecop (~> 0.9.4)
   tzinfo-data
   uk_postcode