diff --git a/Gemfile b/Gemfile
index c62b4d44e..9c8b5932d 100644
--- a/Gemfile
+++ b/Gemfile
@@ -18,7 +18,7 @@ gem "cocoon", "~> 1.2.15"
 gem "daemons", "~> 1.4.1"
 gem "dalli", "~> 3.2.8"
 gem "delayed_job_active_record", "~> 4.1.8"
-gem "devise", "~> 4.9.3"
+gem "devise", "~> 4.9.4"
 gem "devise-security", "~> 0.18.0"
 gem "exiftool_vendored", "~> 12.80.0"
 gem "file_validators", "~> 3.0.0"
diff --git a/Gemfile.lock b/Gemfile.lock
index 049933dc9..663f1a29c 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -182,7 +182,7 @@ GEM
       activerecord (>= 3.0, < 8.0)
       delayed_job (>= 3.0, < 5)
     device_detector (1.1.2)
-    devise (4.9.3)
+    devise (4.9.4)
       bcrypt (~> 3.0)
       orm_adapter (~> 0.1)
       railties (>= 4.1.0)
@@ -640,7 +640,7 @@ GEM
       unicode-display_width (>= 1.1.1, < 3)
     terrapin (0.6.0)
       climate_control (>= 0.0.3, < 1.0)
-    thor (1.3.1)
+    thor (1.3.2)
     tilt (2.0.10)
     timeout (0.4.1)
     tomlrb (2.0.3)
@@ -688,7 +688,7 @@ GEM
     wkhtmltopdf-binary (0.12.6.6)
     xpath (3.2.0)
       nokogiri (~> 1.8)
-    zeitwerk (2.6.16)
+    zeitwerk (2.6.18)
 
 PLATFORMS
   ruby
@@ -719,7 +719,7 @@ DEPENDENCIES
   dalli (~> 3.2.8)
   debug (~> 1.9.2)
   delayed_job_active_record (~> 4.1.8)
-  devise (~> 4.9.3)
+  devise (~> 4.9.4)
   devise-security (~> 0.18.0)
   email_spec (~> 2.3.0)
   erb_lint (~> 0.6.0)