diff --git a/.config/.ruby-version b/.config/.ruby-version
index bea438e9..d13e837c 100644
--- a/.config/.ruby-version
+++ b/.config/.ruby-version
@@ -1 +1 @@
-3.3.1
+4.0.6
diff --git a/.github/workflows/semgrep.yml b/.github/workflows/semgrep.yml
index fb01e58a..d26250e4 100644
--- a/.github/workflows/semgrep.yml
+++ b/.github/workflows/semgrep.yml
@@ -12,11 +12,11 @@ name: Semgrep
 jobs:
   semgrep:
     name: Scan
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     env:
       SEMGREP_APP_TOKEN: ${{ secrets.SEMGREP_APP_TOKEN }}
     container:
       image: returntocorp/semgrep@sha256:18fcd539c83a1e8a3df78e77dddce457511f25dc2bd92b6e3bf999f51ab425d3 # latest
     steps:
-      - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - run: semgrep ci
diff --git a/.ruby-version b/.ruby-version
index bea438e9..d13e837c 100644
--- a/.ruby-version
+++ b/.ruby-version
@@ -1 +1 @@
-3.3.1
+4.0.6
diff --git a/Gemfile b/Gemfile
index 8f9992c5..33cc7b6a 100644
--- a/Gemfile
+++ b/Gemfile
@@ -2,7 +2,7 @@
 
 source "https://rubygems.org"
 
-gem "github-linguist", "~> 7.28"
+gem "github-linguist", "~> 9.0"
 
 gem "jekyll", "~> 4.3.0"
 gem 'kramdown-parser-gfm', '~> 1.1'
diff --git a/Gemfile.lock b/Gemfile.lock
index d72a1b3b..c961098b 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -3,8 +3,8 @@ GEM
   specs:
     addressable (2.8.6)
       public_suffix (>= 2.0.2, < 6.0)
-    cgi (0.4.1)
-    charlock_holmes (0.7.7)
+    cgi (0.5.2)
+    charlock_holmes (0.7.9)
     colorator (1.1.0)
     concurrent-ruby (1.2.3)
     dotenv (3.1.2)
@@ -14,7 +14,7 @@ GEM
     eventmachine (1.2.7)
     ffi (1.16.3)
     forwardable-extended (2.6.0)
-    github-linguist (7.29.0)
+    github-linguist (9.7.0)
       cgi
       charlock_holmes (~> 0.7.7)
       mini_mime (~> 1.0)
@@ -70,7 +70,7 @@ GEM
     rexml (3.2.8)
       strscan (>= 3.0.9)
     rouge (4.2.1)
-    rugged (1.7.2)
+    rugged (1.9.6)
     safe_yaml (1.0.5)
     sass-embedded (1.77.2-aarch64-linux-gnu)
       google-protobuf (>= 3.25, < 5.0)
@@ -89,7 +89,7 @@ PLATFORMS
 
 DEPENDENCIES
   dotenv
-  github-linguist (~> 7.28)
+  github-linguist (~> 9.0)
   jekyll (~> 4.3.0)
   jekyll-redirect-from
   jekyll-relative-links