diff --git a/Gemfile b/Gemfile
index 98835cd1b..b2bfd7010 100644
--- a/Gemfile
+++ b/Gemfile
@@ -40,7 +40,7 @@ gem 'omniauth-rails_csrf_protection', '~> 1.0'
 gem 'omniauth-saml', '~> 2.2'
 
 # Authorization
-gem 'pundit', '2.4.0'
+gem 'pundit', '2.5.0'
 
 # Background tasks
 gem 'sidekiq', '~> 7.3'
diff --git a/Gemfile.lock b/Gemfile.lock
index afaf06a31..4288a49da 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -355,7 +355,7 @@ GEM
       logger
     mini_mime (1.1.5)
     mini_portile2 (2.8.8)
-    minitest (5.25.4)
+    minitest (5.25.5)
     minitest-retry (0.2.5)
       minitest (>= 5.0)
     msgpack (1.7.2)
@@ -413,7 +413,7 @@ GEM
     public_suffix (6.0.1)
     puma (6.6.0)
       nio4r (~> 2.0)
-    pundit (2.4.0)
+    pundit (2.5.0)
       activesupport (>= 3.0.0)
     raabro (1.4.0)
     racc (1.8.1)
@@ -696,7 +696,7 @@ DEPENDENCIES
   paper_trail (~> 16.0.0)
   pg (~> 1.5.9)
   puma (~> 6.6)
-  pundit (= 2.4.0)
+  pundit (= 2.5.0)
   rails (~> 7.1.3)
   ransack (= 4.3.0)
   rdf (~> 3.3.2)