diff --git a/updater/Gemfile b/updater/Gemfile
index 0cb6d908..4b054862 100644
--- a/updater/Gemfile
+++ b/updater/Gemfile
@@ -13,7 +13,7 @@ gem "dependabot-omnibus", "~>0.242.1"
 # gem "dependabot-omnibus", github: "dependabot/dependabot-core", tag: "v0.232.0"
 # gem "dependabot-omnibus", github: "dependabot/dependabot-core", ref: "ffde6f6"
 
-gem "http", "~> 5.1"
+gem "http", "~> 5.2"
 gem "octokit", "6.1.1"
 gem "opentelemetry-exporter-otlp", "~> 0.26"
 gem "opentelemetry-instrumentation-excon", "~> 0.22"
diff --git a/updater/Gemfile.lock b/updater/Gemfile.lock
index e2ac3848..9d576732 100644
--- a/updater/Gemfile.lock
+++ b/updater/Gemfile.lock
@@ -114,7 +114,7 @@ GEM
     faraday-net_http (3.0.2)
     faraday-retry (2.2.0)
       faraday (~> 2.0)
-    ffi (1.15.5)
+    ffi (1.16.3)
     ffi-compiler (1.0.1)
       ffi (>= 1.0.0)
       rake
@@ -127,11 +127,12 @@ GEM
     googleapis-common-protos-types (1.11.0)
       google-protobuf (~> 3.18)
     hashdiff (1.0.1)
-    http (5.1.1)
+    http (5.2.0)
       addressable (~> 2.8)
+      base64 (~> 0.1)
       http-cookie (~> 1.0)
       http-form_data (~> 2.2)
-      llhttp-ffi (~> 0.4.0)
+      llhttp-ffi (~> 0.5.0)
     http-accept (1.7.0)
     http-cookie (1.0.5)
       domain_name (~> 0.5)
@@ -142,7 +143,7 @@ GEM
     jmespath (1.6.2)
     json (2.6.3)
     language_server-protocol (3.17.0.3)
-    llhttp-ffi (0.4.0)
+    llhttp-ffi (0.5.0)
       ffi-compiler (~> 1.0)
       rake (~> 13.0)
     mime-types (3.5.2)
@@ -207,7 +208,7 @@ GEM
     public_suffix (5.0.4)
     racc (1.7.3)
     rainbow (3.1.1)
-    rake (13.0.6)
+    rake (13.1.0)
     regexp_parser (2.9.0)
     rest-client (2.1.0)
       http-accept (>= 1.7.0, < 2.0)
@@ -273,7 +274,7 @@ PLATFORMS
 
 DEPENDENCIES
   dependabot-omnibus (~> 0.242.1)
-  http (~> 5.1)
+  http (~> 5.2)
   octokit (= 6.1.1)
   opentelemetry-exporter-otlp (~> 0.26)
   opentelemetry-instrumentation-excon (~> 0.22)