chore: resolve open dependabot security alerts

[jonathannorris]

Summary

• Bumped erb from 6.0.2 to 6.0.4 to resolve a high-severity vulnerability (alert [CI/CD] Use reusable workflow #13): ERB has an @_init deserialization guard bypass via def_module / def_method / def_class
• Bumped Bundler (BUNDLED WITH) from 4.0.6 to 4.0.12 to fix the failing Ruby head CI job

Notes

The Ruby head matrix job was failing with NameError: uninitialized constant Pathname::SEPARATOR_PAT during bundle install. This is an upstream incompatibility, not a problem in this repo: Pathname::SEPARATOR_PAT was an internal constant accidentally left public, and Ruby 4.1-dev (ruby-head) made it private, which broke Bundler 4.0.6's Source::Path#generate_bin. Fixed upstream in ruby/rubygems#9529 and shipped in Bundler 4.0.12, so the lockfile just needed the bump.

Verified locally on Ruby 4.0.5 / Bundler 4.0.12: bundle install, bundle exec rspec (420 examples, 0 failures), and bundle exec standardrb all pass.

[gemini-code-assist]

Code Review

This pull request updates the erb gem version from 6.0.2 to 6.0.4 in the Gemfile.lock. I have no feedback to provide as there are no review comments.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 99.50%. Comparing base (0e986fd) to head (d49a1de).

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #281   +/-   ##
=======================================
  Coverage   99.50%   99.50%           
=======================================
  Files          31       31           
  Lines         808      808           
=======================================
  Hits          804      804           
  Misses          4        4           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[Copilot]

Copilot wasn't able to review any files in this pull request.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[coderabbitai]

Important

Review skipped

Review was skipped due to path filters

⛔ Files ignored due to path filters (1)

• Gemfile.lock is excluded by !**/*.lock

CodeRabbit blocks several paths by default. You can override this behavior by explicitly including those paths in the path filters. For example, including **/dist/** will override the default block on the dist directory, by removing the pattern from both the lists.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: cbfdf54d-0171-4881-b64e-c66156d16b9d

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

_{Comment @coderabbitai help to get the list of available commands.}