diff --git a/Gemfile b/Gemfile
index 525929f9..9e29e60f 100644
--- a/Gemfile
+++ b/Gemfile
@@ -41,7 +41,7 @@ gem 'rails-html-sanitizer', '>= 1.4.4'
 gem 'parallel', require: false
 
 # use puma server
-gem 'puma', '~> 4.3', '>= 4.3.12'
+gem 'puma', '~> 5.6', '>= 5.6.9'
 
 # enable cors
 gem 'rack-cors'
diff --git a/Gemfile.lock b/Gemfile.lock
index b1cdbee0..b3b04b4d 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -208,7 +208,7 @@ GEM
       digest
       net-protocol
       timeout
-    nio4r (2.5.8)
+    nio4r (2.7.3)
     nokogiri (1.13.10)
       mini_portile2 (~> 2.8.0)
       racc (~> 1.4)
@@ -229,7 +229,7 @@ GEM
     pry-rails (0.3.9)
       pry (>= 0.10.4)
     public_suffix (4.0.6)
-    puma (4.3.12)
+    puma (5.6.9)
       nio4r (~> 2.0)
     racc (1.6.1)
     rack (2.2.3)
@@ -405,7 +405,7 @@ DEPENDENCIES
   pg (>= 0.18, < 2.0)
   pre-commit
   pry-rails
-  puma (~> 4.3, >= 4.3.12)
+  puma (~> 5.6, >= 5.6.9)
   rack-brotli
   rack-cors
   rails (~> 7.0.2, >= 7.0.2.3)
@@ -428,4 +428,4 @@ RUBY VERSION
    ruby 3.1.0p0
 
 BUNDLED WITH
-   2.3.3
+   2.3.26