diff --git a/Gemfile b/Gemfile
index a088b7a387..99304a43cb 100644
--- a/Gemfile
+++ b/Gemfile
@@ -185,7 +185,7 @@ gem 'acts_as_tenant'
 gem 'http_accept_language'
 
 # User authentication
-gem 'devise', '4.9.4'
+gem 'devise', '5.0.4'
 gem 'devise-multi_email'
 gem 'keycloak'
 gem 'jwt', '~> 2.10.3'
diff --git a/Gemfile.lock b/Gemfile.lock
index 34f9ab7033..d5a0e95ca2 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -211,10 +211,10 @@ GEM
       unicode (>= 0.4.4.5)
     csv (3.3.5)
     date (3.5.1)
-    devise (4.9.4)
+    devise (5.0.4)
       bcrypt (~> 3.0)
       orm_adapter (~> 0.1)
-      railties (>= 4.1.0)
+      railties (>= 7.0)
       responders
       warden (~> 1.2.3)
     devise-multi_email (3.1.6)
@@ -238,7 +238,7 @@ GEM
       htmlentities (~> 4.3)
       launchy (>= 2.1, < 4.0)
       mail (~> 2.7)
-    erb (6.0.6)
+    erb (6.0.7)
     erubi (1.13.1)
     et-orbi (1.2.11)
       tzinfo
@@ -314,7 +314,7 @@ GEM
     image_processing (1.14.0)
       mini_magick (>= 4.9.5, < 6)
       ruby-vips (>= 2.0.17, < 3)
-    io-console (0.8.2)
+    io-console (0.9.2)
     irb (1.18.0)
       pp (>= 0.6.0)
       prism (>= 1.3.0)
@@ -486,7 +486,7 @@ GEM
     rb-fsevent (0.11.2)
     rb-inotify (0.11.1)
       ffi (~> 1.0)
-    rbs (4.1.1)
+    rbs (4.1.3)
       logger
       prism (>= 1.6.0)
       tsort
@@ -503,7 +503,7 @@ GEM
     redis-client (0.28.0)
       connection_pool
     regexp_parser (2.12.0)
-    reline (0.6.3)
+    reline (0.7.0)
       io-console (~> 0.5)
     request_store (1.7.0)
       rack (>= 1.4)
@@ -651,7 +651,7 @@ GEM
       nokogiri (~> 1.8)
     yajl-ruby (1.4.3)
     yard (0.9.45)
-    zeitwerk (2.8.2)
+    zeitwerk (2.8.3)
 
 PLATFORMS
   ruby
@@ -677,7 +677,7 @@ DEPENDENCIES
   consistency_fail
   coursemology-polyglot!
   csv
-  devise (= 4.9.4)
+  devise (= 5.0.4)
   devise-multi_email
   docker-api
   docx