diff --git a/Gemfile b/Gemfile
index 83ccea3ad..a6f6dc54f 100644
--- a/Gemfile
+++ b/Gemfile
@@ -13,7 +13,7 @@ gem "cancancan"
 gem "devise", "~> 4.9.2"
 gem "devise_invitable", "~> 2.0.8"
 gem "devise_zxcvbn", "~> 6.0.0"
-gem "elasticsearch", "~> 8.9.0"
+gem "elasticsearch", "~> 8.12.2"
 gem "google-apis-drive_v3"
 gem "govuk_design_system_formbuilder"
 gem "httparty", "~> 0.21.0"
diff --git a/Gemfile.lock b/Gemfile.lock
index 7d83d2a8c..6dbc87c08 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -141,13 +141,13 @@ GEM
     diff-lcs (1.5.0)
     docile (1.4.0)
     e2mmap (0.1.0)
-    elastic-transport (8.2.2)
+    elastic-transport (8.3.2)
       faraday (< 3)
       multi_json
-    elasticsearch (8.9.0)
-      elastic-transport (~> 8)
-      elasticsearch-api (= 8.9.0)
-    elasticsearch-api (8.9.0)
+    elasticsearch (8.12.2)
+      elastic-transport (~> 8.3)
+      elasticsearch-api (= 8.12.2)
+    elasticsearch-api (8.12.2)
       multi_json
     encryptor (3.0.0)
     erb_lint (0.5.0)
@@ -165,12 +165,12 @@ GEM
       railties (>= 5.0.0)
     faker (3.2.1)
       i18n (>= 1.8.11, < 2)
-    faraday (2.7.10)
-      faraday-net_http (>= 2.0, < 3.1)
-      ruby2_keywords (>= 0.0.4)
+    faraday (2.9.0)
+      faraday-net_http (>= 2.0, < 3.2)
     faraday-multipart (1.0.4)
       multipart-post (~> 2)
-    faraday-net_http (3.0.2)
+    faraday-net_http (3.1.0)
+      net-http
     ffi (1.15.5)
     globalid (1.1.0)
       activesupport (>= 5.0)
@@ -242,6 +242,8 @@ GEM
     multi_xml (0.6.0)
     multipart-post (2.3.0)
     mysql2 (0.5.5)
+    net-http (0.4.1)
+      uri
     net-imap (0.3.7)
       date
       net-protocol
@@ -396,7 +398,6 @@ GEM
       rubocop-capybara (~> 2.17)
       rubocop-factory_bot (~> 2.22)
     ruby-progressbar (1.13.0)
-    ruby2_keywords (0.0.5)
     sassc (2.4.0)
       ffi (~> 1.9)
     sassc-rails (2.1.2)
@@ -472,6 +473,7 @@ GEM
     uk_postcode (2.1.8)
     unicode-display_width (2.4.2)
     uniform_notifier (1.16.0)
+    uri (0.13.0)
     warden (1.2.9)
       rack (>= 2.0.9)
     web-console (4.2.1)
@@ -517,7 +519,7 @@ DEPENDENCIES
   devise (~> 4.9.2)
   devise_invitable (~> 2.0.8)
   devise_zxcvbn (~> 6.0.0)
-  elasticsearch (~> 8.9.0)
+  elasticsearch (~> 8.12.2)
   erb_lint
   factory_bot_rails
   faker