diff --git a/Gemfile b/Gemfile
index 5ca89ff3a..31759fba1 100644
--- a/Gemfile
+++ b/Gemfile
@@ -47,7 +47,7 @@ group :development, :test do
   # net-smtp was removed from default gems in Ruby 3.1, but is used by the `mail` gem.
   # So we need to add it as a dependency until `mail` is fixed:
   # https://github.com/rails/rails/blob/0919aa97260ab8240150278d3b07a1547489e3fd/Gemfile#L178-L191
-  gem "net-smtp", "0.4.0", require: false
+  gem "net-smtp", "0.5.0", require: false
 end
 
 group :test do
diff --git a/Gemfile.lock b/Gemfile.lock
index dc1d9350c..9e7508431 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -14,7 +14,7 @@ PATH
       parallel (>= 1.21.0)
       rbi (>= 0.1.4, < 0.2)
       sorbet-static-and-runtime (>= 0.5.10187)
-      spoom (~> 1.2.0, >= 1.2.0)
+      spoom (>= 1.2, < 1.4)
       thor (>= 1.2.0)
       yard-sorbet
 
@@ -80,9 +80,9 @@ GEM
     activerecord (7.0.8)
       activemodel (= 7.0.8)
       activesupport (= 7.0.8)
-    activerecord-typedstore (1.5.1)
+    activerecord-typedstore (1.6.0)
       activerecord (>= 6.1)
-    activeresource (6.0.0)
+    activeresource (6.1.0)
       activemodel (>= 6.0)
       activemodel-serializers-xml (~> 1.0)
       activesupport (>= 6.0)
@@ -98,29 +98,31 @@ GEM
       i18n (>= 1.6, < 2)
       minitest (>= 5.1)
       tzinfo (~> 2.0)
-    addressable (2.8.5)
+    addressable (2.8.6)
       public_suffix (>= 2.0.2, < 6.0)
     ansi (1.5.0)
     ar_transaction_changes (1.1.9)
       activerecord (>= 5.2.0)
     ast (2.4.2)
-    base64 (0.1.1)
-    bcrypt (3.1.19)
+    base64 (0.2.0)
+    bcrypt (3.1.20)
+    bigdecimal (3.1.7)
     builder (3.2.4)
     byebug (11.1.3)
     coderay (1.1.3)
-    concurrent-ruby (1.2.2)
+    concurrent-ruby (1.2.3)
     config (4.2.1)
       deep_merge (~> 1.2, >= 1.2.1)
       dry-validation (~> 1.0, >= 1.0.0)
     connection_pool (2.4.1)
-    crack (0.4.5)
+    crack (1.0.0)
+      bigdecimal
       rexml
     crass (1.0.6)
     date (3.3.3)
-    debug (1.8.0)
-      irb (>= 1.5.0)
-      reline (>= 0.3.1)
+    debug (1.9.2)
+      irb (~> 1.10)
+      reline (>= 0.3.8)
     deep_merge (1.2.2)
     dry-configurable (1.0.1)
       dry-core (~> 1.0, < 2)
@@ -180,26 +182,27 @@ GEM
     faraday-retry (1.0.3)
     faraday_middleware (1.2.0)
       faraday (~> 1.0)
-    frozen_record (0.27.0)
+    frozen_record (0.27.1)
       activemodel
     globalid (1.2.1)
       activesupport (>= 6.1)
     google-protobuf (3.24.4-arm64-darwin)
     google-protobuf (3.24.4-x86_64-darwin)
     google-protobuf (3.24.4-x86_64-linux)
-    graphql (2.1.5)
-      racc (~> 1.4)
-    hashdiff (1.0.1)
-    i18n (1.14.1)
+    graphql (2.3.0)
+      base64
+    hashdiff (1.1.0)
+    i18n (1.14.4)
       concurrent-ruby (~> 1.0)
-    identity_cache (1.4.1)
-      activerecord (>= 5.2)
+    identity_cache (1.5.6)
+      activerecord (>= 7.0)
       ar_transaction_changes (~> 1.1)
-    io-console (0.6.0)
-    irb (1.6.4)
-      reline (>= 0.3.0)
-    json (2.6.3)
-    json_api_client (1.21.1)
+    io-console (0.7.2)
+    irb (1.12.0)
+      rdoc
+      reline (>= 0.4.2)
+    json (2.7.2)
+    json_api_client (1.22.0)
       activemodel (>= 3.2.0)
       activesupport (>= 3.2.0)
       addressable (~> 2.2)
@@ -208,7 +211,7 @@ GEM
       rack (>= 0.2)
     kramdown (2.4.0)
       rexml
-    kredis (1.5.0)
+    kredis (1.7.0)
       activemodel (>= 6.0.0)
       activesupport (>= 6.0.0)
       redis (>= 4.2, < 6)
@@ -224,7 +227,7 @@ GEM
     marcel (1.0.2)
     method_source (1.0.0)
     mini_mime (1.1.5)
-    minitest (5.20.0)
+    minitest (5.22.3)
     minitest-hooks (1.5.1)
       minitest (> 5.3)
     minitest-reporters (1.6.1)
@@ -232,39 +235,40 @@ GEM
       builder
       minitest (>= 5.0)
       ruby-progressbar
-    multipart-post (2.3.0)
+    multipart-post (2.4.0)
     net-imap (0.3.7)
       date
       net-protocol
     net-pop (0.1.2)
       net-protocol
-    net-protocol (0.2.1)
+    net-protocol (0.2.2)
       timeout
-    net-smtp (0.4.0)
+    net-smtp (0.5.0)
       net-protocol
     netrc (0.11.0)
     nio4r (2.5.9)
-    nokogiri (1.15.4-arm64-darwin)
+    nokogiri (1.16.3-arm64-darwin)
       racc (~> 1.4)
-    nokogiri (1.15.4-x86_64-darwin)
+    nokogiri (1.16.3-x86_64-darwin)
       racc (~> 1.4)
-    nokogiri (1.15.4-x86_64-linux)
+    nokogiri (1.16.3-x86_64-linux)
       racc (~> 1.4)
-    parallel (1.23.0)
-    parser (3.2.2.3)
+    parallel (1.24.0)
+    parser (3.3.0.5)
       ast (~> 2.4.1)
       racc
-    prettier_print (1.2.1)
-    prism (0.17.1)
+    prism (0.24.0)
     pry (0.14.2)
       coderay (~> 1.1)
       method_source (~> 1.0)
     pry-byebug (3.10.1)
       byebug (~> 11.0)
       pry (>= 0.13, < 0.15)
-    public_suffix (5.0.3)
-    racc (1.7.1)
-    rack (2.2.8)
+    psych (5.1.2)
+      stringio
+    public_suffix (5.0.5)
+    racc (1.7.3)
+    rack (2.2.9)
     rack-test (2.1.0)
       rack (>= 1.3)
     rails (7.0.8)
@@ -296,81 +300,84 @@ GEM
       thor (~> 1.0)
       zeitwerk (~> 2.5)
     rainbow (3.1.1)
-    rake (13.0.6)
-    rbi (0.1.4)
-      prism (>= 0.17.1, < 0.18)
+    rake (13.2.1)
+    rbi (0.1.10)
+      prism (>= 0.18.0, < 0.25)
       sorbet-runtime (>= 0.5.9204)
-    redis (5.0.6)
-      redis-client (>= 0.9.0)
-    redis-client (0.17.0)
+    rdoc (6.6.3.1)
+      psych (>= 4.0.0)
+    redis (5.1.0)
+      redis-client (>= 0.17.0)
+    redis-client (0.21.1)
       connection_pool
-    regexp_parser (2.8.1)
-    reline (0.3.3)
+    regexp_parser (2.9.0)
+    reline (0.5.0)
       io-console (~> 0.5)
     rexml (3.2.6)
-    rubocop (1.56.3)
-      base64 (~> 0.1.1)
+    rubocop (1.63.0)
       json (~> 2.3)
       language_server-protocol (>= 3.17.0)
       parallel (~> 1.10)
-      parser (>= 3.2.2.3)
+      parser (>= 3.3.0.2)
       rainbow (>= 2.2.2, < 4.0)
       regexp_parser (>= 1.8, < 3.0)
       rexml (>= 3.2.5, < 4.0)
-      rubocop-ast (>= 1.28.1, < 2.0)
+      rubocop-ast (>= 1.31.1, < 2.0)
       ruby-progressbar (~> 1.7)
       unicode-display_width (>= 2.4.0, < 3.0)
-    rubocop-ast (1.29.0)
-      parser (>= 3.2.1.0)
-    rubocop-capybara (2.19.0)
+    rubocop-ast (1.31.2)
+      parser (>= 3.3.0.4)
+    rubocop-capybara (2.20.0)
+      rubocop (~> 1.41)
+    rubocop-factory_bot (2.25.1)
       rubocop (~> 1.41)
-    rubocop-factory_bot (2.24.0)
-      rubocop (~> 1.33)
-    rubocop-rspec (2.24.1)
-      rubocop (~> 1.33)
+    rubocop-rspec (2.29.1)
+      rubocop (~> 1.40)
       rubocop-capybara (~> 2.17)
       rubocop-factory_bot (~> 2.22)
-    rubocop-shopify (2.14.0)
+      rubocop-rspec_rails (~> 2.28)
+    rubocop-rspec_rails (2.28.2)
+      rubocop (~> 1.40)
+    rubocop-shopify (2.15.1)
       rubocop (~> 1.51)
-    rubocop-sorbet (0.7.4)
+    rubocop-sorbet (0.8.0)
       rubocop (>= 0.90.0)
     ruby-progressbar (1.13.0)
     ruby2_keywords (0.0.5)
     shopify-money (1.3.0)
-    sidekiq (7.1.6)
+    sidekiq (7.2.2)
       concurrent-ruby (< 2)
       connection_pool (>= 2.3.0)
       rack (>= 2.2.4)
-      redis-client (>= 0.14.0)
+      redis-client (>= 0.19.0)
     smart_properties (1.17.0)
-    sorbet (0.5.11074)
-      sorbet-static (= 0.5.11074)
-    sorbet-runtime (0.5.11074)
-    sorbet-static (0.5.11074-universal-darwin)
-    sorbet-static (0.5.11074-x86_64-linux)
-    sorbet-static-and-runtime (0.5.11074)
-      sorbet (= 0.5.11074)
-      sorbet-runtime (= 0.5.11074)
-    spoom (1.2.4)
+    sorbet (0.5.11332)
+      sorbet-static (= 0.5.11332)
+    sorbet-runtime (0.5.11332)
+    sorbet-static (0.5.11332-universal-darwin)
+    sorbet-static (0.5.11332-x86_64-linux)
+    sorbet-static-and-runtime (0.5.11332)
+      sorbet (= 0.5.11332)
+      sorbet-runtime (= 0.5.11332)
+    spoom (1.3.0)
       erubi (>= 1.10.0)
+      prism (>= 0.19.0)
       sorbet-static-and-runtime (>= 0.5.10187)
-      syntax_tree (>= 6.1.1)
       thor (>= 0.19.2)
     sprockets (4.2.1)
       concurrent-ruby (~> 1.0)
       rack (>= 2.2.4, < 4)
-    sqlite3 (1.6.7-arm64-darwin)
-    sqlite3 (1.6.7-x86_64-darwin)
-    sqlite3 (1.6.7-x86_64-linux)
+    sqlite3 (1.7.3-arm64-darwin)
+    sqlite3 (1.7.3-x86_64-darwin)
+    sqlite3 (1.7.3-x86_64-linux)
     state_machines (0.6.0)
-    syntax_tree (6.1.1)
-      prettier_print (>= 1.2.0)
-    thor (1.2.2)
-    timeout (0.4.0)
+    stringio (3.1.0)
+    thor (1.3.1)
+    timeout (0.4.1)
     tzinfo (2.0.6)
       concurrent-ruby (~> 1.0)
-    unicode-display_width (2.4.2)
-    webmock (3.19.1)
+    unicode-display_width (2.5.0)
+    webmock (3.23.0)
       addressable (>= 2.8.0)
       crack (>= 0.3.2)
       hashdiff (>= 0.4.0, < 2.0.0)
@@ -410,7 +417,7 @@ DEPENDENCIES
   minitest
   minitest-hooks
   minitest-reporters
-  net-smtp (= 0.4.0)
+  net-smtp (= 0.5.0)
   nokogiri
   pry
   pry-byebug
diff --git a/tapioca.gemspec b/tapioca.gemspec
index 9d880e1b9..c3fe713fb 100644
--- a/tapioca.gemspec
+++ b/tapioca.gemspec
@@ -28,7 +28,7 @@ Gem::Specification.new do |spec|
   spec.add_dependency("parallel", ">= 1.21.0")
   spec.add_dependency("rbi", ">= 0.1.4", "< 0.2")
   spec.add_dependency("sorbet-static-and-runtime", ">= 0.5.10187")
-  spec.add_dependency("spoom", "~> 1.2.0", ">= 1.2.0")
+  spec.add_dependency("spoom", ">= 1.2", "< 1.4")
   spec.add_dependency("thor", ">= 1.2.0")
   spec.add_dependency("yard-sorbet")