It fixes several CVEs related to regular expression
denial of service vulnerabilities. We were not affected
by them thanks to the mitigations in Ruby 3.2 but this
upgrade will prevent the CVEs from showing up in
vulnerability scanning results.

Changelog: security