diff --git a/Gemfile b/Gemfile
index 525b1d91..a8e97c71 100644
--- a/Gemfile
+++ b/Gemfile
@@ -9,7 +9,7 @@ gem 'sprockets-rails'
 
 gem 'pg'
 gem 'puma', '~> 6.0'
-gem 'rugged', '1.7.2'
+gem 'rugged', '1.9.0'
 gem 'unf'
 gem 'turbolinks', '~> 5'
 gem 'actionpack-page_caching', '1.2.4'
diff --git a/Gemfile.lock b/Gemfile.lock
index 34e52f37..8c34b2ad 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -218,7 +218,7 @@ GEM
       psych (>= 4.0.0)
     reline (0.6.2)
       io-console (~> 0.5)
-    rugged (1.7.2)
+    rugged (1.9.0)
     sass-rails (6.0.0)
       sassc-rails (~> 2.1, >= 2.1.1)
     sassc (2.4.0)
@@ -287,7 +287,7 @@ DEPENDENCIES
   rails-controller-testing
   rbnacl (>= 3.2, < 8.0)
   rbnacl-libsodium
-  rugged (= 1.7.2)
+  rugged (= 1.9.0)
   sass-rails (~> 6.0)
   sprockets-rails
   turbolinks (~> 5)