diff --git a/Gemfile b/Gemfile
index 3bcefbbc1a766..572a97dc914f3 100644
--- a/Gemfile
+++ b/Gemfile
@@ -189,7 +189,7 @@ gem 'hashie', '~> 5.0.0', feature_category: :shared
 gem 'kaminari', '~> 1.2.2', feature_category: :shared
 
 # HAML
-gem 'hamlit', '~> 3.0.0', feature_category: :shared
+gem 'hamlit', '~> 4.0.0', feature_category: :shared
 
 # Files attachments
 gem 'carrierwave', '~> 1.3', feature_category: :shared
@@ -745,7 +745,7 @@ gem "nkf", "~> 0.2.0", feature_category: :shared
 # This is locked to 0.6.0 because we patch Net::HTTP#connect in
 # gems/gitlab-http/lib/net_http/connect_patch.rb.
 # It can be upgraded but care must be taken to preserve the patch.
-gem 'net-http', '= 0.6.0', feature_category: :shared
+gem 'net-http', '= 0.7.0', feature_category: :shared
 # This is locked to 0.13.0 because the default parser changes from RFC2396 to RFC3986,
 # which can be removed after Rails 7.2 upgrade
 # See https://gitlab.com/gitlab-org/gitlab/-/merge_requests/173142#note_2277952450