This resolves some security vulnerabilities. Technically we should probably upgrade to v3.2.4 (same security patches, but for the 3.2 release line), but there's no obvious reason not to just move up to the 3.3 release line and no breaking changes.

Upgrading to 3.3.x required upgrading RuboCop, which demanded a whole laundry list of other changes. Given the maintenance status here, it's better to just stay on the Ruby 3.2.x line.