Pin openssl gem past 3.2.x in demo Gemfile

Co-authored-by: siddharthkp <1863771+siddharthkp@users.noreply.github.com>

Author: Copilot

demo/Gemfile

@@ -2,6 +2,10 @@
 
 source "https://rubygems.org"
 
+# Pin the openssl stdlib gem past 3.2.x so the SBOM EOL scanner
+# (eol-eoldate-openssl-008) stops matching the OpenSSL 3.2 library EOL entry.
+gem "openssl", ">= 3.3"
+
 rails_version = (ENV["RAILS_VERSION"] || "7.2.2.1").to_s
 
 gem "rake", "~> 13.4"

demo/Gemfile.lock

@@ -256,6 +256,7 @@ GEM
     oj (3.17.3)
       bigdecimal (>= 3.0)
       ostruct (>= 0.2)
+    openssl (4.0.2)
     os (1.1.4)
     ostruct (0.6.3)
     pp (0.6.4)
@@ -395,6 +396,7 @@ DEPENDENCIES
   kuby-kind (~> 0.2)
   listen
   lookbook (~> 2.3.14)
+  openssl (>= 3.3)
   primer_view_components!
   pry-byebug
   puma (~> 8.0.2)