diff --git a/requirements/dev.txt b/requirements/dev.txt
index 6569c0426c..c1d6411ea1 100644
--- a/requirements/dev.txt
+++ b/requirements/dev.txt
@@ -28,9 +28,9 @@ backcall==0.1.0           # via ipython
 backports-abc==0.5
 backports.ssl-match-hostname==3.7.0.1
 beautifulsoup4==4.7.1
-boto3==1.9.108            # via moto
+boto3==1.9.135            # via moto
 boto==2.49.0
-botocore==1.12.108        # via boto3, moto, s3transfer
+botocore==1.12.135        # via boto3, moto, s3transfer
 cachetools==3.1.0         # via google-auth, premailer
 cchardet==2.1.4
 certifi==2018.11.29
@@ -43,7 +43,7 @@ coverage==4.5.2
 cryptography==2.6.1
 cssselect==1.0.3          # via parsel, premailer, scrapy
 cssutils==1.0.2           # via premailer
-decorator==4.3.2          # via ipython, traitlets
+decorator==4.4.0          # via ipython, traitlets
 defusedxml==0.5.0
 disposable-email-domains==0.0.46
 django-auth-ldap==1.7.0
@@ -58,12 +58,12 @@ django-two-factor-auth==1.8.0
 django-webpack-loader==0.6.0
 django==1.11.20
 docker-pycreds==0.4.0     # via docker
-docker==3.7.0             # via moto
+docker==3.7.2             # via moto
 docopt==0.6.2
 docutils==0.14
-ecdsa==0.13               # via python-jose
+ecdsa==0.13.2             # via python-jose
 fakeldap==0.6.1
-first==2.0.1              # via pip-tools
+first==2.0.2              # via pip-tools
 gitdb==0.6.4
 gitlint==0.10.0
 google-api-python-client==1.7.4
@@ -77,7 +77,7 @@ httpretty==0.9.6
 hypchat==0.21
 hyper==0.7.0              # via apns2
 hyperframe==3.2.0         # via h2, hyper
-hyperlink==18.0.0         # via twisted
+hyperlink==19.0.0         # via twisted
 idna==2.8                 # via hyperlink, requests
 ijson==2.3
 imagesize==1.1.0
@@ -105,28 +105,28 @@ oauth2client==4.1.3
 oauthlib==3.0.1
 packaging==19.0           # via sphinx
 parsel==1.5.1             # via scrapy
-parso==0.3.4              # via jedi
+parso==0.4.0              # via jedi
 pbr==5.1.3                # via mock
-pexpect==4.6.0            # via ipython
-phonenumberslite==8.10.6  # via django-phonenumber-field
+pexpect==4.7.0            # via ipython
+phonenumberslite==8.10.10  # via django-phonenumber-field
 pickleshare==0.7.5        # via ipython
 pika==0.13.0
 pillow==5.4.1
 pip-tools==2.0.2
 polib==1.1.0
 premailer==3.3.0
-prompt-toolkit==1.0.15    # via ipython
+prompt-toolkit==1.0.16    # via ipython
 psycopg2==2.7.7
 ptyprocess==0.6.0         # via pexpect
 py3dns==3.2.0
 pyahocorasick==1.4.0
-pyaml==18.11.0            # via moto
+pyaml==19.4.1             # via moto
 pyasn1-modules==0.2.4
 pyasn1==0.4.5
 pycodestyle==2.5.0
 pycparser==2.19           # via cffi
 pycrypto==2.6.1
-pycryptodome==3.7.3       # via python-jose
+pycryptodome==3.8.1       # via python-jose
 pydispatcher==2.0.5       # via scrapy
 pyflakes==2.1.1
 pygments==2.3.1
@@ -136,25 +136,25 @@ pyldap==3.0.0.post1       # via fakeldap
 pylibmc==1.6.0
 pyoembed==0.1.2
 pyopenssl==19.0.0         # via ndg-httpsclient, requests, scrapy
-pyparsing==2.3.1          # via packaging
+pyparsing==2.4.0          # via packaging
 pysocks==1.6.8            # via twilio
 python-dateutil==2.8.0
 python-digitalocean==1.14.0
 python-gcm==0.4
 python-jose==2.0.2        # via moto
-python-ldap==3.1.0        # via django-auth-ldap, pyldap
+python-ldap==3.2.0        # via django-auth-ldap, pyldap
 python-twitter==3.5
 python3-openid==3.1.0     # via social-auth-core
 pytz==2018.9
-pyyaml==3.13              # via pyaml, yamole
+pyyaml==5.1               # via pyaml, yamole
 qrcode==6.1               # via django-two-factor-auth
 queuelib==1.5.0           # via scrapy
 recommonmark==0.4.0
 redis==2.10.6
-regex==2019.2.21
+regex==2019.4.14
 requests-oauthlib==1.0.0
 requests[security]==2.21.0  # via aws-xray-sdk, docker, hypchat, matrix-client, moto, premailer, pyoembed, python-digitalocean, python-gcm, python-twitter, requests-oauthlib, responses, social-auth-core, sphinx, stripe, twilio
-responses==0.10.5         # via moto
+responses==0.10.6         # via moto
 rsa==4.0
 s3transfer==0.2.0         # via boto3
 scrapy==1.6.0
@@ -168,7 +168,7 @@ snowballstemmer==1.2.1
 social-auth-app-django==3.1.0
 social-auth-core==3.1.0   # via social-auth-app-django
 sockjs-tornado==1.0.6
-soupsieve==1.8            # via beautifulsoup4
+soupsieve==1.9.1          # via beautifulsoup4
 sourcemap==0.2.1
 sphinx-rtd-theme==0.4.3
 sphinx==1.8.4
@@ -182,16 +182,16 @@ traitlets==4.3.2          # via ipython
 transifex-client==0.12.5
 twilio==6.25.0
 twisted==18.9.0
-typed-ast==1.3.1          # via mypy
+typed-ast==1.3.4          # via mypy
 typing==3.6.6
 typing_extensions==3.6.6
 uritemplate==3.0.0
-urllib3==1.24.1           # via botocore, requests, transifex-client
+urllib3==1.24.2           # via botocore, requests, transifex-client
 virtualenv-clone==0.5.1
 w3lib==1.20.0             # via parsel, scrapy
 wcwidth==0.1.7            # via prompt-toolkit
-websocket-client==0.55.0  # via docker
-werkzeug==0.14.1          # via moto
+websocket-client==0.56.0  # via docker
+werkzeug==0.15.2          # via moto
 wrapt==1.11.1             # via aws-xray-sdk
 xmltodict==0.12.0         # via moto
 yamole==2.1.6
diff --git a/requirements/prod.txt b/requirements/prod.txt
index ccf5483506..e83d11a1af 100644
--- a/requirements/prod.txt
+++ b/requirements/prod.txt
@@ -32,7 +32,7 @@ chardet==3.0.4
 cryptography==2.6.1
 cssselect==1.0.3          # via premailer
 cssutils==1.0.2           # via premailer
-decorator==4.3.2          # via ipython, traitlets
+decorator==4.4.0          # via ipython, traitlets
 defusedxml==0.5.0
 disposable-email-domains==0.0.46
 django-auth-ldap==1.7.0
@@ -75,16 +75,16 @@ mypy_extensions==0.4.1
 ndg-httpsclient==0.5.1
 oauth2client==4.1.3
 oauthlib==3.0.1
-parso==0.3.4              # via jedi
+parso==0.4.0              # via jedi
 pbr==5.1.3                # via mock
-pexpect==4.6.0            # via ipython
-phonenumberslite==8.10.6  # via django-phonenumber-field
+pexpect==4.7.0            # via ipython
+phonenumberslite==8.10.10  # via django-phonenumber-field
 pickleshare==0.7.5        # via ipython
 pika==0.13.0
 pillow==5.4.1
 polib==1.1.0
 premailer==3.3.0
-prompt-toolkit==1.0.15    # via ipython
+prompt-toolkit==1.0.16    # via ipython
 psycopg2==2.7.7
 ptyprocess==0.6.0         # via pexpect
 py3dns==3.2.0
@@ -101,14 +101,14 @@ pyopenssl==19.0.0         # via ndg-httpsclient, requests
 pysocks==1.6.8            # via twilio
 python-dateutil==2.8.0
 python-gcm==0.4
-python-ldap==3.1.0        # via django-auth-ldap
+python-ldap==3.2.0        # via django-auth-ldap
 python-twitter==3.5
 python3-openid==3.1.0     # via social-auth-core
 pytz==2018.9
-pyyaml==3.13              # via yamole
+pyyaml==5.1               # via yamole
 qrcode==6.1               # via django-two-factor-auth
 redis==2.10.6
-regex==2019.2.21
+regex==2019.4.14
 requests-oauthlib==1.0.0
 requests[security]==2.21.0  # via hypchat, matrix-client, premailer, pyoembed, python-gcm, python-twitter, requests-oauthlib, social-auth-core, stripe, twilio
 rsa==4.0
@@ -118,7 +118,7 @@ smmap==0.9.0
 social-auth-app-django==3.1.0
 social-auth-core==3.1.0   # via social-auth-app-django
 sockjs-tornado==1.0.6
-soupsieve==1.8            # via beautifulsoup4
+soupsieve==1.9.1          # via beautifulsoup4
 sourcemap==0.2.1
 sqlalchemy==1.3.0
 statsd==3.3.0             # via django-statsd-mozilla
@@ -128,7 +128,7 @@ traitlets==4.3.2          # via ipython
 twilio==6.25.0
 typing==3.6.6
 uritemplate==3.0.0
-urllib3==1.24.1           # via requests
+urllib3==1.24.2           # via requests
 uwsgi==2.0.17.1
 virtualenv-clone==0.5.1
 wcwidth==0.1.7            # via prompt-toolkit