diff --git a/requirements/dev.in b/requirements/dev.in
index a60d3ea6a1..3c8cd9229d 100644
--- a/requirements/dev.in
+++ b/requirements/dev.in
@@ -5,7 +5,7 @@
 -r docs.in
 
 # moto s3 mock
-moto==1.3.3
+moto==1.3.7
 
 # Needed for running tools/run-dev.py
 Twisted==18.9.0
diff --git a/requirements/dev.txt b/requirements/dev.txt
index 37f2f2e8fd..65bab8fdc9 100644
--- a/requirements/dev.txt
+++ b/requirements/dev.txt
@@ -39,7 +39,6 @@ chardet==3.0.4
 click==6.6                # via gitlint, pip-tools
 commonmark==0.5.4
 constantly==15.1.0        # via twisted
-cookies==2.2.1            # via moto
 coverage==4.5.2
 cryptography==2.4.2
 cssselect==1.0.3          # via parsel, premailer, scrapy
@@ -62,6 +61,7 @@ docker-pycreds==0.4.0     # via docker
 docker==3.6.0             # via moto
 docopt==0.6.2
 docutils==0.14
+ecdsa==0.13               # via python-jose
 fakeldap==0.6.1
 first==2.0.1              # via pip-tools
 gitdb==0.6.4
@@ -95,7 +95,7 @@ markdown==2.6.11
 markupsafe==1.1.0
 matrix-client==0.3.2
 mock==2.0.0
-moto==1.3.3
+moto==1.3.7
 mypy-extensions==0.4.1
 mypy==0.650
 ndg-httpsclient==0.5.1
@@ -123,6 +123,7 @@ pyasn1==0.4.4
 pycodestyle==2.4.0
 pycparser==2.19           # via cffi
 pycrypto==2.6.1
+pycryptodome==3.7.2       # via python-jose
 pydispatcher==2.0.5       # via scrapy
 pyflakes==2.0.0
 pygments==2.2.0
@@ -137,6 +138,7 @@ pysocks==1.6.8            # via twilio
 python-dateutil==2.6.1
 python-digitalocean==1.14.0
 python-gcm==0.4
+python-jose==2.0.2        # via moto
 python-ldap==3.1.0        # via django-auth-ldap, pyldap
 python-twitter==3.5
 python3-openid==3.1.0     # via social-auth-core