diff --git a/requirements.txt b/requirements.txt
index 00c37c4e3..3bd1ea2f7 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -31,13 +31,15 @@ botocore<1.11.0
 
 git+https://github.com/alphagov/notifications-utils.git@30.4.0#egg=notifications-utils==30.4.0
 
+# if you want to update pycurl please do so in makefile
+
 ## The following requirements were added by pip freeze:
 alembic==1.0.0
 amqp==2.3.2
 bcrypt==3.1.4
 billiard==3.5.0.4
 bleach==2.1.3
-boto3==1.9.16
+boto3==1.9.17
 certifi==2018.8.24
 chardet==3.0.4
 Click==7.0