diff --git a/requirements-app.txt b/requirements-app.txt
index 4d50f6b32..fdc313d44 100644
--- a/requirements-app.txt
+++ b/requirements-app.txt
@@ -1,7 +1,7 @@
 # Run `make freeze-requirements` to update requirements.txt
 # with package version changes made in requirements-app.txt
 
-cffi==1.12.1
+cffi==1.12.2
 celery==3.1.26.post2 # pyup: <4
 docopt==0.6.2
 Flask-Bcrypt==0.7.1
@@ -10,15 +10,15 @@ Flask-Migrate==2.4.0
 git+https://github.com/mitsuhiko/flask-sqlalchemy.git@500e732dd1b975a56ab06a46bd1a20a21e682262#egg=Flask-SQLAlchemy==2.3.2.dev20190108
 Flask==1.0.2
 click-datetime==0.2
-eventlet==0.23.0
+eventlet==0.24.1
 gunicorn==19.7.1  # pyup: ignore, >19.8 breaks eventlet patching
 iso8601==0.1.12
 jsonschema==3.0.1
 marshmallow-sqlalchemy==0.16.1
-marshmallow==2.19.1
-psycopg2-binary==2.7.7
+marshmallow==2.19.2
+psycopg2-binary==2.8.1
 PyJWT==1.7.1
-SQLAlchemy==1.2.18
+SQLAlchemy==1.3.2
 
 notifications-python-client==5.3.0
 
diff --git a/requirements.txt b/requirements.txt
index 213a16d81..45132b20e 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -3,7 +3,7 @@
 # Run `make freeze-requirements` to update requirements.txt
 # with package version changes made in requirements-app.txt
 
-cffi==1.12.1
+cffi==1.12.2
 celery==3.1.26.post2 # pyup: <4
 docopt==0.6.2
 Flask-Bcrypt==0.7.1
@@ -12,15 +12,15 @@ Flask-Migrate==2.4.0
 git+https://github.com/mitsuhiko/flask-sqlalchemy.git@500e732dd1b975a56ab06a46bd1a20a21e682262#egg=Flask-SQLAlchemy==2.3.2.dev20190108
 Flask==1.0.2
 click-datetime==0.2
-eventlet==0.23.0
+eventlet==0.24.1
 gunicorn==19.7.1  # pyup: ignore, >19.8 breaks eventlet patching
 iso8601==0.1.12
 jsonschema==3.0.1
 marshmallow-sqlalchemy==0.16.1
-marshmallow==2.19.1
-psycopg2-binary==2.7.7
+marshmallow==2.19.2
+psycopg2-binary==2.8.1
 PyJWT==1.7.1
-SQLAlchemy==1.2.18
+SQLAlchemy==1.3.2
 
 notifications-python-client==5.3.0
 
@@ -36,20 +36,21 @@ git+https://github.com/alphagov/notifications-utils.git@31.2.2#egg=notifications
 git+https://github.com/alphagov/boto.git@2.43.0-patch3#egg=boto==2.43.0-patch3
 
 ## The following requirements were added by pip freeze:
-alembic==1.0.8
+alembic==1.0.9
 amqp==1.4.9
 anyjson==0.3.3
 attrs==19.1.0
-awscli==1.16.140
+awscli==1.16.141
 bcrypt==3.1.6
 billiard==3.3.0.23
 bleach==3.1.0
 boto3==1.6.16
-botocore==1.12.130
+botocore==1.12.131
 certifi==2019.3.9
 chardet==3.0.4
 Click==7.0
 colorama==0.3.9
+dnspython==1.16.0
 docutils==0.14
 Flask-Redis==0.3.0
 future==0.17.1
@@ -58,7 +59,7 @@ idna==2.8
 Jinja2==2.10.1
 jmespath==0.9.4
 kombu==3.0.37
-Mako==1.0.8
+Mako==1.0.9
 MarkupSafe==1.1.1
 mistune==0.8.4
 monotonic==1.5