Bump utils to fix bleach security vulnerability

requirements-app.txt

@@ -27,4 +27,4 @@ notifications-python-client==5.5.1
 awscli-cwlogs>=1.4,<1.5
 
 
-git+https://github.com/alphagov/notifications-utils.git@36.5.0#egg=notifications-utils==36.5.0
+git+https://github.com/alphagov/notifications-utils.git@36.6.1#egg=notifications-utils==36.6.1

requirements.txt

@@ -29,20 +29,20 @@ notifications-python-client==5.5.1
 awscli-cwlogs>=1.4,<1.5
 
 
-git+https://github.com/alphagov/notifications-utils.git@36.5.0#egg=notifications-utils==36.5.0
+git+https://github.com/alphagov/notifications-utils.git@36.6.1#egg=notifications-utils==36.6.1
 
 ## The following requirements were added by pip freeze:
 alembic==1.4.0
 amqp==1.4.9
 anyjson==0.3.3
 attrs==19.3.0
-awscli==1.17.17
+awscli==1.18.6
 bcrypt==3.1.7
 billiard==3.3.0.23
-bleach==3.1.0
+bleach==3.1.1
 boto==2.49.0
 boto3==1.10.38
-botocore==1.14.17
+botocore==1.15.6
 certifi==2019.11.28
 chardet==3.0.4
 Click==7.0
@@ -52,17 +52,17 @@ docutils==0.15.2
 flask-redis==0.4.0
 future==0.18.2
 greenlet==0.4.15
-idna==2.8
+idna==2.9
 importlib-metadata==1.5.0
 Jinja2==2.11.1
-jmespath==0.9.4
+jmespath==0.9.5
 kombu==3.0.37
 Mako==1.1.1
 MarkupSafe==1.1.1
 mistune==0.8.4
 monotonic==1.5
 orderedset==2.0.1
-phonenumbers==8.11.1
+phonenumbers==8.11.2
 pyasn1==0.4.8
 pycparser==2.19
 PyPDF2==1.26.0
@@ -71,9 +71,9 @@ python-dateutil==2.8.1
 python-editor==1.0.4
 python-json-logger==0.1.11
 pytz==2019.3
-PyYAML==5.2
+PyYAML==5.3
 redis==3.4.1
-requests==2.22.0
+requests==2.23.0
 rsa==3.4.2
 s3transfer==0.3.3
 six==1.14.0
@@ -82,4 +82,4 @@ statsd==3.3.0
 urllib3==1.25.8
 webencodings==0.5.1
 Werkzeug==1.0.0
-zipp==2.2.0
+zipp==3.0.0