diff --git a/Gemfile b/Gemfile
index 1eb555f88..0f5080f32 100644
--- a/Gemfile
+++ b/Gemfile
@@ -31,7 +31,7 @@ gem "jquery-rails", "~> 4.3.3"
 gem "jquery-ui-rails", "~> 6.0.1"
 gem "kaminari", "~> 1.1.1"
 gem "newrelic_rpm", "~> 4.1.0.333"
-gem "omniauth", "~> 1.8.1"
+gem "omniauth", "~> 1.9.2"
 gem "omniauth-facebook", "~> 4.0.0"
 gem "omniauth-google-oauth2", "~> 0.4.0"
 gem "omniauth-twitter", "~> 1.4.0"
diff --git a/Gemfile.lock b/Gemfile.lock
index 6408ccb76..2fe319151 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -7,8 +7,13 @@ GIT
       railties (>= 3.2.6, < 6.0)
 
 GEM
-  remote: https://rubygems.org/
   remote: https://rails-assets.org/
+  specs:
+    rails-assets-leaflet (1.2.0)
+    rails-assets-markdown-it (8.2.2)
+
+GEM
+  remote: https://rubygems.org/
   specs:
     actioncable (5.0.7.2)
       actionpack (= 5.0.7.2)
@@ -257,7 +262,7 @@ GEM
       activesupport (>= 3)
     gyoku (1.3.1)
       builder (>= 2.1.2)
-    hashie (3.5.7)
+    hashie (5.0.0)
     highline (2.0.2)
     html_tokenizer (0.0.7)
     htmlentities (4.3.4)
@@ -360,8 +365,8 @@ GEM
       rack (>= 1.2, < 3)
     octokit (4.14.0)
       sawyer (~> 0.8.0, >= 0.5.3)
-    omniauth (1.8.1)
-      hashie (>= 3.4.6, < 3.6.0)
+    omniauth (1.9.2)
+      hashie (>= 3.4.6)
       rack (>= 1.6.2, < 3)
     omniauth-facebook (4.0.0)
       omniauth-oauth2 (~> 1.2)
@@ -399,7 +404,7 @@ GEM
     public_suffix (4.0.1)
     puma (4.3.1)
       nio4r (~> 2.0)
-    rack (2.0.7)
+    rack (2.2.4)
     rack-accept (0.4.5)
       rack (>= 0.4)
     rack-attack (5.0.1)
@@ -420,8 +425,6 @@ GEM
       bundler (>= 1.3.0)
       railties (= 5.0.7.2)
       sprockets-rails (>= 2.0.0)
-    rails-assets-leaflet (1.2.0)
-    rails-assets-markdown-it (8.2.2)
     rails-dom-testing (2.0.3)
       activesupport (>= 4.2.0)
       nokogiri (>= 1.6)
@@ -646,7 +649,7 @@ DEPENDENCIES
   letter_opener_web (~> 1.3.4)
   mdl (~> 0.5.0)
   newrelic_rpm (~> 4.1.0.333)
-  omniauth (~> 1.8.1)
+  omniauth (~> 1.9.2)
   omniauth-facebook (~> 4.0.0)
   omniauth-google-oauth2 (~> 0.4.0)
   omniauth-twitter (~> 1.4.0)