diff --git a/Gemfile b/Gemfile
index fb098d17..9a2698ad 100644
--- a/Gemfile
+++ b/Gemfile
@@ -18,7 +18,7 @@ gem 'xmlrpc' # required for gem dependency missing somewhere
 
 gem 'acts-as-taggable-on', '~> 5.0.0'
 gem 'decent_exposure', '~> 2.3.2'
-gem 'devise', '~> 4.5.0'
+gem 'devise', '~> 4.7.1'
 gem 'omniauth-facebook'
 gem 'rdiscount', '1.6.8'
 gem 'will_paginate'
diff --git a/Gemfile.lock b/Gemfile.lock
index ff22b255..1b118bb8 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -52,7 +52,7 @@ GEM
       public_suffix (>= 2.0.2, < 5.0)
     arel (6.0.4)
     backports (3.15.0)
-    bcrypt (3.1.12)
+    bcrypt (3.1.13)
     bootstrap-sass-rails (2.3.1.1)
       railties (>= 3.1.0)
       sass-rails (>= 3.1.0)
@@ -121,10 +121,10 @@ GEM
     cucumber-wire (0.0.1)
     database_cleaner (1.7.0)
     decent_exposure (2.3.2)
-    devise (4.5.0)
+    devise (4.7.1)
       bcrypt (~> 3.0)
       orm_adapter (~> 0.1)
-      railties (>= 4.1.0, < 6.0)
+      railties (>= 4.1.0)
       responders
       warden (~> 1.2.3)
     diff-lcs (1.3)
@@ -450,9 +450,9 @@ GEM
       trollop (~> 2.1)
     rdiscount (1.6.8)
     regexp_parser (1.6.0)
-    responders (2.4.0)
-      actionpack (>= 4.2.0, < 5.3)
-      railties (>= 4.2.0, < 5.3)
+    responders (2.4.1)
+      actionpack (>= 4.2.0, < 6.0)
+      railties (>= 4.2.0, < 6.0)
     rmagick (4.0.0)
     routing-filter (0.6.2)
       actionpack (>= 4.2, < 6)
@@ -562,7 +562,7 @@ DEPENDENCIES
   cucumber-rails
   database_cleaner
   decent_exposure (~> 2.3.2)
-  devise (~> 4.5.0)
+  devise (~> 4.7.1)
   email_spec (~> 1.6.0)
   factory_bot_rails
   faker (~> 1.5.0)