diff --git a/Gemfile b/Gemfile
index 21e7bae..1710a1c 100644
--- a/Gemfile
+++ b/Gemfile
@@ -20,7 +20,7 @@ gem 'money-rails', '~> 1.4.1' # 1.6.0 break tests
 gem 'net-ldap', '~> 0.16.1'
 gem 'net-sftp'
 gem 'nokogiri', '1.10.8'
-gem 'omniauth', '1.9.0'
+gem 'omniauth', '1.9.1'
 gem 'omniauth-shibboleth', '~> 1.3.0'
 gem 'pg', '0.20.0' # lock at 0.20.0
 # rails 5.1 requires money-rails upgrades which broken tests
diff --git a/Gemfile.lock b/Gemfile.lock
index 8cb319c..2e852bd 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -109,7 +109,7 @@ GEM
       haml (>= 4.0.6, < 6.0)
       html2haml (>= 1.0.1)
       railties (>= 4.0.1)
-    hashie (3.6.0)
+    hashie (4.1.0)
     honeycomb-beeline (1.0.0)
       libhoney (~> 1.8)
     html2haml (2.2.0)
@@ -187,8 +187,8 @@ GEM
     net-ssh (5.2.0)
     nokogiri (1.10.8)
       mini_portile2 (~> 2.4.0)
-    omniauth (1.9.0)
-      hashie (>= 3.4.6, < 3.7.0)
+    omniauth (1.9.1)
+      hashie (>= 3.4.6)
       rack (>= 1.6.2, < 3)
     omniauth-shibboleth (1.3.0)
       omniauth (>= 1.0.0)
@@ -355,7 +355,7 @@ DEPENDENCIES
   net-ldap (~> 0.16.1)
   net-sftp
   nokogiri (= 1.10.8)
-  omniauth (= 1.9.0)
+  omniauth (= 1.9.1)
   omniauth-shibboleth (~> 1.3.0)
   pg (= 0.20.0)
   pry (~> 0.12.2)