diff --git a/Gemfile b/Gemfile
index cdf798137..dd0926c0f 100644
--- a/Gemfile
+++ b/Gemfile
@@ -8,17 +8,17 @@ gem 'pg'
 gem 'omniauth'
 gem 'omniauth-github'
 gem 'omniauth-twitter'
-gem 'octokit'
+gem 'octokit', '>= 4.6.2'
 gem 'rabl'
 gem 'kaminari'
-gem 'twitter'
+gem 'twitter', '>= 6.1.0'
 gem 'bootstrap-sass'
 gem 'jquery-datetimepicker-rails'
 gem 'simple_form'
 gem 'coffee-rails'
 gem 'uglifier'
 gem 'octicons_helper'
-gem 'rack-canonical-host'
+gem 'rack-canonical-host', '>= 0.2.2'
 gem 'draper', '~> 3.0.0.pre1' # pre version has rails5 support
 gem 'responders'
 gem 'gmaps4rails'
@@ -51,12 +51,12 @@ group :development, :test, :cucumber do
   gem 'factory_girl_rails'
   gem 'faker'
   gem 'brakeman'
-  gem 'poltergeist'
-  gem 'launchy'
+  gem 'poltergeist', '>= 1.13.0'
+  gem 'launchy', '>= 2.4.3'
 
   gem 'database_cleaner'
   gem 'shoulda-matchers'
-  gem 'webmock', require: false
+  gem 'webmock', '>= 2.3.2', require: false
   gem 'timecop'
   gem 'christmas_tree_formatter'
 end
diff --git a/Gemfile.lock b/Gemfile.lock
index 44e3cebc3..dbba2e4bc 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -43,8 +43,8 @@ GEM
       i18n (~> 0.7)
       minitest (~> 5.1)
       tzinfo (~> 1.1)
-    addressable (2.5.0)
-      public_suffix (~> 2.0, >= 2.0.2)
+    addressable (2.8.0)
+      public_suffix (>= 2.0.2, < 5.0)
     arel (7.1.4)
     ast (2.3.0)
     autoprefixer-rails (6.7.6)
@@ -57,13 +57,14 @@ GEM
     bugsnag (5.2.0)
     builder (3.2.3)
     callsite (0.0.11)
-    capybara (2.12.1)
+    capybara (3.32.2)
       addressable
-      mime-types (>= 1.16)
-      nokogiri (>= 1.3.3)
-      rack (>= 1.0.0)
-      rack-test (>= 0.5.4)
-      xpath (~> 2.0)
+      mini_mime (>= 0.1.3)
+      nokogiri (~> 1.8)
+      rack (>= 1.6.0)
+      rack-test (>= 0.6.3)
+      regexp_parser (~> 1.5)
+      xpath (~> 3.2)
     christmas_tree_formatter (0.1.0)
       rspec-core (~> 3.0)
     cliver (0.3.2)
@@ -77,14 +78,14 @@ GEM
       execjs
     coffee-script-source (1.12.2)
     concurrent-ruby (1.0.5)
-    crack (0.4.3)
-      safe_yaml (~> 1.0.0)
+    crack (0.4.5)
+      rexml
     dalli (2.7.6)
     database_cleaner (1.5.3)
     debug_inspector (0.0.2)
     diff-lcs (1.3)
     docile (1.1.5)
-    domain_name (0.5.20170223)
+    domain_name (0.5.20190701)
       unf (>= 0.0.5, < 1.0.0)
     draper (3.0.0.pre1)
       actionpack (~> 5.0)
@@ -111,6 +112,9 @@ GEM
     faraday (0.11.0)
       multipart-post (>= 1.2, < 3)
     ffi (1.9.18)
+    ffi-compiler (1.0.1)
+      ffi (>= 1.0.0)
+      rake
     figaro (1.1.1)
       thor (~> 0.14)
     foreman (0.83.0)
@@ -119,17 +123,19 @@ GEM
     globalid (0.3.7)
       activesupport (>= 4.1.0)
     gmaps4rails (2.1.2)
-    hashdiff (0.3.2)
+    hashdiff (1.0.1)
     hashie (3.5.5)
     highline (1.7.8)
-    http (2.2.1)
+    http (4.4.1)
       addressable (~> 2.3)
       http-cookie (~> 1.0)
-      http-form_data (~> 1.0.1)
-      http_parser.rb (~> 0.6.0)
-    http-cookie (1.0.3)
+      http-form_data (~> 2.2)
+      http-parser (~> 1.2.0)
+    http-cookie (1.0.4)
       domain_name (~> 0.5)
-    http-form_data (1.0.1)
+    http-form_data (2.3.0)
+    http-parser (1.2.3)
+      ffi-compiler (>= 1.0, < 2.0)
     http_parser.rb (0.6.0)
     i18n (0.8.1)
     i18n-tasks (0.9.12)
@@ -161,8 +167,8 @@ GEM
       activerecord
       kaminari-core (= 1.0.1)
     kaminari-core (1.0.1)
-    launchy (2.4.3)
-      addressable (~> 2.3)
+    launchy (2.5.0)
+      addressable (~> 2.7)
     lodash-rails (4.17.4)
       railties (>= 3.1)
     loofah (2.0.3)
@@ -176,19 +182,20 @@ GEM
       rack-contrib (~> 1.1)
       railties (>= 3.0.0, < 5.1.0)
     method_source (0.8.2)
-    mime-types (3.1)
+    mime-types (3.3.1)
       mime-types-data (~> 3.2015)
-    mime-types-data (3.2016.0521)
-    mini_portile2 (2.1.0)
+    mime-types-data (3.2021.0704)
+    mini_mime (1.1.0)
+    mini_portile2 (2.4.0)
     minitest (5.10.1)
     multi_json (1.12.1)
     multi_xml (0.6.0)
-    multipart-post (2.0.0)
+    multipart-post (2.1.1)
     naught (1.1.0)
     newrelic_rpm (3.18.1.330)
     nio4r (2.0.0)
-    nokogiri (1.7.0.1)
-      mini_portile2 (~> 2.1.0)
+    nokogiri (1.10.10)
+      mini_portile2 (~> 2.4.0)
     oauth (0.5.1)
     oauth2 (1.3.1)
       faraday (>= 0.8, < 0.12)
@@ -201,7 +208,8 @@ GEM
     octicons_helper (3.0.1)
       octicons (~> 3.0)
       rails
-    octokit (4.6.2)
+    octokit (4.21.0)
+      faraday (>= 0.9)
       sawyer (~> 0.8.0, >= 0.5.3)
     omniauth (1.6.1)
       hashie (>= 3.4.6, < 3.6.0)
@@ -221,19 +229,19 @@ GEM
     parser (2.4.0.0)
       ast (~> 2.2)
     pg (0.19.0)
-    poltergeist (1.13.0)
-      capybara (~> 2.1)
+    poltergeist (1.18.1)
+      capybara (>= 2.1, < 4)
       cliver (~> 0.3.1)
       websocket-driver (>= 0.2.0)
     powerpack (0.1.1)
-    public_suffix (2.0.5)
+    public_suffix (4.0.6)
     puma (3.7.1)
     rabl (0.13.1)
       activesupport (>= 2.3.14)
-    rack (2.0.1)
+    rack (2.2.3)
     rack-attack (5.0.1)
       rack
-    rack-canonical-host (0.2.2)
+    rack-canonical-host (1.0.0)
       addressable (> 0, < 3)
       rack (>= 1.0.0, < 3)
     rack-contrib (1.2.0)
@@ -277,9 +285,11 @@ GEM
       thor (>= 0.18.1, < 2.0)
     rainbow (2.2.1)
     rake (12.0.0)
+    regexp_parser (1.8.2)
     request_store (1.3.2)
     responders (2.3.0)
       railties (>= 4.2.0, < 5.1)
+    rexml (3.2.5)
     rspec-activemodel-mocks (1.0.3)
       activemodel (>= 3.0)
       activesupport (>= 3.0)
@@ -313,7 +323,6 @@ GEM
       ruby-progressbar (~> 1.7)
       unicode-display_width (~> 1.0, >= 1.0.1)
     ruby-progressbar (1.8.1)
-    safe_yaml (1.0.4)
     sass (3.4.23)
     sassc (1.11.2)
       bundler
@@ -326,9 +335,9 @@ GEM
       sprockets (> 2.11)
       sprockets-rails
       tilt
-    sawyer (0.8.1)
-      addressable (>= 2.3.5, < 2.6)
-      faraday (~> 0.8, < 1.0)
+    sawyer (0.8.2)
+      addressable (>= 2.3.5)
+      faraday (> 0.8, < 2.0)
     shoulda-matchers (3.1.1)
       activesupport (>= 4.0.0)
     simple_form (3.4.0)
@@ -361,16 +370,17 @@ GEM
     tilt (2.0.6)
     timecop (0.8.1)
     tins (1.13.2)
-    twitter (6.1.0)
-      addressable (~> 2.5)
+    twitter (7.0.0)
+      addressable (~> 2.3)
       buftok (~> 0.2.0)
-      equalizer (= 0.0.11)
-      faraday (~> 0.11.0)
-      http (~> 2.1)
+      equalizer (~> 0.0.11)
+      http (~> 4.0)
+      http-form_data (~> 2.0)
       http_parser.rb (~> 0.6.0)
-      memoizable (~> 0.4.2)
-      naught (~> 1.1)
-      simple_oauth (~> 0.3.1)
+      memoizable (~> 0.4.0)
+      multipart-post (~> 2.0)
+      naught (~> 1.0)
+      simple_oauth (~> 0.3.0)
     typhoeus (1.1.2)
       ethon (>= 0.9.0)
     tzinfo (1.2.2)
@@ -379,22 +389,22 @@ GEM
       execjs (>= 0.3.0, < 3)
     unf (0.1.4)
       unf_ext
-    unf_ext (0.0.7.2)
+    unf_ext (0.0.7.7)
     unicode-display_width (1.1.3)
     web-console (3.4.0)
       actionview (>= 5.0)
       activemodel (>= 5.0)
       debug_inspector
       railties (>= 5.0)
-    webmock (2.3.2)
+    webmock (3.13.0)
       addressable (>= 2.3.6)
       crack (>= 0.3.2)
-      hashdiff
+      hashdiff (>= 0.4.0, < 2.0.0)
     websocket-driver (0.6.5)
       websocket-extensions (>= 0.1.0)
-    websocket-extensions (0.1.2)
-    xpath (2.0.0)
-      nokogiri (~> 1.3)
+    websocket-extensions (0.1.5)
+    xpath (3.2.0)
+      nokogiri (~> 1.8)
 
 PLATFORMS
   ruby
@@ -419,21 +429,21 @@ DEPENDENCIES
   jquery-datetimepicker-rails
   jquery-rails
   kaminari
-  launchy
+  launchy (>= 2.4.3)
   lodash-rails
   meta_request
   newrelic_rpm
   octicons_helper
-  octokit
+  octokit (>= 4.6.2)
   omniauth
   omniauth-github
   omniauth-twitter
   pg
-  poltergeist
+  poltergeist (>= 1.13.0)
   puma
   rabl
   rack-attack
-  rack-canonical-host
+  rack-canonical-host (>= 0.2.2)
   rack-google-analytics
   rails (= 5.0.2)
   rails-controller-testing
@@ -451,14 +461,14 @@ DEPENDENCIES
   spring
   spring-commands-rspec
   timecop
-  twitter
+  twitter (>= 6.1.0)
   typhoeus
   uglifier
   web-console
-  webmock
+  webmock (>= 2.3.2)
 
 RUBY VERSION
    ruby 2.4.0p0
 
 BUNDLED WITH
-   1.14.6
+   1.17.3