diff --git a/Gemfile b/Gemfile
index fdf6c9450..ecceee800 100644
--- a/Gemfile
+++ b/Gemfile
@@ -28,8 +28,8 @@ gem 'loofah', '>= 2.3.1'
 # See: https://github.com/sirupsen/airrecord/issues/63
 gem 'net-http-persistent', '~> 2.9'
 
-gem 'octokit'
-gem 'omniauth-github'
+gem 'octokit', '~> 4.18.0'
+gem 'omniauth-github', '~> 1.4.0'
 gem 'omniauth-rails_csrf_protection', '~> 0.1'
 
 gem 'puma', '~> 4.0'
diff --git a/Gemfile.lock b/Gemfile.lock
index 3fabd2aca..ec89f9939 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -164,7 +164,7 @@ GEM
     mini_portile2 (2.4.0)
     minitest (5.11.3)
     msgpack (1.3.1)
-    multi_json (1.13.1)
+    multi_json (1.15.0)
     multi_xml (0.6.0)
     multipart-post (2.1.1)
     nenv (0.3.0)
@@ -178,22 +178,23 @@ GEM
     notiffany (0.1.3)
       nenv (~> 0.1)
       shellany (~> 0.0)
-    oauth2 (1.4.1)
-      faraday (>= 0.8, < 0.16.0)
+    oauth2 (1.4.4)
+      faraday (>= 0.8, < 2.0)
       jwt (>= 1.0, < 3.0)
       multi_json (~> 1.3)
       multi_xml (~> 0.5)
       rack (>= 1.2, < 3)
-    octokit (4.14.0)
+    octokit (4.18.0)
+      faraday (>= 0.9)
       sawyer (~> 0.8.0, >= 0.5.3)
     omniauth (1.9.0)
       hashie (>= 3.4.6, < 3.7.0)
       rack (>= 1.6.2, < 3)
-    omniauth-github (1.3.0)
+    omniauth-github (1.4.0)
       omniauth (~> 1.5)
       omniauth-oauth2 (>= 1.4.0, < 2.0)
-    omniauth-oauth2 (1.6.0)
-      oauth2 (~> 1.1)
+    omniauth-oauth2 (1.7.0)
+      oauth2 (~> 1.4)
       omniauth (~> 1.9)
     omniauth-rails_csrf_protection (0.1.2)
       actionpack (>= 4.2)
@@ -385,8 +386,8 @@ DEPENDENCIES
   listen (>= 3.0.5, < 3.2)
   loofah (>= 2.3.1)
   net-http-persistent (~> 2.9)
-  octokit
-  omniauth-github
+  octokit (~> 4.18.0)
+  omniauth-github (~> 1.4.0)
   omniauth-rails_csrf_protection (~> 0.1)
   pg
   pry