diff --git a/Gemfile b/Gemfile
index 4f7fb3661..e10fbe3ef 100644
--- a/Gemfile
+++ b/Gemfile
@@ -51,7 +51,7 @@ gem 'coveralls', '0.8.21', require: false
 gem 'rubyzip', '1.2.1'
 
 group :development, :test do
-  gem 'sass-rails', '~> 5.0.5' # locked
+  gem 'sass-rails', '~> 5.0.7' # locked
   gem 'coffee-rails', '~> 4.2.1'
   gem 'pry', '~> 0.10.4'
   gem 'capybara', '~> 2.14.0'
diff --git a/Gemfile.lock b/Gemfile.lock
index 5d862e277..64d0b652a 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -131,6 +131,7 @@ GEM
       term-ansicolor (~> 1.3)
       thor (~> 0.19.4)
       tins (~> 1.6)
+    crass (1.0.4)
     daemons (1.2.3)
     deprecation (0.2.2)
       activesupport
@@ -181,7 +182,7 @@ GEM
       hydra-access-controls (= 6.5.2)
       hydra-core (= 6.5.2)
       rails (>= 3.2.6)
-    i18n (0.8.1)
+    i18n (0.8.6)
     jaro_winkler (1.5.1)
     jettywrapper (2.0.3)
       activesupport (>= 3.0.0)
@@ -206,7 +207,8 @@ GEM
       activesupport (>= 4, < 5.2)
       railties (>= 4, < 5.2)
     logstash-event (1.2.02)
-    loofah (2.0.3)
+    loofah (2.2.2)
+      crass (~> 1.0.2)
       nokogiri (>= 1.5.9)
     mail (2.7.0.rc1)
       mini_mime (>= 0.1.1)
@@ -218,8 +220,8 @@ GEM
     mime-types (2.99.3)
     mini_mime (0.1.3)
     mini_portile2 (2.3.0)
-    minitest (5.10.2)
-    multi_json (1.12.1)
+    minitest (5.10.3)
+    multi_json (1.13.1)
     multi_xml (0.6.0)
     multipart-post (2.0.0)
     net-scp (1.2.1)
@@ -268,7 +270,7 @@ GEM
       nokogiri (~> 1.6)
       rails (>= 4.2.0, < 6.0)
       rdf
-    rack (1.6.8)
+    rack (1.6.10)
     rack-dev-mark (0.7.5)
       rack (>= 1.1)
     rack-test (0.6.3)
@@ -286,12 +288,12 @@ GEM
       sprockets-rails
     rails-deprecated_sanitizer (1.0.3)
       activesupport (>= 4.2.0.alpha)
-    rails-dom-testing (1.0.8)
-      activesupport (>= 4.2.0.beta, < 5.0)
+    rails-dom-testing (1.0.9)
+      activesupport (>= 4.2.0, < 5.0)
       nokogiri (~> 1.6)
       rails-deprecated_sanitizer (>= 1.0.1)
-    rails-html-sanitizer (1.0.3)
-      loofah (~> 2.0)
+    rails-html-sanitizer (1.0.4)
+      loofah (~> 2.2, >= 2.2.2)
     rails_autolink (1.1.6)
       rails (> 3.1)
     railties (4.2.7.1)
@@ -302,6 +304,9 @@ GEM
     rainbow (3.0.0)
     raindrops (0.18.0)
     rake (12.3.1)
+    rb-fsevent (0.10.3)
+    rb-inotify (0.9.10)
+      ffi (>= 0.5.0, < 2)
     rdf (1.1.1.1)
     rdf-rdfxml (1.0.1)
       rdf (>= 1.0)
@@ -363,8 +368,12 @@ GEM
       nokogiri
       rest-client
     rubyzip (1.2.1)
-    sass (3.4.22)
-    sass-rails (5.0.5)
+    sass (3.5.7)
+      sass-listen (~> 4.0.0)
+    sass-listen (4.0.0)
+      rb-fsevent (~> 0.9, >= 0.9.4)
+      rb-inotify (~> 0.9, >= 0.9.7)
+    sass-rails (5.0.7)
       railties (>= 4.0.0, < 6)
       sass (~> 3.1)
       sprockets (>= 2.8, < 4.0)
@@ -390,7 +399,7 @@ GEM
       nokogiri
       stomp
       xml-simple
-    sprockets (2.12.4)
+    sprockets (2.12.5)
       hike (~> 1.2)
       multi_json (~> 1.0)
       rack (~> 1.0)
@@ -409,7 +418,7 @@ GEM
     thread_safe (0.3.6)
     tilt (1.4.1)
     tins (1.13.3)
-    tzinfo (1.2.3)
+    tzinfo (1.2.5)
       thread_safe (~> 0.1)
     uber (0.0.15)
     uglifier (3.2.0)
@@ -478,7 +487,7 @@ DEPENDENCIES
   rubocop (= 0.58.2)
   rubocop-rspec (= 1.15.1)
   rubyzip (= 1.2.1)
-  sass-rails (~> 5.0.5)
+  sass-rails (~> 5.0.7)
   selenium-webdriver (= 3.4.0)
   share_notify!
   simplecov (~> 0.14.1)