diff --git a/Gemfile b/Gemfile
index bb8a3c6..283c6f1 100644
--- a/Gemfile
+++ b/Gemfile
@@ -20,7 +20,7 @@ gem 'workflow', '1.0.0'
 gem 'workflow_on_mongoid'
 gem 'git'
 gem 'activemerchant'
-gem 'nokogiri', '1.6.7'
+gem 'nokogiri', '1.10.4'
 gem 'sanitize', '2.1.0'
 gem 'redis'
 gem 'github_api', '0.18.2'
diff --git a/Gemfile.lock b/Gemfile.lock
index 820932a..d82c557 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -107,7 +107,7 @@ GEM
     braintree (2.47.0)
       builder (>= 2.0.0)
     bson (3.2.6)
-    builder (3.2.2)
+    builder (3.2.3)
     bunny (1.6.3)
       amq-protocol (>= 1.9.2)
     celluloid (0.17.4)
@@ -145,10 +145,12 @@ GEM
       coffee-script-source
       execjs
     coffee-script-source (1.10.0)
+    concurrent-ruby (1.1.5)
     couchrest (1.2.1)
       mime-types (>= 1.15)
       multi_json (~> 1.7, ~> 1.0)
       rest-client (~> 1.8.0)
+    crass (1.0.4)
     daemons (1.1.9)
     dante (0.2.0)
     debug_inspector (0.0.2)
@@ -195,8 +197,8 @@ GEM
     gitlab (3.7.0)
       httparty (~> 0.13.0)
       terminal-table
-    globalid (0.3.6)
-      activesupport (>= 4.1.0)
+    globalid (0.4.2)
+      activesupport (>= 4.2.0)
     google-api-client (0.9.8)
       addressable (~> 2.3)
       googleauth (~> 0.5)
@@ -231,7 +233,8 @@ GEM
       multi_xml (>= 0.5.2)
     httpclient (2.8.3)
     hurley (0.2)
-    i18n (0.7.0)
+    i18n (0.9.5)
+      concurrent-ruby (~> 1.0)
     ice_nine (0.11.2)
     jquery-rails (3.1.2)
       railties (>= 3.0, < 5.0)
@@ -254,16 +257,18 @@ GEM
     logging (2.2.2)
       little-plugger (~> 1.1)
       multi_json (~> 1.10)
-    loofah (2.0.3)
+    loofah (2.2.3)
+      crass (~> 1.0.2)
       nokogiri (>= 1.5.9)
     macaddr (1.7.1)
       systemu (~> 2.6.2)
-    mail (2.6.3)
-      mime-types (>= 1.16, < 3)
+    mail (2.7.1)
+      mini_mime (>= 0.1.1)
     memoist (0.16.0)
     metaclass (0.0.4)
-    mime-types (2.6.2)
-    mini_portile2 (2.0.0)
+    mime-types (2.99.3)
+    mini_mime (1.0.2)
+    mini_portile2 (2.4.0)
     minitest (5.8.2)
     minitest-reporters (1.1.5)
       ansi
@@ -286,10 +291,10 @@ GEM
     netaddr (1.5.0)
     netrc (0.11.0)
     nio4r (2.3.1)
-    nokogiri (1.6.7)
-      mini_portile2 (~> 2.0.0.rc2)
-    nokogiri (1.6.7-x64-mingw32)
-      mini_portile2 (~> 2.0.0.rc2)
+    nokogiri (1.10.4)
+      mini_portile2 (~> 2.4.0)
+    nokogiri (1.10.4-x64-mingw32)
+      mini_portile2 (~> 2.4.0)
     oauth2 (1.4.0)
       faraday (>= 0.8, < 0.13)
       jwt (~> 1.0)
@@ -315,7 +320,7 @@ GEM
     protected_attributes (1.1.3)
       activemodel (>= 4.0.1, < 5.0)
     public_suffix (3.0.3)
-    rack (1.6.4)
+    rack (1.6.11)
     rack-test (0.6.3)
       rack (>= 1.0)
     rack-timeout (0.1.1)
@@ -332,12 +337,12 @@ GEM
       sprockets-rails
     rails-deprecated_sanitizer (1.0.3)
       activesupport (>= 4.2.0.alpha)
-    rails-dom-testing (1.0.7)
-      activesupport (>= 4.2.0.beta, < 5.0)
-      nokogiri (~> 1.6.0)
+    rails-dom-testing (1.0.9)
+      activesupport (>= 4.2.0, < 5.0)
+      nokogiri (~> 1.6)
       rails-deprecated_sanitizer (>= 1.0.1)
-    rails-html-sanitizer (1.0.2)
-      loofah (~> 2.0)
+    rails-html-sanitizer (1.2.0)
+      loofah (~> 2.2, >= 2.2.2)
     rails_autolink (1.1.6)
       rails (> 3.1)
     railties (4.2.4)
@@ -411,7 +416,7 @@ GEM
       eventmachine (~> 1.0)
       rack (~> 1.0)
     thor (0.19.1)
-    thread_safe (0.3.4)
+    thread_safe (0.3.6)
     tilt (2.0.1)
     timecop (0.8.0)
     timers (4.2.0)
@@ -495,7 +500,7 @@ DEPENDENCIES
   mongoid (~> 5.0.0)
   net-http-pipeline
   netaddr (~> 1.5.0)
-  nokogiri (= 1.6.7)
+  nokogiri (= 1.10.4)
   peek
   peek-git
   peek-performance_bar