diff --git a/src/supermarket/Gemfile.lock b/src/supermarket/Gemfile.lock
index 743961cc8d..2ab9283987 100644
--- a/src/supermarket/Gemfile.lock
+++ b/src/supermarket/Gemfile.lock
@@ -82,7 +82,7 @@ GEM
       ice_nine (~> 0.11.0)
       thread_safe (~> 0.3, >= 0.3.1)
     bcrypt_pbkdf (1.1.0.rc1)
-    brakeman (3.6.1)
+    brakeman (5.0.4)
     builder (3.2.4)
     byebug (11.1.3)
     capybara (2.18.0)
@@ -177,7 +177,7 @@ GEM
     crack (0.4.3)
       safe_yaml (~> 1.0.0)
     crass (1.0.6)
-    css_parser (1.5.0)
+    css_parser (1.9.0)
       addressable
     database_cleaner (1.6.1)
     ddtrace (0.7.1)
@@ -187,10 +187,10 @@ GEM
     diff-lcs (1.4)
     domain_name (0.5.20190701)
       unf (>= 0.0.5, < 1.0.0)
-    dotenv (2.7.5)
-    dotenv-rails (2.7.5)
-      dotenv (= 2.7.5)
-      railties (>= 3.2, < 6.1)
+    dotenv (2.7.6)
+    dotenv-rails (2.7.6)
+      dotenv (= 2.7.6)
+      railties (>= 3.2)
     ed25519 (1.2.4)
     equalizer (0.0.11)
     equatable (0.6.1)
@@ -435,12 +435,12 @@ GEM
       cliver (~> 0.3.1)
       websocket-driver (>= 0.2.0)
     polyglot (0.3.5)
-    premailer (1.10.3)
+    premailer (1.15.0)
       addressable
-      css_parser (>= 1.4.10)
+      css_parser (>= 1.6.0)
       htmlentities (>= 4.0.0)
-    premailer-rails (1.9.6)
-      actionmailer (>= 3, < 6)
+    premailer-rails (1.11.1)
+      actionmailer (>= 3)
       premailer (~> 1.7, >= 1.7.9)
     proxifier (1.0.3)
     pry (0.10.4)
@@ -475,10 +475,10 @@ GEM
       bundler (>= 1.3.0)
       railties (= 5.2.6)
       sprockets-rails (>= 2.0.0)
-    rails-controller-testing (1.0.1)
-      actionpack (~> 5.x)
-      actionview (~> 5.x)
-      activesupport (~> 5.x)
+    rails-controller-testing (1.0.5)
+      actionpack (>= 5.0.1.rc1)
+      actionview (>= 5.0.1.rc1)
+      activesupport (>= 5.0.1.rc1)
     rails-dom-testing (2.0.3)
       activesupport (>= 4.2.0)
       nokogiri (>= 1.6)