diff --git a/package.json b/package.json
index 63beebb..38ae1a5 100644
--- a/package.json
+++ b/package.json
@@ -5,23 +5,23 @@
   "main": "app.js",
   "license": "MIT",
   "dependencies": {
-    "async": "^2.0.0-rc.6",
+    "async": "^2.0.1",
     "blueimp-md5": "^2.3.0",
-    "body-parser": "^1.15.1",
-    "chance": "^1.0.3",
+    "body-parser": "^1.15.2",
+    "chance": "^1.0.4",
     "cheerio": "^0.20.0",
     "compression": "^1.6.2",
-    "connect-session-sequelize": "^3.0.0",
+    "connect-session-sequelize": "^3.1.0",
     "cookie": "0.3.1",
     "cookie-parser": "1.4.3",
     "diff-match-patch": "git+https://github.com/hackmdio/diff-match-patch.git",
-    "ejs": "^2.4.2",
+    "ejs": "^2.5.1",
     "emojify.js": "^1.1.0",
-    "express": ">=4.13",
-    "express-session": "^1.13.0",
+    "express": ">=4.14",
+    "express-session": "^1.14.0",
     "formidable": "^1.0.17",
-    "helmet": "^2.1.1",
-    "highlight.js": "^9.4.0",
+    "helmet": "^2.1.2",
+    "highlight.js": "^9.5.0",
     "imgur": "git+https://github.com/hackmdio/node-imgur.git",
     "jsdom-nogyp": "^0.8.3",
     "lz-string": "1.4.4",
@@ -29,7 +29,7 @@
     "markdown-pdf": "^7.0.0",
     "meta-marked": "^0.4.1",
     "method-override": "^2.3.6",
-    "moment": "^2.13.0",
+    "moment": "^2.14.1",
     "morgan": "^1.7.0",
     "mysql": "^2.11.1",
     "node-uuid": "^1.4.7",
@@ -40,20 +40,20 @@
     "passport-gitlab2": "^2.2.0",
     "passport-google-oauth20": "^1.0.0",
     "passport-twitter": "^1.0.4",
-    "passport.socketio": "^3.6.1",
-    "pg": "^5.1.0",
+    "passport.socketio": "^3.6.2",
+    "pg": "^6.0.3",
     "pg-hstore": "^2.3.2",
     "randomcolor": "^0.4.4",
-    "request": "^2.72.0",
+    "request": "^2.74.0",
     "reveal.js": "3.3.0",
-    "sequelize": "^3.23.3",
+    "sequelize": "^3.23.6",
     "sequelize-cli": "^2.4.0",
     "shortid": "2.2.6",
-    "socket.io": "1.4.6",
+    "socket.io": "1.4.8",
     "sqlite3": "^3.1.4",
     "string": "^3.3.1",
     "tedious": "^1.14.0",
-    "toobusy-js": "^0.5.0",
+    "toobusy-js": "^0.5.1",
     "winston": "^2.2.0"
   },
   "engines": {