diff --git a/Gemfile b/Gemfile
index 652d9b6aa..c66a70c90 100644
--- a/Gemfile
+++ b/Gemfile
@@ -3,7 +3,7 @@ source 'https://rubygems.org'
 ruby '2.6.5'
 gem 'rails', '~> 5.2.4'
 gem 'pg', '~> 1.2'
-gem 'devise', '~> 4.7'
+gem 'devise', '~> 4.8'
 gem 'devise_invitable', '~> 2.0'
 gem 'heroku-api'
 gem 'sprockets'
diff --git a/Gemfile.lock b/Gemfile.lock
index bcb0d8319..5c4e8befa 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -90,7 +90,7 @@ GEM
     autoprefixer-rails (9.7.3)
       execjs
     backports (3.15.0)
-    bcrypt (3.1.13)
+    bcrypt (3.1.16)
     binding_of_caller (0.8.0)
       debug_inspector (>= 0.0.1)
     bootstrap3-datetimepicker-rails (4.17.47)
@@ -120,7 +120,7 @@ GEM
       execjs
     coffee-script-source (1.12.2)
     commonjs (0.2.7)
-    concurrent-ruby (1.1.6)
+    concurrent-ruby (1.1.8)
     contracts (0.16.0)
     cookiejar (0.3.3)
     crack (0.4.3)
@@ -154,7 +154,7 @@ GEM
     datetime_picker_rails (0.0.7)
       momentjs-rails (>= 2.8.1)
     debug_inspector (0.0.3)
-    devise (4.7.1)
+    devise (4.8.0)
       bcrypt (~> 3.0)
       orm_adapter (~> 0.1)
       railties (>= 4.1.0)
@@ -182,7 +182,7 @@ GEM
     em-synchrony (1.0.6)
       eventmachine (>= 1.0.0.beta.1)
     equalizer (0.0.11)
-    erubi (1.9.0)
+    erubi (1.10.0)
     eventmachine (1.2.7)
     eventmachine_httpserver (0.2.1)
     excon (0.71.0)
@@ -232,7 +232,7 @@ GEM
     httparty (0.18.0)
       mime-types (~> 3.0)
       multi_xml (>= 0.5.2)
-    i18n (1.8.2)
+    i18n (1.8.10)
       concurrent-ruby (~> 1.0)
     idn-ruby (0.1.0)
     interception (0.5)
@@ -283,7 +283,7 @@ GEM
     letter_opener (1.7.0)
       launchy (~> 2.2)
     libv8 (3.16.14.19)
-    loofah (2.5.0)
+    loofah (2.9.1)
       crass (~> 1.0.2)
       nokogiri (>= 1.5.9)
     mail (2.7.1)
@@ -298,10 +298,12 @@ GEM
     mime-types (3.3.1)
       mime-types-data (~> 3.2015)
     mime-types-data (3.2019.1009)
-    mimemagic (0.3.3)
+    mimemagic (0.3.10)
+      nokogiri (~> 1)
+      rake
     mini_mime (1.0.2)
     mini_portile2 (2.4.0)
-    minitest (5.14.0)
+    minitest (5.14.4)
     momentjs-rails (2.20.1)
       railties (>= 3.1)
     multi_json (1.14.1)
@@ -353,7 +355,7 @@ GEM
       multi_json
     puma (4.3.3)
       nio4r (~> 2.0)
-    rack (2.2.2)
+    rack (2.2.3)
     rack-cors (1.1.1)
       rack (>= 2.0.0)
     rack-protection (2.0.8.1)
@@ -396,12 +398,12 @@ GEM
       thor (>= 0.19.0, < 2.0)
     rainbow (3.0.0)
     raindrops (0.19.1)
-    rake (13.0.1)
+    rake (13.0.3)
     rbtree3 (0.6.0)
     redcarpet (3.5.0)
     ref (2.0.0)
     regexp_parser (1.6.0)
-    responders (3.0.0)
+    responders (3.0.1)
       actionpack (>= 5.0)
       railties (>= 5.0)
     rspec-activemodel-mocks (1.1.0)
@@ -513,7 +515,7 @@ GEM
     twitter-text (3.0.0)
       idn-ruby
       unf (~> 0.1.0)
-    tzinfo (1.2.7)
+    tzinfo (1.2.9)
       thread_safe (~> 0.1)
     uglifier (4.2.0)
       execjs (>= 0.3.0, < 3)
@@ -527,8 +529,8 @@ GEM
       raindrops (~> 0.7)
     uri-handler (1.0.2)
     vcr (5.1.0)
-    warden (1.2.8)
-      rack (>= 2.0.6)
+    warden (1.2.9)
+      rack (>= 2.0.9)
     webmock (3.8.3)
       addressable (>= 2.3.6)
       crack (>= 0.3.2)
@@ -557,7 +559,7 @@ DEPENDENCIES
   cucumber-rails
   cucumber-rails-training-wheels
   database_cleaner (= 1.8.3)
-  devise (~> 4.7)
+  devise (~> 4.8)
   devise_invitable (~> 2.0)
   dotenv-rails
   execjs