diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml
index 5e33654..a0f4104 100644
--- a/.github/workflows/publish.yaml
+++ b/.github/workflows/publish.yaml
@@ -22,7 +22,7 @@ jobs:
         run: python3 setup.py sdist bdist_wheel
 
       - name: Publish to PyPI
-        uses: pypa/gh-action-pypi-publish@e777b33388fefa46ce597d8afa9c15a5357af36f
+        uses: pypa/gh-action-pypi-publish@aec4e82833d00547d2c8e4744a0d08766a02629a
         with:
           user: __token__
           password: ${{ secrets.pypi_password }}
diff --git a/setup.py b/setup.py
index de1b7b0..d7f5cb6 100755
--- a/setup.py
+++ b/setup.py
@@ -22,13 +22,13 @@
     packages=find_packages(),
     install_requires=[
         "canonicalwebteam.yaml-responses[flask] (>=1,<2)",
-        "flask==1.1.2",
+        "flask==1.1.4",
         "jinja2 (>=3,<3.1.0)",
         "gevent==21.12.0",
-        "greenlet==1.1.2",
+        "greenlet==1.1.3.post0",
         "talisker[gunicorn,gevent,flask,prometheus,raven]",
         "Werkzeug (>=1.0.0, <1.2)",
-        "markupsafe >= 1.0, < 2.1.0",
+        "markupsafe >=2.1, <3",
         "itsdangerous >= 0.24, < 2.0",
     ],
     dependency_links=[],