diff --git a/requirements/pip.txt b/requirements/pip.txt
index 05f88fcf907..755b68a54fc 100644
--- a/requirements/pip.txt
+++ b/requirements/pip.txt
@@ -1,7 +1,7 @@
 # Base packages
-pip==19.2.2
+pip==19.2.3
 appdirs==1.4.3
-virtualenv==16.7.2
+virtualenv==16.7.4
 
 django==1.11.23  # pyup: <1.12
 django-extensions==2.2.1
@@ -42,7 +42,7 @@ celery==4.1.1  # pyup: ignore
 
 django-allauth==0.39.1
 
-GitPython==3.0.1
+GitPython==3.0.2
 
 # Search
 elasticsearch==6.4.0  # pyup: <7.0.0
@@ -76,7 +76,7 @@ pytz==2019.2
 Unipath==1.1
 django-kombu==0.9.4
 mock==3.0.5
-stripe==2.34.0
+stripe==2.35.1
 
 # unicode-slugify==0.1.5 is not released on PyPI yet
 git+https://github.com/mozilla/unicode-slugify@b696c37#egg=unicode-slugify==0.1.5
@@ -89,7 +89,7 @@ docker==4.0.2
 django-textclassifier==1.0
 # django-textclassifier doesn't have pinned versions
 # if there is an update they could break our code
-nltk==3.4.4
+nltk==3.4.5
 textblob==0.15.3
 
 django-annoying==0.10.4
diff --git a/requirements/testing.txt b/requirements/testing.txt
index 6267c589dde..b387b094976 100644
--- a/requirements/testing.txt
+++ b/requirements/testing.txt
@@ -22,7 +22,7 @@ execnet==1.7.0
 # (Pinned to 4.4.2 since what we need for testing is still useful)
 Mercurial==4.4.2  # pyup: ignore
 
-yamale==1.10.1
+yamale==2.0
 pytest-mock==1.10.4
 
 # local debugging tools