diff --git a/Gemfile b/Gemfile
index bdacdc8b8..79f29fd4b 100644
--- a/Gemfile
+++ b/Gemfile
@@ -97,7 +97,7 @@ group :test do
   gem 'shoulda-matchers'
   gem 'simplecov', '~> 0.22.0'
   gem 'simplecov-cobertura'
-  gem 'sinatra', '~> 4.1.0'
+  gem 'sinatra', '~> 4.2.0'
   gem 'timecop'
   gem 'webmock'
   gem 'websocket-driver', '= 0.7.3'
diff --git a/Gemfile.lock b/Gemfile.lock
index dfe2c42ab..33d405785 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -354,7 +354,7 @@ GEM
     mini_portile2 (2.8.9)
     minitest (5.25.5)
     multi_json (1.15.0)
-    mustermann (3.0.3)
+    mustermann (3.0.4)
       ruby2_keywords (~> 0.0.1)
     net-http (0.4.1)
       uri
@@ -422,13 +422,13 @@ GEM
     pundit (2.4.0)
       activesupport (>= 3.0.0)
     racc (1.8.1)
-    rack (3.1.16)
+    rack (3.1.18)
     rack-attack (6.7.0)
       rack (>= 1.0, < 4)
     rack-canonical-host (1.3.0)
       addressable (> 0, < 3)
       rack (>= 1.6, < 4)
-    rack-protection (4.1.1)
+    rack-protection (4.2.0)
       base64 (>= 0.1.0)
       logger (>= 1.6.0)
       rack (>= 3.0.0, < 4)
@@ -582,11 +582,11 @@ GEM
       simplecov (~> 0.19)
     simplecov-html (0.13.1)
     simplecov_json_formatter (0.1.4)
-    sinatra (4.1.1)
+    sinatra (4.2.0)
       logger (>= 1.6.0)
       mustermann (~> 3.0)
       rack (>= 3.0.0, < 4)
-      rack-protection (= 4.1.1)
+      rack-protection (= 4.2.0)
       rack-session (>= 2.0.0, < 3)
       tilt (~> 2.0)
     sshkit (1.23.2)
@@ -600,7 +600,7 @@ GEM
       unicode-display_width (>= 1.1.1, < 4)
     thor (1.4.0)
     thread_safe (0.3.6)
-    tilt (2.4.0)
+    tilt (2.6.1)
     timecop (0.9.10)
     timeout (0.4.3)
     tzinfo (2.0.6)
@@ -722,7 +722,7 @@ DEPENDENCIES
   simple_form (~> 5.3, >= 5.3.0)
   simplecov (~> 0.22.0)
   simplecov-cobertura
-  sinatra (~> 4.1.0)
+  sinatra (~> 4.2.0)
   timecop
   uglifier
   view_component (~> 3.21)