diff --git a/Gemfile b/Gemfile
index 049fb06..e76f8b1 100644
--- a/Gemfile
+++ b/Gemfile
@@ -28,7 +28,7 @@ gem "rake", "~> 13.2"
 gem "redis", "~> 5.3"
 gem "rspec", "~> 3.12"
 gem "sentry-ruby", "~> 5.26"
-gem "sinatra", "~> 4.1"
+gem "sinatra", "~> 4.2"
 gem "sinatra-activerecord", "~> 2.0.27"
 gem "sinatra-contrib", "~> 4.0"
 gem "sinatra-cross_origin", "~> 0.4.0"
diff --git a/Gemfile.lock b/Gemfile.lock
index 78ea7e6..62a8a52 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -67,7 +67,7 @@ GEM
     multi_xml (0.7.2)
       bigdecimal (~> 3.1)
     murmurhash3 (0.1.7)
-    mustermann (3.0.3)
+    mustermann (3.0.4)
       ruby2_keywords (~> 0.0.1)
     net-http (0.6.0)
       uri
@@ -91,7 +91,7 @@ GEM
       nio4r (~> 2.0)
     racc (1.8.1)
     rack (3.2.1)
-    rack-protection (4.1.1)
+    rack-protection (4.2.1)
       base64 (>= 0.1.0)
       logger (>= 1.6.0)
       rack (>= 3.0.0, < 4)
@@ -169,28 +169,28 @@ GEM
     sentry-ruby (5.26.0)
       bigdecimal
       concurrent-ruby (~> 1.0, >= 1.0.2)
-    sinatra (4.1.1)
+    sinatra (4.2.1)
       logger (>= 1.6.0)
       mustermann (~> 3.0)
       rack (>= 3.0.0, < 4)
-      rack-protection (= 4.1.1)
+      rack-protection (= 4.2.1)
       rack-session (>= 2.0.0, < 3)
       tilt (~> 2.0)
     sinatra-activerecord (2.0.28)
       activerecord (>= 4.1)
       sinatra (>= 1.0)
-    sinatra-contrib (4.1.1)
+    sinatra-contrib (4.2.1)
       multi_json (>= 0.0.2)
       mustermann (~> 3.0)
-      rack-protection (= 4.1.1)
-      sinatra (= 4.1.1)
+      rack-protection (= 4.2.1)
+      sinatra (= 4.2.1)
       tilt (~> 2.0)
     sinatra-cross_origin (0.4.0)
     snaky_hash (2.0.3)
       hashie (>= 0.1.0, < 6)
       version_gem (>= 1.1.8, < 3)
     systemu (2.6.5)
-    tilt (2.6.0)
+    tilt (2.6.1)
     timecop (0.9.10)
     timeout (0.4.3)
     tzinfo (2.0.6)
@@ -232,7 +232,7 @@ DEPENDENCIES
   rubocop-govuk (~> 5.1)
   rubocop-performance (~> 1.21)
   sentry-ruby (~> 5.26)
-  sinatra (~> 4.1)
+  sinatra (~> 4.2)
   sinatra-activerecord (~> 2.0.27)
   sinatra-contrib (~> 4.0)
   sinatra-cross_origin (~> 0.4.0)