diff --git a/requirements.txt b/requirements.txt
index dc16326e44..c353458f55 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -3,12 +3,12 @@
 # process, which may cause wedges in the gate later.
 pbr!=2.1.0,>=2.0.0 # Apache-2.0
 docker>=2.4.2 # Apache-2.0
-cryptography!=2.0,>=1.6 # BSD/Apache-2.0
+cryptography!=2.0,>=1.9 # BSD/Apache-2.0
 Jinja2!=2.9.0,!=2.9.1,!=2.9.2,!=2.9.3,!=2.9.4,>=2.8 # BSD License (3 clause)
 gitdb>=0.6.4 # BSD License (3 clause)
 GitPython>=1.0.1 # BSD License (3 clause)
 six>=1.9.0 # MIT
-oslo.config!=4.3.0,!=4.4.0,>=4.0.0 # Apache-2.0
-oslo.utils>=3.20.0 # Apache-2.0
+oslo.config>=4.6.0 # Apache-2.0
+oslo.utils>=3.28.0 # Apache-2.0
 setuptools!=24.0.0,!=34.0.0,!=34.0.1,!=34.0.2,!=34.0.3,!=34.1.0,!=34.1.1,!=34.2.0,!=34.3.0,!=34.3.1,!=34.3.2,!=36.2.0,>=16.0 # PSF/ZPL
-netaddr!=0.7.16,>=0.7.13 # BSD
+netaddr>=0.7.18 # BSD
diff --git a/test-requirements.txt b/test-requirements.txt
index f73dd270e9..c2ef3f4d15 100644
--- a/test-requirements.txt
+++ b/test-requirements.txt
@@ -2,13 +2,13 @@
 # of appearance. Changing the order has an impact on the overall integration
 # process, which may cause wedges in the gate later.
 bandit>=1.1.0 # Apache-2.0
-bashate>=0.2 # Apache-2.0
+bashate>=0.5.1 # Apache-2.0
 beautifulsoup4>=4.6.0 # MIT
 coverage!=4.4,>=4.0 # Apache-2.0
 ddt>=1.0.1 # MIT
 doc8 # Apache-2.0
 extras # MIT
-graphviz!=0.5.0,>=0.4.0 # MIT License
+graphviz!=0.5.0,>=0.4 # MIT License
 hacking!=0.13.0,<0.14,>=0.12.0 # Apache-2.0
 openstackdocstheme>=1.16.0 # Apache-2.0
 oslo.log>=3.30.0 # Apache-2.0
@@ -18,9 +18,9 @@ PrettyTable<0.8,>=0.7.1 # BSD
 PyYAML>=3.10 # MIT
 python-barbicanclient!=4.5.0,!=4.5.1,>=4.0.0 # Apache-2.0
 python-ceilometerclient>=2.5.0 # Apache-2.0
-python-heatclient>=1.6.1 # Apache-2.0
+python-heatclient>=1.10.0 # Apache-2.0
 python-neutronclient>=6.3.0 # Apache-2.0
-python-openstackclient!=3.10.0,>=3.3.0 # Apache-2.0
+python-openstackclient>=3.12.0 # Apache-2.0
 python-swiftclient>=3.2.0 # Apache-2.0
 pytz>=2013.6 # MIT
 sphinx>=1.6.2 # BSD