diff --git a/package.json b/package.json
index f1b93d1..faa65ea 100644
--- a/package.json
+++ b/package.json
@@ -29,27 +29,27 @@
     "autoprefixer-stylus": "^0.9.4",
     "batch": "0.5.2",
     "bluebird": "^3.4.0",
-    "body-parser": "1.12.0",
+    "body-parser": "1.18.2",
     "builder-jade": "1.0.1",
     "commander": "2.5.0",
     "component": "1.0.0",
     "component-builder": "1.2.0",
     "component-resolver": "1.2.7",
-    "compression": "1.2.1",
+    "compression": "1.7.1",
     "connect-mongo": "0.8.2",
     "cookie-parser": "1.3.4",
     "crypto": "0.0.3",
-    "debug": "2.1.3",
+    "debug": "2.6.9",
     "disqus-sso-express": "^0.1.0",
     "errorhandler": "1.3.0",
-    "express": "4.13.3",
-    "express-session": "v1.9.2",
+    "express": "4.16.0",
+    "express-session": "v1.15.6",
     "jade": "1.7.0 ",
     "merge-util": "0.1.0",
     "mkdirp": "0.5.0",
     "mongodb": "^2.2.9",
-    "mongoose": "3.8.24",
-    "mongoose-type-url": "1.0.0",
+    "mongoose": "4.11.14",
+    "mongoose-type-url": "1.0.2",
     "mongoose-validator": "1.0.3",
     "node-cache": "^3.2.1",
     "node-path": "0.0.3",
@@ -59,7 +59,7 @@
     "passport-github": "0.1.5",
     "passport-twitter": "1.0.2",
     "ready": "0.1.1",
-    "serve-favicon": "2.1.7",
+    "serve-favicon": "2.4.5",
     "string-to-js": "0.0.1",
     "stylus": "0.49.3",
     "t-component": "1.0.0",