diff --git a/requirements.in b/requirements.in
index 4d45a98..9793ad5 100644
--- a/requirements.in
+++ b/requirements.in
@@ -1,7 +1,7 @@
 # The file contains the direct ckan requirements.
 # Use pip-compile to create a requirements.txt file from this
 Babel==2.3.4
-bleach==2.1.3
+bleach==3.3.0
 click==6.7
 fanstatic==0.12
 Flask==0.12.4
diff --git a/requirements.txt b/requirements.txt
index 066c867..a9a050a 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -4,64 +4,177 @@
 #
 #    pip-compile --output-file requirements.txt requirements.in
 #
-argparse==1.4.0           # via ofs
-Babel==2.3.4              # via flask-babel
-Beaker==1.9.0             # via pylons
-bleach==2.1.3
+argparse==1.4.0
+    # via ofs
+babel==2.3.4
+    # via
+    #   -r requirements.in
+    #   flask-babel
+beaker==1.9.0
+    # via pylons
+bleach==3.3.0
+    # via -r requirements.in
 click==6.7
-decorator==4.2.1          # via pylons, sqlalchemy-migrate
+    # via
+    #   -r requirements.in
+    #   flask
+    #   rq
+decorator==4.2.1
+    # via
+    #   pylons
+    #   sqlalchemy-migrate
 fanstatic==0.12
-Flask-Babel==0.11.2
-Flask==0.12.4             # via flask-babel
-FormEncode==1.3.1         # via pylons
-funcsigs==1.0.2           # via beaker
-html5lib==1.0.1           # via bleach
-itsdangerous==0.24        # via flask
-Jinja2==2.8               # via flask, flask-babel
-Mako==1.0.7               # via pylons
-Markdown==2.6.7
-MarkupSafe==1.0           # via jinja2, mako, webhelpers
-nose==1.3.7               # via pylons
+    # via -r requirements.in
+flask-babel==0.11.2
+    # via -r requirements.in
+flask==0.12.4
+    # via
+    #   -r requirements.in
+    #   flask-babel
+formencode==1.3.1
+    # via pylons
+funcsigs==1.0.2
+    # via beaker
+itsdangerous==0.24
+    # via flask
+jinja2==2.8
+    # via
+    #   -r requirements.in
+    #   flask
+    #   flask-babel
+mako==1.0.7
+    # via pylons
+markdown==2.6.7
+    # via -r requirements.in
+markupsafe==1.0
+    # via
+    #   jinja2
+    #   mako
+    #   webhelpers
+nose==1.3.7
+    # via pylons
 ofs==0.4.2
-Pairtree==0.7.1-T
+    # via -r requirements.in
+packaging==20.9
+    # via bleach
+pairtree==0.7.1-t
+    # via -r requirements.in
 passlib==1.6.5
+    # via -r requirements.in
 paste==1.7.5.1
-PasteDeploy==1.5.2        # via pastescript, pylons
-PasteScript==2.0.2        # via pylons
-pbr==1.10.0               # via sqlalchemy-migrate
+    # via
+    #   -r requirements.in
+    #   fanstatic
+    #   pastescript
+    #   pylons
+    #   weberror
+pastedeploy==1.5.2
+    # via
+    #   pastescript
+    #   pylons
+pastescript==2.0.2
+    # via pylons
+pbr==1.10.0
+    # via sqlalchemy-migrate
 polib==1.0.7
+    # via -r requirements.in
 psycopg2==2.7.3.2
-Pygments==2.2.0           # via weberror
-Pylons==0.9.7
+    # via -r requirements.in
+pygments==2.2.0
+    # via weberror
+pylons==0.9.7
+    # via -r requirements.in
+pyparsing==2.4.7
+    # via packaging
 pysolr==3.6.0
+    # via -r requirements.in
 python-dateutil==1.5
+    # via -r requirements.in
 python-magic==0.4.15
+    # via -r requirements.in
 pytz==2016.7
+    # via
+    #   -r requirements.in
+    #   babel
+    #   tzlocal
 pyutilib.component.core==4.6.4
-redis==2.10.6             # via rq
-repoze.lru==0.7           # via routes
+    # via -r requirements.in
+redis==2.10.6
+    # via rq
+repoze.lru==0.7
+    # via routes
 repoze.who-friendlyform==1.0.8
+    # via -r requirements.in
 repoze.who==2.3
+    # via
+    #   -r requirements.in
+    #   repoze.who-friendlyform
 requests==2.11.1
-Routes==1.13              # via pylons
+    # via
+    #   -r requirements.in
+    #   pysolr
+routes==1.13
+    # via
+    #   -r requirements.in
+    #   pylons
 rq==0.6.0
+    # via -r requirements.in
 simplejson==3.10.0
-six==1.11.0               # via bleach, html5lib, pastescript, pyutilib.component.core, sqlalchemy-migrate
+    # via
+    #   -r requirements.in
+    #   pylons
+six==1.11.0
+    # via
+    #   bleach
+    #   pastescript
+    #   pyutilib.component.core
+    #   sqlalchemy-migrate
 sqlalchemy-migrate==0.10.0
-SQLAlchemy==1.1.11        # via sqlalchemy-migrate
+    # via -r requirements.in
+sqlalchemy==1.1.11
+    # via
+    #   -r requirements.in
+    #   sqlalchemy-migrate
 sqlparse==0.2.2
-Tempita==0.5.2            # via pylons, sqlalchemy-migrate, weberror
+    # via
+    #   -r requirements.in
+    #   sqlalchemy-migrate
+tempita==0.5.2
+    # via
+    #   pylons
+    #   sqlalchemy-migrate
+    #   weberror
 tzlocal==1.3
+    # via -r requirements.in
 unicodecsv==0.14.1
+    # via -r requirements.in
 vdm==0.14
-webencodings==0.5.1       # via html5lib
-WebError==0.13.1          # via pylons
-WebHelpers==1.3           # via pylons
-WebOb==1.0.8              # via fanstatic, pylons, repoze.who, repoze.who-friendlyform, weberror, webtest
-WebTest==1.4.3            # via pylons
-Werkzeug==0.14.1          # via flask
+    # via -r requirements.in
+webencodings==0.5.1
+    # via bleach
+weberror==0.13.1
+    # via pylons
+webhelpers==1.3
+    # via
+    #   -r requirements.in
+    #   pylons
+webob==1.0.8
+    # via
+    #   -r requirements.in
+    #   fanstatic
+    #   pylons
+    #   repoze.who
+    #   repoze.who-friendlyform
+    #   weberror
+    #   webtest
+webtest==1.4.3
+    # via
+    #   -r requirements.in
+    #   pylons
+werkzeug==0.14.1
+    # via flask
 zope.interface==4.3.2
-
-# The following packages are commented out because they are
-# considered to be unsafe in a requirements file:
-# setuptools                # via repoze.who, zope.interface
+    # via
+    #   -r requirements.in
+    #   repoze.who
+    #   repoze.who-friendlyform