diff --git a/pkgs/applications/version-management/gitlab/Gemfile b/pkgs/applications/version-management/gitlab/Gemfile
index f6f3607cbd1be..11a17de84d357 100644
--- a/pkgs/applications/version-management/gitlab/Gemfile
+++ b/pkgs/applications/version-management/gitlab/Gemfile
@@ -8,114 +8,114 @@ def linux_only(require_as)
   RUBY_PLATFORM.include?('linux') && require_as
 end
 
-gem "rails", "~> 4.1.0"
+gem "rails", "~> 7.1.5", ">= 7.1.5.2"
 
 # Make links from text
-gem 'rails_autolink', '~> 1.1'
+gem 'rails_autolink', '~> 1.1', '>= 1.1.7'
 
 # Default values for AR models
-gem "default_value_for", "~> 3.0.0"
+gem "default_value_for", "~> 3.6.0"
 
 # Supported DBs
 gem "mysql2", group: :mysql
 gem "pg", group: :postgres
 
 # Auth
-gem "devise", '3.2.4'
-gem "devise-async", '0.9.0'
-gem 'omniauth', "~> 1.1.3"
-gem 'omniauth-google-oauth2'
-gem 'omniauth-twitter'
-gem 'omniauth-github'
-gem 'omniauth-shibboleth'
+gem "devise", "4.7.0"
+gem "devise-async", "1.0.0"
+gem 'omniauth', '~> 2.1.0'
+gem 'omniauth-google-oauth2', '>= 0.2.6'
+gem 'omniauth-twitter', '>= 1.1.0'
+gem 'omniauth-github', '>= 2.0.0'
+gem 'omniauth-shibboleth', '>= 1.1.2'
 
 # Extracting information from a git repository
 # Provide access to Gitlab::Git library
-gem "gitlab_git", '7.0.0.rc10'
+gem "gitlab_git", "7.0.0"
 
 # Ruby/Rack Git Smart-HTTP Server Handler
-gem 'gitlab-grack', '~> 2.0.0.pre', require: 'grack'
+gem 'gitlab-grack', '~> 2.0.0.0', require: 'grack'
 
 # LDAP Auth
-gem 'gitlab_omniauth-ldap', '1.1.0', require: "omniauth-ldap"
+gem 'gitlab_omniauth-ldap', '2.2.0', require: "omniauth-ldap"
 
 # Git Wiki
-gem 'gollum-lib', '~> 3.0.0'
+gem 'gollum-lib', '~> 4.2.7'
 
 # Language detection
 gem "gitlab-linguist", "~> 3.0.0", require: "linguist"
 
 # API
-gem "grape", "~> 0.6.1"
-gem "grape-entity", "~> 0.4.2"
-gem 'rack-cors', require: 'rack/cors'
+gem "grape", "~> 0.7.0"
+gem "grape-entity", "~> 0.4.3"
+gem 'rack-cors', '>= 0.4.1', require: 'rack/cors'
 
 # Format dates and times
 # based on human-friendly examples
 gem "stamp"
 
 # Enumeration fields
-gem 'enumerize'
+gem 'enumerize', '>= 0.8.0'
 
 # Pagination
-gem "kaminari", "~> 0.15.1"
+gem "kaminari", "~> 0.16.0"
 
 # HAML
-gem "haml-rails"
+gem "haml-rails", ">= 0.6.0"
 
 # Files attachments
-gem "carrierwave"
+gem "carrierwave", ">= 0.10.0"
 
 # Drag and Drop UI
-gem 'dropzonejs-rails'
+gem 'dropzonejs-rails', '>= 0.4.16'
 
 # for aws storage
-gem "fog", "~> 1.14"
+gem "fog", "~> 1.22", ">= 1.22.0"
 gem "unf"
 
 # Authorization
 gem "six"
 
 # Seed data
-gem "seed-fu"
+gem "seed-fu", ">= 2.3.6"
 
 # Markup pipeline for GitLab
-gem 'html-pipeline-gitlab', '~> 0.1.0'
+gem 'html-pipeline-gitlab', '~> 0.1.6'
 
 # Markdown to HTML
 gem "github-markup"
 
 # Required markup gems by github-markdown
-gem 'redcarpet', '~> 3.1.2'
-gem 'RedCloth'
-gem 'rdoc', '~>3.6'
+gem 'redcarpet', '~> 3.2.3'
+gem 'RedCloth', '>= 4.3.0'
+gem 'rdoc', '~> 4.3', '>= 4.3.0'
 gem 'org-ruby', '= 0.9.9'
 gem 'creole', '~>0.3.6'
 gem 'wikicloth', '=0.8.1'
-gem 'asciidoctor', '= 0.1.4'
+gem 'asciidoctor', '= 1.5.8'
 
 # Diffs
-gem 'diffy', '~> 3.0.3'
+gem 'diffy', '~> 3.4.1'
 
 # Application server
 group :unicorn do
-  gem "unicorn", '~> 4.6.3'
-  gem 'unicorn-worker-killer'
+  gem "unicorn", "~> 4.7.0"
+  gem 'unicorn-worker-killer', '>= 0.4.3'
 end
 
 # State machine
 gem "state_machine"
 
 # Issue tags
-gem "acts-as-taggable-on"
+gem "acts-as-taggable-on", ">= 3.1.0"
 
 # Background jobs
 gem 'slim'
-gem 'sinatra', require: nil
-gem 'sidekiq', '2.17.0'
+gem 'sinatra', '>= 4.0.0', require: nil
+gem 'sidekiq', '2.17.1'
 
 # HTTP requests
-gem "httparty"
+gem "httparty", ">= 0.21.0"
 
 # Colored output to console
 gem "colored"
@@ -124,17 +124,17 @@ gem "colored"
 gem 'settingslogic'
 
 # Misc
-gem "foreman"
+gem "foreman", ">= 0.64.0"
 gem 'version_sorter'
 
 # Cache
-gem "redis-rails"
+gem "redis-rails", ">= 5.0.2"
 
 # Campfire integration
-gem 'tinder', '~> 1.9.2'
+gem 'tinder', '~> 1.9.4'
 
 # HipChat integration
-gem "hipchat", "~> 0.14.0"
+gem "hipchat", "~> 1.0.0"
 
 # Flowdock integration
 gem "gitlab-flowdock-git-hook", "~> 0.4.2"
@@ -146,16 +146,16 @@ gem "gemnasium-gitlab-service", "~> 0.2"
 gem "slack-notifier", "~> 0.3.2"
 
 # d3
-gem "d3_rails", "~> 3.1.4"
+gem "d3_rails", "~> 3.2.0"
 
 # underscore-rails
 gem "underscore-rails", "~> 1.4.4"
 
 # Sanitize user input
-gem "sanitize", '~> 2.0'
+gem "sanitize", "~> 2.1", ">= 2.1.1"
 
 # Protect against bruteforcing
-gem "rack-attack"
+gem "rack-attack", ">= 3.0.0"
 
 # Ace editor
 gem 'ace-rails-ap'
@@ -166,57 +166,57 @@ gem 'mousetrap-rails'
 # Semantic UI Sass for Sidebar
 gem 'semantic-ui-sass', '~> 0.16.1.0'
 
-gem "sass-rails", '~> 4.0.2'
-gem "coffee-rails"
-gem "uglifier"
+gem "sass-rails", "~> 6.0.0"
+gem "coffee-rails", ">= 4.2.2"
+gem "uglifier", ">= 2.3.3"
 gem "therubyracer"
-gem 'turbolinks'
-gem 'jquery-turbolinks'
+gem 'turbolinks', '>= 5.0.0'
+gem 'jquery-turbolinks', '>= 2.0.2'
 
-gem 'select2-rails'
+gem 'select2-rails', '>= 3.5.11'
 gem 'jquery-atwho-rails', "~> 0.3.3"
-gem "jquery-rails"
-gem "jquery-ui-rails"
+gem "jquery-rails", ">= 4.0.1"
+gem "jquery-ui-rails", ">= 5.0.0"
 gem "jquery-scrollto-rails"
 gem "raphael-rails", "~> 2.1.2"
-gem 'bootstrap-sass', '~> 3.0'
-gem "font-awesome-rails", '~> 4.2'
-gem "gitlab_emoji", "~> 0.0.1.1"
-gem "gon", '~> 5.0.0'
+gem 'bootstrap-sass', '~> 3.4', '>= 3.4.0'
+gem "font-awesome-rails", "~> 4.7", ">= 4.7.0.8"
+gem "gitlab_emoji", "~> 0.1.0.0"
+gem "gon", "~> 5.0.3"
 gem 'nprogress-rails'
 gem 'request_store'
 gem "virtus"
 
 group :development do
-  gem "annotate", "~> 2.6.0.beta2"
-  gem "letter_opener"
-  gem 'quiet_assets', '~> 1.0.1'
-  gem 'rack-mini-profiler', require: false
+  gem "annotate", "~> 2.6.1.0"
+  gem "letter_opener", ">= 1.2.0"
+  gem 'quiet_assets', '~> 1.0.3'
+  gem 'rack-mini-profiler', '>= 0.9.1', require: false
 
   # Better errors handler
-  gem 'better_errors'
+  gem 'better_errors', '>= 2.3.0'
   gem 'binding_of_caller'
 
-  gem 'rails_best_practices'
+  gem 'rails_best_practices', '>= 1.15.1'
 
   # Docs generator
-  gem "sdoc"
+  gem "sdoc", ">= 1.0.0"
 
   # thin instead webrick
-  gem 'thin'
+  gem 'thin', '>= 1.6.2'
 end
 
 group :development, :test do
-  gem 'coveralls', require: false
+  gem 'coveralls', '>= 0.7.1', require: false
   # gem 'rails-dev-tweaks'
   gem 'spinach-rails'
-  gem "rspec-rails"
-  gem "capybara", '~> 2.2.1'
+  gem "rspec-rails", ">= 2.14.1"
+  gem "capybara", "~> 2.3.0"
   gem "pry"
   gem "awesome_print"
   gem "database_cleaner"
-  gem "launchy"
-  gem 'factory_girl_rails'
+  gem "launchy", ">= 2.4.3"
+  gem 'factory_girl_rails', '>= 4.4.0'
 
   # Prevent occasions where minitest is not bundled in packaged versions of ruby (see #3826)
   gem 'minitest', '~> 5.3.0'
@@ -225,18 +225,18 @@ group :development, :test do
   gem "ffaker"
 
   # Guard
-  gem 'guard-rspec'
-  gem 'guard-spinach'
+  gem 'guard-rspec', '>= 4.2.1'
+  gem 'guard-spinach', '>= 0.0.3'
 
   # Notification
   gem 'rb-fsevent', require: darwin_only('rb-fsevent')
   gem 'growl',      require: darwin_only('growl')
-  gem 'rb-inotify', require: linux_only('rb-inotify')
+  gem 'rb-inotify', '>= 0.9.3', require: linux_only('rb-inotify')
 
   # PhantomJS driver for Capybara
-  gem 'poltergeist', '~> 1.5.1'
+  gem 'poltergeist', '~> 1.6.0'
 
-  gem 'jasmine', '2.0.2'
+  gem 'jasmine', '2.0.3'
 
   gem "spring", '1.1.3'
   gem "spring-commands-rspec", '1.0.1'
@@ -245,9 +245,9 @@ end
 
 group :test do
   gem "simplecov", require: false
-  gem "shoulda-matchers", "~> 2.1.0"
-  gem 'email_spec'
-  gem "webmock"
+  gem "shoulda-matchers", "~> 2.2.0"
+  gem 'email_spec', '>= 1.6.0'
+  gem "webmock", ">= 1.16.1"
   gem 'test_after_commit'
 end