diff --git a/Gemfile b/Gemfile
index 1a167803..dfb1b9c2 100644
--- a/Gemfile
+++ b/Gemfile
@@ -117,3 +117,6 @@ end
 group :production do
   # gem "thin", "1.6.2"
 end
+
+# spring 3 requires stack upgrades
+gem 'spring', '~> 2.1.1'
diff --git a/Gemfile.lock b/Gemfile.lock
index 8384139e..e9cdb404 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -1,6 +1,6 @@
 GIT
   remote: https://github.com/rails-lts/rack.git
-  revision: de472597cac8f3f222e7b6e90a07c2b991704b01
+  revision: 416ce595040638b147d747b2e636a7ef63a26a07
   branch: lts-1-6-stable
   specs:
     rack (1.6.13)
@@ -205,7 +205,7 @@ GEM
     listen (3.7.0)
       rb-fsevent (~> 0.10, >= 0.10.3)
       rb-inotify (~> 0.9, >= 0.9.10)
-    loofah (2.12.0)
+    loofah (2.18.0)
       crass (~> 1.0.2)
       nokogiri (>= 1.5.9)
     lumberjack (1.2.8)
@@ -218,7 +218,7 @@ GEM
       mime-types-data (~> 3.2015)
     mime-types-data (3.2021.1115)
     mini_mime (1.1.2)
-    mini_portile2 (2.6.1)
+    mini_portile2 (2.8.0)
     minitest (5.14.4)
     multi_json (1.15.0)
     multi_test (0.1.2)
@@ -226,8 +226,8 @@ GEM
     nenv (0.3.0)
     nested_form (0.3.2)
     nio4r (2.5.8)
-    nokogiri (1.12.5)
-      mini_portile2 (~> 2.6.1)
+    nokogiri (1.13.7)
+      mini_portile2 (~> 2.8.0)
       racc (~> 1.4)
     notiffany (0.1.3)
       nenv (~> 0.1)
@@ -241,7 +241,7 @@ GEM
       coderay (~> 1.1)
       method_source (~> 1.0)
     public_suffix (4.0.6)
-    puma (4.3.11)
+    puma (4.3.12)
       nio4r (~> 2.0)
     pundit (2.1.1)
       activesupport (>= 3.0.0)
@@ -268,7 +268,7 @@ GEM
       activesupport (>= 4.2.0, < 5.0)
       nokogiri (~> 1.6)
       rails-deprecated_sanitizer (>= 1.0.1)
-    rails-html-sanitizer (1.4.2)
+    rails-html-sanitizer (1.4.3)
       loofah (~> 2.3)
     railties (4.2.11.3)
       actionpack (= 4.2.11.3)
@@ -325,7 +325,7 @@ GEM
       json (>= 1.8, < 3)
       simplecov-html (~> 0.10.0)
     simplecov-html (0.10.2)
-    spring (3.1.1)
+    spring (2.1.1)
     spring-commands-rspec (1.0.4)
       spring (>= 0.9.1)
     sprockets (2.12.5)
@@ -347,7 +347,7 @@ GEM
     tilt (1.4.1)
     tins (1.29.1)
       sync
-    tzinfo (1.2.9)
+    tzinfo (1.2.10)
       thread_safe (~> 0.1)
     uglifier (4.2.0)
       execjs (>= 0.3.0, < 3)
@@ -400,6 +400,7 @@ DEPENDENCIES
   sdoc
   selenium-webdriver
   simplecov
+  spring (~> 2.1.1)
   spring-commands-rspec
   uglifier (>= 1.3.0)
   webdrivers