diff --git a/requirements.in b/requirements.in
index 4d45a98..c967f76 100644
--- a/requirements.in
+++ b/requirements.in
@@ -1,7 +1,7 @@
 # The file contains the direct ckan requirements.
 # Use pip-compile to create a requirements.txt file from this
 Babel==2.3.4
-bleach==2.1.3
+bleach==3.1.4
 click==6.7
 fanstatic==0.12
 Flask==0.12.4
diff --git a/requirements.txt b/requirements.txt
index 066c867..4884a73 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -5,63 +5,58 @@
 #    pip-compile --output-file requirements.txt requirements.in
 #
 argparse==1.4.0           # via ofs
-Babel==2.3.4              # via flask-babel
-Beaker==1.9.0             # via pylons
-bleach==2.1.3
-click==6.7
+babel==2.3.4              # via -r requirements.in, flask-babel
+beaker==1.9.0             # via pylons
+bleach==3.1.4             # via -r requirements.in
+click==6.7                # via -r requirements.in, flask, rq
 decorator==4.2.1          # via pylons, sqlalchemy-migrate
-fanstatic==0.12
-Flask-Babel==0.11.2
-Flask==0.12.4             # via flask-babel
-FormEncode==1.3.1         # via pylons
+fanstatic==0.12           # via -r requirements.in
+flask-babel==0.11.2       # via -r requirements.in
+flask==0.12.4             # via -r requirements.in, flask-babel
+formencode==1.3.1         # via pylons
 funcsigs==1.0.2           # via beaker
-html5lib==1.0.1           # via bleach
 itsdangerous==0.24        # via flask
-Jinja2==2.8               # via flask, flask-babel
-Mako==1.0.7               # via pylons
-Markdown==2.6.7
-MarkupSafe==1.0           # via jinja2, mako, webhelpers
+jinja2==2.8               # via -r requirements.in, flask, flask-babel
+mako==1.0.7               # via pylons
+markdown==2.6.7           # via -r requirements.in
+markupsafe==1.0           # via jinja2, mako, webhelpers
 nose==1.3.7               # via pylons
-ofs==0.4.2
-Pairtree==0.7.1-T
-passlib==1.6.5
-paste==1.7.5.1
-PasteDeploy==1.5.2        # via pastescript, pylons
-PasteScript==2.0.2        # via pylons
+ofs==0.4.2                # via -r requirements.in
+pairtree==0.7.1-t         # via -r requirements.in
+passlib==1.6.5            # via -r requirements.in
+paste==1.7.5.1            # via -r requirements.in, fanstatic, pastescript, pylons, weberror
+pastedeploy==1.5.2        # via pastescript, pylons
+pastescript==2.0.2        # via pylons
 pbr==1.10.0               # via sqlalchemy-migrate
-polib==1.0.7
-psycopg2==2.7.3.2
-Pygments==2.2.0           # via weberror
-Pylons==0.9.7
-pysolr==3.6.0
-python-dateutil==1.5
-python-magic==0.4.15
-pytz==2016.7
-pyutilib.component.core==4.6.4
+polib==1.0.7              # via -r requirements.in
+psycopg2==2.7.3.2         # via -r requirements.in
+pygments==2.2.0           # via weberror
+pylons==0.9.7             # via -r requirements.in
+pysolr==3.6.0             # via -r requirements.in
+python-dateutil==1.5      # via -r requirements.in
+python-magic==0.4.15      # via -r requirements.in
+pytz==2016.7              # via -r requirements.in, babel, tzlocal
+pyutilib.component.core==4.6.4  # via -r requirements.in
 redis==2.10.6             # via rq
 repoze.lru==0.7           # via routes
-repoze.who-friendlyform==1.0.8
-repoze.who==2.3
-requests==2.11.1
-Routes==1.13              # via pylons
-rq==0.6.0
-simplejson==3.10.0
-six==1.11.0               # via bleach, html5lib, pastescript, pyutilib.component.core, sqlalchemy-migrate
-sqlalchemy-migrate==0.10.0
-SQLAlchemy==1.1.11        # via sqlalchemy-migrate
-sqlparse==0.2.2
-Tempita==0.5.2            # via pylons, sqlalchemy-migrate, weberror
-tzlocal==1.3
-unicodecsv==0.14.1
-vdm==0.14
-webencodings==0.5.1       # via html5lib
-WebError==0.13.1          # via pylons
-WebHelpers==1.3           # via pylons
-WebOb==1.0.8              # via fanstatic, pylons, repoze.who, repoze.who-friendlyform, weberror, webtest
-WebTest==1.4.3            # via pylons
-Werkzeug==0.14.1          # via flask
-zope.interface==4.3.2
-
-# The following packages are commented out because they are
-# considered to be unsafe in a requirements file:
-# setuptools                # via repoze.who, zope.interface
+repoze.who-friendlyform==1.0.8  # via -r requirements.in
+repoze.who==2.3           # via -r requirements.in, repoze.who-friendlyform
+requests==2.11.1          # via -r requirements.in, pysolr
+routes==1.13              # via -r requirements.in, pylons
+rq==0.6.0                 # via -r requirements.in
+simplejson==3.10.0        # via -r requirements.in, pylons
+six==1.11.0               # via bleach, pastescript, pyutilib.component.core, sqlalchemy-migrate
+sqlalchemy-migrate==0.10.0  # via -r requirements.in
+sqlalchemy==1.1.11        # via -r requirements.in, sqlalchemy-migrate
+sqlparse==0.2.2           # via -r requirements.in, sqlalchemy-migrate
+tempita==0.5.2            # via pylons, sqlalchemy-migrate, weberror
+tzlocal==1.3              # via -r requirements.in
+unicodecsv==0.14.1        # via -r requirements.in
+vdm==0.14                 # via -r requirements.in
+webencodings==0.5.1       # via bleach
+weberror==0.13.1          # via pylons
+webhelpers==1.3           # via -r requirements.in, pylons
+webob==1.0.8              # via -r requirements.in, fanstatic, pylons, repoze.who, repoze.who-friendlyform, weberror, webtest
+webtest==1.4.3            # via -r requirements.in, pylons
+werkzeug==0.14.1          # via flask
+zope.interface==4.3.2     # via -r requirements.in, repoze.who, repoze.who-friendlyform