diff --git a/Gemfile b/Gemfile
index a0c57e3..7452489 100644
--- a/Gemfile
+++ b/Gemfile
@@ -3,8 +3,8 @@ source 'https://rubygems.org'
 gem 'dotenv', '2.7.6'
 gem 'faye-websocket', '0.11.0'
 gem 'vonage', '~> 7.2.1'
-gem 'sinatra', '2.1.0'
-gem 'sinatra-contrib', '2.1.0'
+gem 'sinatra', '3.0.6'
+gem 'sinatra-contrib', '3.0.6'
 gem 'rack-contrib', '2.3.0'
 gem 'thin', '1.8.0'
 gem 'rubocop', require: false
diff --git a/Gemfile.lock b/Gemfile.lock
index d8eec6c..17d892c 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -12,17 +12,17 @@ GEM
     jaro_winkler (1.5.3)
     jwt (2.2.2)
     multi_json (1.15.0)
-    mustermann (1.1.1)
+    mustermann (3.0.0)
       ruby2_keywords (~> 0.0.1)
     nexmo-jwt (0.1.2)
       jwt (~> 2)
     parallel (1.17.0)
     parser (2.6.3.0)
       ast (~> 2.4.0)
-    rack (2.2.3)
+    rack (2.2.6.4)
     rack-contrib (2.3.0)
       rack (~> 2.0)
-    rack-protection (2.1.0)
+    rack-protection (3.0.6)
       rack
     rainbow (3.0.0)
     rubocop (0.72.0)
@@ -33,24 +33,24 @@ GEM
       ruby-progressbar (~> 1.7)
       unicode-display_width (>= 1.4.0, < 1.7)
     ruby-progressbar (1.10.1)
-    ruby2_keywords (0.0.4)
-    sinatra (2.1.0)
-      mustermann (~> 1.0)
-      rack (~> 2.2)
-      rack-protection (= 2.1.0)
+    ruby2_keywords (0.0.5)
+    sinatra (3.0.6)
+      mustermann (~> 3.0)
+      rack (~> 2.2, >= 2.2.4)
+      rack-protection (= 3.0.6)
       tilt (~> 2.0)
-    sinatra-contrib (2.1.0)
+    sinatra-contrib (3.0.6)
       multi_json
-      mustermann (~> 1.0)
-      rack-protection (= 2.1.0)
-      sinatra (= 2.1.0)
+      mustermann (~> 3.0)
+      rack-protection (= 3.0.6)
+      sinatra (= 3.0.6)
       tilt (~> 2.0)
     sorbet-runtime (0.5.6281)
     thin (1.8.0)
       daemons (~> 1.0, >= 1.0.9)
       eventmachine (~> 1.0, >= 1.0.4)
       rack (>= 1, < 3)
-    tilt (2.0.10)
+    tilt (2.1.0)
     unicode-display_width (1.6.0)
     vonage (7.2.1)
       nexmo-jwt (~> 0.1.2)
@@ -70,8 +70,8 @@ DEPENDENCIES
   faye-websocket (= 0.11.0)
   rack-contrib (= 2.3.0)
   rubocop
-  sinatra (= 2.1.0)
-  sinatra-contrib (= 2.1.0)
+  sinatra (= 3.0.6)
+  sinatra-contrib (= 3.0.6)
   thin (= 1.8.0)
   vonage (~> 7.2.1)