diff --git a/requirements.in b/requirements.in
index 8f657e5d3d0..6a3a32d43b3 100644
--- a/requirements.in
+++ b/requirements.in
@@ -1,7 +1,7 @@
 # The file contains the direct ckan requirements.
 # Use pip-compile to create a requirements.txt file from this
 Babel==2.3.4
-bleach==2.1.3
+bleach==3.3.0
 click==6.7
 fanstatic==0.12
 Flask==0.12.4
diff --git a/requirements.txt b/requirements.txt
index 49b8d951391..19a50f3d100 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -4,64 +4,186 @@
 #
 #    pip-compile --output-file requirements.txt requirements.in
 #
-argparse==1.4.0           # via ofs
+argparse==1.4.0
+    # via ofs
 babel==2.3.4
-beaker==1.10.0            # via pylons
-bleach==2.1.3
-certifi==2018.10.15       # via requests
-chardet==3.0.4            # via requests
+    # via
+    #   -r requirements.in
+    #   flask-babel
+beaker==1.10.0
+    # via pylons
+bleach==3.3.0
+    # via -r requirements.in
+certifi==2018.10.15
+    # via requests
+chardet==3.0.4
+    # via requests
 click==6.7
-decorator==4.3.0          # via pylons, sqlalchemy-migrate
+    # via
+    #   -r requirements.in
+    #   flask
+    #   rq
+decorator==4.3.0
+    # via
+    #   pylons
+    #   sqlalchemy-migrate
 fanstatic==0.12
+    # via -r requirements.in
 flask-babel==0.11.2
+    # via -r requirements.in
 flask==0.12.4
-formencode==1.3.1         # via pylons
-funcsigs==1.0.2           # via beaker
-html5lib==1.0.1           # via bleach
-idna==2.7                 # via requests
-itsdangerous==0.24        # via flask
+    # via
+    #   -r requirements.in
+    #   flask-babel
+formencode==1.3.1
+    # via pylons
+funcsigs==1.0.2
+    # via beaker
+idna==2.7
+    # via requests
+itsdangerous==0.24
+    # via flask
 jinja2==2.8
-mako==1.0.7               # via pylons
+    # via
+    #   -r requirements.in
+    #   flask
+    #   flask-babel
+mako==1.0.7
+    # via pylons
 markdown==2.6.7
-markupsafe==1.0           # via jinja2, mako, webhelpers
-nose==1.3.7               # via pylons
+    # via -r requirements.in
+markupsafe==1.0
+    # via
+    #   jinja2
+    #   mako
+    #   webhelpers
+nose==1.3.7
+    # via pylons
 ofs==0.4.2
+    # via -r requirements.in
+packaging==20.9
+    # via bleach
 pairtree==0.7.1-t
+    # via -r requirements.in
 passlib==1.6.5
+    # via -r requirements.in
 paste==1.7.5.1
-pastedeploy==1.5.2        # via pastescript, pylons
-pastescript==2.0.2        # via pylons
-pbr==1.10.0               # via sqlalchemy-migrate
+    # via
+    #   -r requirements.in
+    #   fanstatic
+    #   pastescript
+    #   pylons
+    #   weberror
+pastedeploy==1.5.2
+    # via
+    #   pastescript
+    #   pylons
+pastescript==2.0.2
+    # via pylons
+pbr==1.10.0
+    # via sqlalchemy-migrate
 polib==1.0.7
+    # via -r requirements.in
 psycopg2==2.7.3.2
-pygments==2.2.0           # via weberror
+    # via -r requirements.in
+pygments==2.2.0
+    # via weberror
 pylons==0.9.7
+    # via -r requirements.in
+pyparsing==2.4.7
+    # via packaging
 pysolr==3.6.0
+    # via -r requirements.in
 python-dateutil==2.7.3
+    # via -r requirements.in
 python-magic==0.4.15
+    # via -r requirements.in
 pytz==2016.7
+    # via
+    #   -r requirements.in
+    #   babel
+    #   tzlocal
 pyutilib.component.core==4.6.4
-redis==2.10.6             # via rq
-repoze.lru==0.7           # via routes
+    # via -r requirements.in
+redis==2.10.6
+    # via rq
+repoze.lru==0.7
+    # via routes
 repoze.who-friendlyform==1.0.8
+    # via -r requirements.in
 repoze.who==2.3
+    # via
+    #   -r requirements.in
+    #   repoze.who-friendlyform
 requests==2.20.0
+    # via
+    #   -r requirements.in
+    #   pysolr
 routes==1.13
+    # via
+    #   -r requirements.in
+    #   pylons
 rq==0.6.0
+    # via -r requirements.in
 simplejson==3.10.0
-six==1.11.0               # via bleach, html5lib, pastescript, python-dateutil, pyutilib.component.core, sqlalchemy-migrate
+    # via
+    #   -r requirements.in
+    #   pylons
+six==1.11.0
+    # via
+    #   bleach
+    #   pastescript
+    #   python-dateutil
+    #   pyutilib.component.core
+    #   sqlalchemy-migrate
 sqlalchemy-migrate==0.10.0
+    # via -r requirements.in
 sqlalchemy==1.1.11
+    # via
+    #   -r requirements.in
+    #   sqlalchemy-migrate
 sqlparse==0.2.2
-tempita==0.5.2            # via pylons, sqlalchemy-migrate, weberror
+    # via
+    #   -r requirements.in
+    #   sqlalchemy-migrate
+tempita==0.5.2
+    # via
+    #   pylons
+    #   sqlalchemy-migrate
+    #   weberror
 tzlocal==1.3
+    # via -r requirements.in
 unicodecsv==0.14.1
-urllib3==1.24             # via requests
+    # via -r requirements.in
+urllib3==1.24
+    # via requests
 vdm==0.14
-webencodings==0.5.1       # via html5lib
-weberror==0.13.1          # via pylons
+    # via -r requirements.in
+webencodings==0.5.1
+    # via bleach
+weberror==0.13.1
+    # via pylons
 webhelpers==1.3
+    # via
+    #   -r requirements.in
+    #   pylons
 webob==1.0.8
+    # via
+    #   -r requirements.in
+    #   fanstatic
+    #   pylons
+    #   repoze.who
+    #   repoze.who-friendlyform
+    #   weberror
+    #   webtest
 webtest==1.4.3
-werkzeug==0.14.1          # via flask
+    # via
+    #   -r requirements.in
+    #   pylons
+werkzeug==0.14.1
+    # via flask
 zope.interface==4.3.2
+    # via
+    #   -r requirements.in
+    #   repoze.who
+    #   repoze.who-friendlyform