diff --git a/Gemfile b/Gemfile
index 8c103da677..918adf6700 100644
--- a/Gemfile
+++ b/Gemfile
@@ -15,7 +15,7 @@ gem 'awesome_print'
 gem 'aws-sdk-s3'
 gem 'bank_holiday', git: 'https://github.com/ministryofjustice/bank_holiday.git', branch: 'bundler-fix'
 gem 'business_time'
-gem 'config', '~> 3.1'
+gem 'config', '~> 4.0'
 gem 'devise', '~> 4.8.1'
 gem 'draper', '4.0.2'
 gem 'dropzonejs-rails'
diff --git a/Gemfile.lock b/Gemfile.lock
index afdf59687b..7698617884 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -149,13 +149,13 @@ GEM
     coderay (1.1.3)
     colorize (0.8.1)
     concurrent-ruby (1.1.9)
-    config (3.1.1)
+    config (4.0.0)
       deep_merge (~> 1.2, >= 1.2.1)
       dry-validation (~> 1.0, >= 1.0.0)
     connection_pool (2.2.5)
     crass (1.0.6)
     debug_inspector (1.1.0)
-    deep_merge (1.2.1)
+    deep_merge (1.2.2)
     devise (4.8.1)
       bcrypt (~> 3.0)
       orm_adapter (~> 0.1)
@@ -176,7 +176,7 @@ GEM
       ruby2_keywords
     dropzonejs-rails (0.8.5)
       rails (> 3.1)
-    dry-configurable (0.13.0)
+    dry-configurable (0.14.0)
       concurrent-ruby (~> 1.0)
       dry-core (~> 0.6)
     dry-container (0.9.0)
@@ -185,11 +185,11 @@ GEM
     dry-core (0.7.1)
       concurrent-ruby (~> 1.0)
     dry-inflector (0.2.1)
-    dry-initializer (3.0.4)
+    dry-initializer (3.1.1)
     dry-logic (1.2.0)
       concurrent-ruby (~> 1.0)
       dry-core (~> 0.5, >= 0.5)
-    dry-schema (1.8.0)
+    dry-schema (1.9.0)
       concurrent-ruby (~> 1.0)
       dry-configurable (~> 0.13, >= 0.13.0)
       dry-core (~> 0.5, >= 0.5)
@@ -620,7 +620,7 @@ DEPENDENCIES
   caxlsx
   caxlsx_rails
   colorize
-  config (~> 3.1)
+  config (~> 4.0)
   devise (~> 4.8.1)
   draper (= 4.0.2)
   dropzonejs-rails