diff --git a/Gemfile b/Gemfile
index c5210248..88b9cd8c 100644
--- a/Gemfile
+++ b/Gemfile
@@ -10,7 +10,7 @@ ruby '>= 2.4.0', '<= 2.5.99'
 
 gem 'darlingtonia', '~> 1.0'
 gem 'honeybadger', '~> 3.1'
-gem 'hyrax', '~> 2.2', '>= 2.2.2'
+gem 'hyrax', '~> 2.2', '>= 2.3.3'
 gem 'rails', '~> 5.1.6'
 
 gem 'pkg-config', '~> 1.1'
diff --git a/Gemfile.lock b/Gemfile.lock
index 858f6614..ce627d02 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -40,7 +40,7 @@ GEM
       activesupport (>= 3.0.0)
       rdf (>= 2.0.2, < 4.0)
       rdf-vocab (>= 2.0, < 4.0)
-    active_encode (0.2)
+    active_encode (0.4.1)
       rails
     activejob (5.1.6)
       activesupport (= 5.1.6)
@@ -51,7 +51,7 @@ GEM
       activemodel (= 5.1.6)
       activesupport (= 5.1.6)
       arel (~> 8.0)
-    activerecord-import (0.25.0)
+    activerecord-import (0.27.0)
       activerecord (>= 3.2)
     activesupport (5.1.6)
       concurrent-ruby (~> 1.0, >= 1.0.2)
@@ -71,16 +71,16 @@ GEM
     awesome_nested_set (3.1.4)
       activerecord (>= 4.0.0, < 5.3)
     aws-eventstream (1.0.1)
-    aws-partitions (1.105.0)
-    aws-sdk-core (3.28.0)
+    aws-partitions (1.106.0)
+    aws-sdk-core (3.35.0)
       aws-eventstream (~> 1.0)
       aws-partitions (~> 1.0)
       aws-sigv4 (~> 1.0)
       jmespath (~> 1.0)
-    aws-sdk-kms (1.9.0)
+    aws-sdk-kms (1.11.0)
       aws-sdk-core (~> 3, >= 3.26.0)
       aws-sigv4 (~> 1.0)
-    aws-sdk-s3 (1.20.0)
+    aws-sdk-s3 (1.23.0)
       aws-sdk-core (~> 3, >= 3.26.0)
       aws-sdk-kms (~> 1)
       aws-sigv4 (~> 1.0)
@@ -219,7 +219,7 @@ GEM
       dry-container (~> 0.2, >= 0.2.6)
       dry-core (~> 0.2)
       dry-equalizer (~> 0.2)
-    dry-struct (0.5.1)
+    dry-struct (0.6.0)
       dry-core (~> 0.4, >= 0.4.3)
       dry-equalizer (~> 0.2)
       dry-types (~> 0.13)
@@ -266,7 +266,7 @@ GEM
       railties (>= 3.2, < 6.0)
     globalid (0.4.1)
       activesupport (>= 4.2.0)
-    google-api-client (0.24.2)
+    google-api-client (0.24.3)
       addressable (~> 2.5, >= 2.5.1)
       googleauth (>= 0.5, < 0.7.0)
       httpclient (>= 2.8.1, < 3.0)
@@ -278,10 +278,10 @@ GEM
       google-api-client (>= 0.11.0, < 1.0.0)
       googleauth (>= 0.5.0, < 1.0.0)
       nokogiri (>= 1.5.3, < 2.0.0)
-    googleauth (0.6.6)
+    googleauth (0.6.7)
       faraday (~> 0.12)
       jwt (>= 1.4, < 3.0)
-      memoist (~> 0.12)
+      memoist (~> 0.16)
       multi_json (~> 1.11)
       os (>= 0.9, < 2.0)
       signet (~> 0.7)
@@ -297,15 +297,15 @@ GEM
     httparty (0.16.2)
       multi_xml (>= 0.5.2)
     httpclient (2.8.3)
-    hydra-access-controls (10.5.1)
-      active-fedora (>= 10.0.0, < 12)
+    hydra-access-controls (10.6.0)
+      active-fedora (>= 10.0.0, < 13)
       activesupport (>= 4, < 6)
       blacklight (>= 5.16)
-      blacklight-access_controls (~> 0.6)
+      blacklight-access_controls (~> 0.6.0)
       cancancan (~> 1.8)
       deprecation (~> 1.0)
-    hydra-core (10.5.1)
-      hydra-access-controls (= 10.5.1)
+    hydra-core (10.6.0)
+      hydra-access-controls (= 10.6.0)
       railties (>= 4.0.0, < 6)
     hydra-derivatives (3.4.1)
       active-fedora (>= 11.3.1, < 13)
@@ -324,9 +324,9 @@ GEM
       sprockets-es6
     hydra-file_characterization (0.3.3)
       activesupport (>= 3.0.0)
-    hydra-head (10.5.1)
-      hydra-access-controls (= 10.5.1)
-      hydra-core (= 10.5.1)
+    hydra-head (10.6.0)
+      hydra-access-controls (= 10.6.0)
+      hydra-core (= 10.6.0)
       rails (>= 3.2.6)
     hydra-pcdm (1.0.0)
       active-fedora (>= 10, < 13)
@@ -342,7 +342,7 @@ GEM
       hydra-file_characterization (~> 0.3, >= 0.3.3)
       hydra-pcdm (>= 0.9)
       om (~> 3.1)
-    hyrax (2.3.2)
+    hyrax (2.3.3)
       active-fedora (~> 11.5, >= 11.5.2)
       almond-rails (~> 0.1)
       awesome_nested_set (~> 3.1)
@@ -362,7 +362,7 @@ GEM
       hydra-editor (>= 3.3, < 5.0)
       hydra-head (>= 10.5.0)
       hydra-works (>= 0.16, < 2.0)
-      iiif_manifest (>= 0.3, < 0.5)
+      iiif_manifest (>= 0.3, < 0.6)
       jquery-datatables-rails (~> 3.4)
       jquery-ui-rails (~> 6.0)
       json-schema
@@ -392,7 +392,7 @@ GEM
     i18n (1.1.0)
       concurrent-ruby (~> 1.0)
     ice_nine (0.11.2)
-    iiif_manifest (0.4.0)
+    iiif_manifest (0.5.0)
       activesupport (>= 4)
     jbuilder (2.7.0)
       activesupport (>= 4.2.0)
@@ -417,9 +417,9 @@ GEM
       json-ld (~> 3.0)
       multi_json (~> 1.12)
       rdf (~> 3.0)
-    json-schema (2.8.0)
+    json-schema (2.8.1)
       addressable (>= 2.4)
-    jwt (1.5.6)
+    jwt (2.1.0)
     kaminari (1.1.1)
       activesupport (>= 4.1.0)
       kaminari-actionview (= 1.1.1)
@@ -520,9 +520,9 @@ GEM
     nokogumbo (1.5.0)
       nokogiri
     oauth (0.5.4)
-    oauth2 (1.4.0)
-      faraday (>= 0.8, < 0.13)
-      jwt (~> 1.0)
+    oauth2 (1.4.1)
+      faraday (>= 0.8, < 0.16.0)
+      jwt (>= 1.0, < 3.0)
       multi_json (~> 1.3)
       multi_xml (~> 0.5)
       rack (>= 1.2, < 3)
@@ -545,7 +545,7 @@ GEM
     public_suffix (3.0.3)
     pul_uv_rails (2.0.1)
     puma (3.12.0)
-    qa (2.1.1)
+    qa (2.1.2)
       activerecord-import
       deprecation
       faraday
@@ -729,7 +729,7 @@ GEM
       redis (>= 3.3.5, < 5)
     sidekiq-failures (1.0.0)
       sidekiq (>= 4.0.0)
-    signet (0.10.0)
+    signet (0.11.0)
       addressable (~> 2.3)
       faraday (~> 0.9)
       jwt (>= 1.5, < 3.0)
@@ -791,7 +791,7 @@ GEM
     thor (0.20.0)
     thread_safe (0.3.6)
     tilt (2.0.8)
-    tinymce-rails (4.8.3)
+    tinymce-rails (4.8.4)
       railties (>= 3.1.1)
     turbolinks (5.2.0)
       turbolinks-source (~> 5.2)
@@ -847,7 +847,7 @@ DEPENDENCIES
   ffaker
   honeybadger (~> 3.1)
   hydra-role-management (~> 1.0.0)
-  hyrax (~> 2.2, >= 2.2.2)
+  hyrax (~> 2.2, >= 2.3.3)
   jbuilder (~> 2.5)
   jquery-rails
   listen (>= 3.0.5, < 3.2)