diff --git a/package.json b/package.json
index 3950677943..896c3b6fdb 100644
--- a/package.json
+++ b/package.json
@@ -6,7 +6,7 @@
   "dependencies": {
     "amazon-payments": "0.0.4",
     "amplitude": "^2.0.3",
-    "async": "~0.9.0",
+    "async": "^1.5.0",
     "aws-sdk": "^2.0.25",
     "babel-plugin-syntax-async-functions": "^6.5.0",
     "babel-plugin-transform-regenerator": "^6.6.0",
@@ -50,17 +50,17 @@
     "image-size": "~0.3.2",
     "in-app-purchase": "^0.2.0",
     "jade": "~1.11.0",
-    "js2xmlparser": "~0.1.2",
+    "js2xmlparser": "~1.0.0",
     "lodash": "^3.10.1",
     "loggly": "~1.0.8",
     "marked": "^0.3.5",
     "merge-stream": "^1.0.0",
-    "method-override": "~2.2.0",
-    "moment": "~2.8.3",
+    "method-override": "^2.3.5",
+    "moment": "~2.10.6",
     "mongoose": "~3.8.23",
     "mongoose-id-autoinc": "~2013.7.14-4",
     "morgan": "^1.7.0",
-    "nconf": "~0.6.9",
+    "nconf": "~0.8.2",
     "newrelic": "~1.26.1",
     "nib": "~1.0.1",
     "nodemailer": "^1.9.0",
@@ -80,7 +80,7 @@
     "superagent": "~1.4.0",
     "swagger-node-express": "lefnire/swagger-node-express#habitrpg",
     "universal-analytics": "~0.3.2",
-    "validator": "~3.19.0",
+    "validator": "~4.2.1",
     "vinyl-buffer": "^1.0.0",
     "vinyl-source-stream": "^1.1.0",
     "winston": "~0.8.0",