diff --git a/requirements.txt b/requirements.txt
index cd44118..39a16a7 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -7,20 +7,19 @@
 apipkg==1.4               # via execnet
 argon2-cffi==18.1.0       # via passlib
 beautifulsoup4==4.6.0     # via devpi-web
-bleach==3.1.0
+bleach==3.1.4             # via -r requirements.in, readme-renderer
 certifi==2018.1.18        # via requests
 cffi==1.11.4              # via argon2-cffi
 chameleon==3.2            # via pyramid-chameleon
 chardet==3.0.4            # via requests
 check-manifest==0.36      # via devpi-client
 defusedxml==0.5.0         # via devpi-web
-devpi-client==4.0.1
+devpi-client==4.0.1       # via -r requirements.in
 devpi-common==3.2.1       # via devpi-client, devpi-server, devpi-web
-devpi-ldap==1.2.0
-devpi-server==4.4.0
-devpi-web==3.2.2
+devpi-ldap==1.2.0         # via -r requirements.in
+devpi-server==4.4.0       # via -r requirements.in, devpi-ldap, devpi-web
+devpi-web==3.2.2          # via -r requirements.in
 docutils==0.14            # via devpi-web, readme-renderer
-enum34==1.1.6             # via argon2-cffi
 execnet==1.5.0            # via devpi-server
 hupper==1.0               # via pyramid
 idna==2.6                 # via requests
@@ -38,14 +37,14 @@ pycparser==2.18           # via cffi
 pygments==2.2.0           # via devpi-web, readme-renderer
 pyramid-chameleon==0.3    # via devpi-web
 pyramid==1.9.1            # via devpi-server, devpi-web, pyramid-chameleon
-pyyaml==4.2b4
+pyyaml==4.2b4             # via -r requirements.in, devpi-ldap
 readme-renderer==17.2     # via devpi-web
 repoze.lru==0.7           # via devpi-server, pyramid
-requests==2.20.0
+requests==2.20.0          # via -r requirements.in, devpi-common
 six==1.11.0               # via argon2-cffi, bleach, readme-renderer, tox
 tox==2.9.1                # via devpi-client
 translationstring==1.3    # via pyramid
-urllib3==1.24.3
+urllib3==1.24.3           # via -r requirements.in, requests
 venusian==1.1.0           # via pyramid
 virtualenv==15.1.0        # via tox
 waitress==1.1.0           # via devpi-server