diff --git a/Gemfile b/Gemfile
index e375f3cf1..8244099c8 100644
--- a/Gemfile
+++ b/Gemfile
@@ -52,7 +52,7 @@ group(:omnibus_package) do
   # gems to Rubygems now, so letting this float on latest should always give us the latest
   # stable release. May have to re-pin around major version bumping time, or during patch
   # fixes.
-  gem "chef", "= 14.5.27"
+  gem "chef", "= 14.5.33"
   gem "cheffish", ">= 14.0.1"
   gem "chefspec", ">= 7.3.0"
   gem "fauxhai", ">= 6.5.0"
diff --git a/Gemfile.lock b/Gemfile.lock
index 2deb657da..6511fac40 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -30,13 +30,13 @@ GEM
       mixlib-shellout (~> 2.0)
     artifactory (2.8.2)
     ast (2.4.0)
-    aws-sdk (2.11.135)
-      aws-sdk-resources (= 2.11.135)
-    aws-sdk-core (2.11.135)
+    aws-sdk (2.11.136)
+      aws-sdk-resources (= 2.11.136)
+    aws-sdk-core (2.11.136)
       aws-sigv4 (~> 1.0)
       jmespath (~> 1.0)
-    aws-sdk-resources (2.11.135)
-      aws-sdk-core (= 2.11.135)
+    aws-sdk-resources (2.11.136)
+      aws-sdk-core (= 2.11.136)
     aws-sigv4 (1.0.3)
     axiom-types (0.1.1)
       descendants_tracker (~> 0.0.4)
@@ -66,10 +66,10 @@ GEM
       debug_inspector (>= 0.0.1)
     builder (3.2.3)
     byebug (10.0.2)
-    chef (14.5.27)
+    chef (14.5.33)
       addressable
       bundler (>= 1.10)
-      chef-config (= 14.5.27)
+      chef-config (= 14.5.33)
       chef-zero (>= 13.0)
       diff-lcs (~> 1.2, >= 1.2.4)
       erubis (~> 2.7)
@@ -97,10 +97,10 @@ GEM
       specinfra (~> 2.10)
       syslog-logger (~> 1.6)
       uuidtools (~> 2.1.5)
-    chef (14.5.27-universal-mingw32)
+    chef (14.5.33-universal-mingw32)
       addressable
       bundler (>= 1.10)
-      chef-config (= 14.5.27)
+      chef-config (= 14.5.33)
       chef-zero (>= 13.0)
       diff-lcs (~> 1.2, >= 1.2.4)
       erubis (~> 2.7)
@@ -155,7 +155,7 @@ GEM
       toml-rb
       train
       tty-spinner
-    chef-config (14.5.27)
+    chef-config (14.5.33)
       addressable
       fuzzyurl
       mixlib-config (>= 2.2.12, < 3.0)
@@ -229,10 +229,10 @@ GEM
       gherkin (~> 5.1.0)
       multi_json (>= 1.7.5, < 2.0)
       multi_test (>= 0.1.2)
-    cucumber-core (3.2.0)
+    cucumber-core (3.2.1)
       backports (>= 3.8.0)
       cucumber-tag_expressions (~> 1.1.0)
-      gherkin (>= 5.0.0)
+      gherkin (~> 5.0)
     cucumber-expressions (6.0.1)
     cucumber-tag_expressions (1.1.1)
     cucumber-wire (0.0.1)
@@ -308,8 +308,8 @@ GEM
     fog-json (1.2.0)
       fog-core
       multi_json (~> 1.10)
-    fog-openstack (0.2.4)
-      fog-core (~> 1.45.0)
+    fog-openstack (0.3.3)
+      fog-core (>= 1.45, <= 2.1.0)
       fog-json (>= 1.0)
       ipaddress (>= 0.8)
     fog-rackspace (0.1.6)
@@ -536,7 +536,7 @@ GEM
     net-ssh-multi (1.2.1)
       net-ssh (>= 2.6.5)
       net-ssh-gateway (>= 1.2.0)
-    net-telnet (0.2.0)
+    net-telnet (0.1.1)
     netaddr (1.5.1)
     nokogiri (1.8.4)
       mini_portile2 (~> 2.3.0)
@@ -662,7 +662,7 @@ GEM
       specinfra (~> 2.72)
     sfl (2.3)
     shellany (0.0.1)
-    signet (0.9.2)
+    signet (0.10.0)
       addressable (~> 2.3)
       faraday (~> 0.9)
       jwt (>= 1.5, < 3.0)
@@ -671,10 +671,10 @@ GEM
     solve (4.0.0)
       molinillo (~> 0.6)
       semverse (>= 1.1, < 3.0)
-    specinfra (2.76.1)
+    specinfra (2.76.2)
       net-scp
       net-ssh (>= 2.7)
-      net-telnet
+      net-telnet (= 0.1.1)
       sfl
     sshkey (1.9.0)
     sslshake (1.2.0)
@@ -794,7 +794,7 @@ DEPENDENCIES
   artifactory
   berkshelf (>= 7.0.5)
   bundler
-  chef (= 14.5.27)
+  chef (= 14.5.33)
   chef-apply
   chef-dk!
   chef-provisioning (>= 2.7.1)