diff --git a/Gemfile b/Gemfile
index da4560b5..fc540d27 100644
--- a/Gemfile
+++ b/Gemfile
@@ -56,7 +56,7 @@ group :test do
   gem 'fake_stripe'
   gem 'webdrivers','>= 5.2.0', require: false
   gem 'rspec-json_expectations'
-  gem 'simplecov'
+  gem 'simplecov', '0.17.1'
   gem 'timecop'
   gem 'webmock'
   gem 'vcr'
diff --git a/Gemfile.lock b/Gemfile.lock
index 890a183a..10503ca5 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -153,7 +153,7 @@ GEM
       thor (>= 0.14, < 2.0)
     jquery-ui-rails (5.0.5)
       railties (>= 3.2.16)
-    json (2.6.3)
+    json (2.7.2)
     launchy (2.4.3)
       addressable (~> 2.3)
     listen (2.10.1)
@@ -293,7 +293,7 @@ GEM
       rexml (~> 3.2, >= 3.2.5)
       rubyzip (>= 1.2.2, < 3.0)
       websocket (~> 1.0)
-    simplecov (0.17.0)
+    simplecov (0.17.1)
       docile (~> 1.1)
       json (>= 1.8, < 3)
       simplecov-html (~> 0.10.0)
@@ -404,7 +404,7 @@ DEPENDENCIES
   rspec-rails
   sassc-rails
   scout_apm
-  simplecov
+  simplecov (= 0.17.1)
   sprockets-rails
   sqlite3 (= 1.3.13)
   sslrequirement