diff --git a/Gemfile b/Gemfile
index 0a006c296..83f86980d 100644
--- a/Gemfile
+++ b/Gemfile
@@ -7,7 +7,7 @@ gem "dalli"
 gem "gds-api-adapters", "~> 63.5"
 gem "govuk_ab_testing", "~> 2.4"
 gem "govuk_app_config", "~> 2.1"
-gem "govuk_publishing_components", "~> 21.38.3"
+gem "govuk_publishing_components", "~> 21.38.4"
 gem "htmlentities", "~> 4.3"
 gem "plek", "~> 3.0"
 gem "rack_strip_client_ip", "~> 0.0.2"
diff --git a/Gemfile.lock b/Gemfile.lock
index 8d6488082..13ad19040 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -106,7 +106,7 @@ GEM
       sentry-raven (>= 2.7.1, < 3.1.0)
       statsd-ruby (~> 1.4.0)
       unicorn (>= 5.4, < 5.6)
-    govuk_publishing_components (21.38.3)
+    govuk_publishing_components (21.38.4)
       gds-api-adapters
       govuk_app_config
       kramdown
@@ -153,7 +153,7 @@ GEM
       activesupport (>= 4.0)
       logstash-event (~> 1.2.0)
       request_store
-    loofah (2.4.0)
+    loofah (2.5.0)
       crass (~> 1.0.2)
       nokogiri (>= 1.5.9)
     mail (2.7.1)
@@ -366,7 +366,7 @@ DEPENDENCIES
   gds-api-adapters (~> 63.5)
   govuk_ab_testing (~> 2.4)
   govuk_app_config (~> 2.1)
-  govuk_publishing_components (~> 21.38.3)
+  govuk_publishing_components (~> 21.38.4)
   govuk_schemas (~> 4.0)
   govuk_test
   htmlentities (~> 4.3)