diff --git a/requirements.txt b/requirements.txt
index 3dc12c49..19ae2a74 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -4,10 +4,10 @@
 
 pbr>=1.6 # Apache-2.0
 six>=1.9.0 # MIT
-oslo.config>=3.14.0 # Apache-2.0
+oslo.config!=3.18.0,>=3.14.0 # Apache-2.0
 oslo.context>=2.9.0 # Apache-2.0
 oslo.i18n>=2.1.0 # Apache-2.0
-oslo.utils>=3.16.0 # Apache-2.0
+oslo.utils>=3.17.0 # Apache-2.0
 oslo.serialization>=1.10.0 # Apache-2.0
 debtcollector>=1.2.0 # Apache-2.0
 pyinotify>=0.9.6;sys_platform!='win32' and sys_platform!='darwin' and sys_platform!='sunos5' # MIT
diff --git a/test-requirements.txt b/test-requirements.txt
index 02b0b77b..62d1e25d 100644
--- a/test-requirements.txt
+++ b/test-requirements.txt
@@ -14,12 +14,12 @@ oslotest>=1.10.0 # Apache-2.0
 # when we can require tox>= 1.4, this can go into tox.ini:
 #  [testenv:cover]
 #  deps = {[testenv]deps} coverage
-coverage>=3.6 # Apache-2.0
+coverage>=4.0 # Apache-2.0
 
 # this is required for the docs build jobs
 sphinx!=1.3b1,<1.4,>=1.2.1 # BSD
 oslosphinx>=4.7.0 # Apache-2.0
-reno>=1.8.0 # Apache2
+reno>=1.8.0 # Apache-2.0
 
 # Bandit security code scanner
 bandit>=1.1.0 # Apache-2.0