diff --git a/Pipfile b/Pipfile
index 89a4c14..4253744 100644
--- a/Pipfile
+++ b/Pipfile
@@ -19,8 +19,8 @@ importlib-metadata = "==4.13.0" # TODO: remove. needed by old portal
 django-formtools = "==2.2" # TODO: remove. needed by old portal
 django-otp = "==1.0.2" # TODO: remove. needed by old portal
 # https://pypi.org/user/codeforlife/
-cfl-common = "==7.3.3" # TODO: remove
-codeforlife-portal = "==7.3.3" # TODO: remove
+cfl-common = "==7.3.5" # TODO: remove
+codeforlife-portal = "==7.3.5" # TODO: remove
 rapid-router = "==6.5.3" # TODO: remove
 phonenumbers = "==8.12.12" # TODO: remove
 
diff --git a/Pipfile.lock b/Pipfile.lock
index cc6c63c..1fe5653 100644
--- a/Pipfile.lock
+++ b/Pipfile.lock
@@ -1,7 +1,7 @@
 {
     "_meta": {
         "hash": {
-            "sha256": "8879d0c2f3131418d7fae266aadc8e5d995c3e38f6b9e9f5c98ba84f0673966c"
+            "sha256": "a6da78dbe93e0e1fc2ba15177759cb26f5702105acf87e9b452c2a1c943ac664"
         },
         "pipfile-spec": 6,
         "requires": {
@@ -34,11 +34,11 @@
         },
         "cfl-common": {
             "hashes": [
-                "sha256:dbad0d2b6372c9336957028a5e214880600b43eaff3630a414e0f78759fc2d50",
-                "sha256:e7205975d94e46be9dc789db10587236312ace0ea01d5a07905891ade37a4a7a"
+                "sha256:eb2cd235655cf256a1130e386c13eba748882e388f70deebda294dfb5b68435a",
+                "sha256:f4876d4a65503a488d24b3faa12bbf2b84c15b5d5a6854dbdab0579c61d395f1"
             ],
             "index": "pypi",
-            "version": "==7.3.3"
+            "version": "==7.3.5"
         },
         "charset-normalizer": {
             "hashes": [
@@ -138,11 +138,11 @@
         },
         "codeforlife-portal": {
             "hashes": [
-                "sha256:4c6b479a28c5592976759b6f2d5615f9c9166cb1a971f9f1b1802f32dce04035",
-                "sha256:a5fbaabb819dedccab6529040a2112af889b8a111f6b502c0f643d9292926d57"
+                "sha256:1cab3d1141d7ff4a206ba6bb5eeab2e46f0f29b3cc7f3955c2f297cee3266d57",
+                "sha256:1d887e32fae50942e43a5e162bcf32939cd72fcc2b1703258390cf8bbd51bc81"
             ],
             "index": "pypi",
-            "version": "==7.3.3"
+            "version": "==7.3.5"
         },
         "diff-match-patch": {
             "hashes": [
@@ -662,7 +662,7 @@
                 "sha256:37dd54208da7e1cd875388217d5e00ebd4179249f90fb72437e91a35459a0ad3",
                 "sha256:a8b2bc7bffae282281c8140a97d3aa9c14da0b136dfe83f850eea9a5f7470427"
             ],
-            "markers": "python_version >= '2.7' and python_version not in '3.0, 3.1, 3.2'",
+            "markers": "python_version >= '2.7' and python_version not in '3.0, 3.1, 3.2, 3.3'",
             "version": "==2.9.0.post0"
         },
         "pytz": {
@@ -820,7 +820,7 @@
                 "sha256:1e61c37477a1626458e36f7b1d82aa5c9b094fa4802892072e49de9c60c4c926",
                 "sha256:8abb2f1d86890a2dfb989f9a77cfcfd3e47c2a354b01111771326f8aa26e0254"
             ],
-            "markers": "python_version >= '2.7' and python_version not in '3.0, 3.1, 3.2'",
+            "markers": "python_version >= '2.7' and python_version not in '3.0, 3.1, 3.2, 3.3'",
             "version": "==1.16.0"
         },
         "sqlparse": {