diff --git a/setup/requirements.txt b/setup/requirements.txt
index f2eb2157..b6f9f713 100644
--- a/setup/requirements.txt
+++ b/setup/requirements.txt
@@ -2,3 +2,11 @@ Flask==1.0.2
 Flask-Bootstrap==3.3.7.1
 gunicorn==19.9.0
 redis==3.2.1
+Jinja2==3.0.3
+MarkupSafe==2.1.0
+Werkzeug==2.0.3
+click==8.0.3
+dominate==2.6.0
+itsdangerous==2.0.1
+redis==3.2.1
+visitor==0.1.3
diff --git a/towncrier/newsfragments/2249.bugfix b/towncrier/newsfragments/2249.bugfix
new file mode 100644
index 00000000..21cf866e
--- /dev/null
+++ b/towncrier/newsfragments/2249.bugfix
@@ -0,0 +1 @@
+Fix broken setup. Not all dependencies were pinned resulting in a broken update being pulled.