diff --git a/CHANGELOG.md b/CHANGELOG.md
index 47a99e6d9..12e85faf0 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -16,6 +16,7 @@ and this project adheres to [Semantic Versioning](http://semver.org/).
 - Update APIcast schema manifest [PR #1550](https://github.com/3scale/APIcast/pull/1550)
 - Update luarocks to v3.12.0 [PR #1555](https://github.com/3scale/APIcast/pull/1555)
 - Update base image to ubi9-minimal [PR #1566](https://github.com/3scale/APIcast/pull/1566) [THREESCALE-11901](https://issues.redhat.com/browse/THREESCALE-11901)
+- Bump penlight to 1.15.0 [PR #1578](https://github.com/3scale/APIcast/pull/1578)
 
 ### Removed
 
diff --git a/Dockerfile b/Dockerfile
index ca870b387..81eda83ca 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -45,7 +45,7 @@ RUN luarocks install --deps-mode=none --tree /usr/local https://luarocks.org/man
 RUN luarocks install --deps-mode=none --tree /usr/local https://luarocks.org/manifests/3scale/lua-resty-env-0.4.0-1.src.rock
 RUN luarocks install --deps-mode=none --tree /usr/local https://luarocks.org/manifests/3scale/liquid-0.2.0-2.src.rock
 RUN luarocks install --deps-mode=none --tree /usr/local https://luarocks.org/manifests/tieske/date-2.2-2.src.rock
-RUN luarocks install --deps-mode=none --tree /usr/local https://luarocks.org/manifests/tieske/penlight-1.13.1-1.src.rock
+RUN luarocks install --deps-mode=none --tree /usr/local https://luarocks.org/manifests/tieske/penlight-1.15.0-1.src.rock
 RUN luarocks install --deps-mode=none --tree /usr/local https://luarocks.org/manifests/mpeterv/argparse-0.6.0-1.src.rock
 RUN luarocks install --deps-mode=none --tree /usr/local https://luarocks.org/manifests/3scale/lua-resty-execvp-0.1.1-1.src.rock
 RUN luarocks install --deps-mode=none --tree /usr/local https://luarocks.org/manifests/hisham/luafilesystem-1.8.0-1.src.rock
diff --git a/gateway/Roverfile.lock b/gateway/Roverfile.lock
index 291384db6..06cad60ef 100644
--- a/gateway/Roverfile.lock
+++ b/gateway/Roverfile.lock
@@ -20,7 +20,7 @@ lua-resty-url 0.3.5-1||production
 lua-term 0.8-1||testing
 lua_cliargs 3.0-2||testing
 luacov 0.15.0-1|19b52ca0298c8942df82dd441d7a4a588db4c413|testing
-luafilesystem 1.8.0-1|7c6e1b013caec0602ca4796df3b1d7253a2dd258|production,development,testing
+luafilesystem 1.9.0-1||testing,development,production
 luassert 1.9.0-1|8d8dc8a54cc468048a128a867f6449a6c3fdd11a|testing
 luasystem 0.4.1-1|c832d2b857d4174d17247de837426d4cfc95ec2f|testing
 lyaml 6.2.8-1||production
@@ -28,6 +28,6 @@ markdown 0.33-1|8c09109924b218aaecbfd4d4b1de538269c4d765|development
 mediator_lua 1.1.2-0||testing
 net-url 1.1-1|32acd84d06e16ddffc975adafce9cea26f3b2dd1|testing
 nginx-lua-prometheus 0.20181120-3|379c0a4d4d6f3c5b0eb93691fc7e14fff498e1ca|production
-penlight 1.13.1-1|3b42fd05d8e60998b0fc5830a397b2354a81170b|production,development,testing
+penlight 1.15.0-1||testing,development,production
 router 2.1-0||production
 say 1.4.1-3|45a3057e68c52b34ab59ef167efeb2340e356661|testing
\ No newline at end of file
diff --git a/gateway/apicast-scm-1.rockspec b/gateway/apicast-scm-1.rockspec
index 9548ebcea..5a1b47179 100644
--- a/gateway/apicast-scm-1.rockspec
+++ b/gateway/apicast-scm-1.rockspec
@@ -20,7 +20,7 @@ dependencies = {
    'lua-resty-execvp',
    'liquid',
    'argparse',
-   'penlight',
+   'penlight == 1.15.0',
    'nginx-lua-prometheus == 0.20181120',
    'lua-resty-jit-uuid',
    'lua-resty-ipmatcher',