diff --git a/Gemfile b/Gemfile
index 4f4255fe57..6b7f88c8a1 100644
--- a/Gemfile
+++ b/Gemfile
@@ -107,7 +107,7 @@ gem "strong_migrations"
 # this in turn broke CookieJar, a deprecated gem, that is used in em-http-request, that is
 # required by puffing-billy.  Rather than strip out puffing-billy or wait weeks for the
 # maintainers of upstream gems to agree a path, we are locking this below the breaking change
-gem "uri", "< 2.0.0"
+gem "uri", "< 1.0.0"
 
 group :development, :test do
   gem "awesome_print", "~> 1.9.2"
diff --git a/Gemfile.lock b/Gemfile.lock
index d50af49695..9b0bf56c87 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -721,7 +721,7 @@ GEM
       tzinfo (>= 1.0.0)
     uber (0.1.0)
     unicode-display_width (2.6.0)
-    uri (1.0.2)
+    uri (0.13.1)
     useragent (0.16.10)
     vcr (6.3.1)
       base64
@@ -851,7 +851,7 @@ DEPENDENCIES
   super_diff
   table_print
   tzinfo-data
-  uri (< 2.0.0)
+  uri (< 1.0.0)
   vcr
   view_component
   webdack-uuid_migration (~> 1.5.0)