Pin dependencies

.devcontainer/devcontainer.json

@@ -24,7 +24,7 @@
         "ghcr.io/devcontainers-extra/features/heroku-cli:1.0.5": {},
         "ghcr.io/devcontainers/features/github-cli:1": {},
         "ghcr.io/devcontainers/features/node:1": {
-            "version": "24"
+            "version": "v24.14.1"
         }
     },
     "customizations": {

.github/workflows/frontend-ci.yml

@@ -19,7 +19,7 @@ jobs:
 
       - uses: actions/setup-node@v6
         with:
-          node-version: 24.x
+          node-version: 24.14.1
 
       - name: Install Vue app
         run: npm ci
@@ -93,7 +93,7 @@ jobs:
 
     - uses: actions/setup-node@v6
       with:
-        node-version: 24
+        node-version: 24.14.1
 
     - name: Install uv
       uses: astral-sh/setup-uv@v7

pyproject.toml

@@ -10,55 +10,55 @@ license-files = ["LICENSE", "NOTICE"]
 classifiers = ["Private :: Do Not Upload"]
 dependencies = [
   # Runtime dependencies, always needed
-  "boto3==1.40.51",
-  "celery==5.5.3",
+  "boto3==1.42.74",
+  "celery==5.6.2",
   # Pin dandischema to exact version to make explicit which schema version is being used
   "dandischema==0.12.1", # schema version 0.7.0
-  "django[argon2]==5.2.7",
-  "django-allauth==65.12.0",
-  "django-auth-style==0.12.0",
-  "django-click==2.4.1",
+  "django[argon2]==5.2.12",
+  "django-allauth==65.15.0",
+  "django-auth-style==0.15.0",
+  "django-click==2.5.0",
   "django-cors-headers==4.9.0",
-  "django-environ==0.12.1",
+  "django-environ==0.13.0",
   "django-extensions==4.1",
   "django-filter==25.2",
-  "django-guardian==3.2.0",
-  "django-oauth-toolkit==3.1.0",
+  "django-guardian==3.3.0",
+  "django-oauth-toolkit==3.2.0",
   "django-resonant-settings[allauth,celery]==0.48.1",
-  "django-resonant-utils[allauth,s3_storage]==0.16.0",
+  "django-resonant-utils[allauth,s3_storage]==0.19.0",
   "django-stubs-ext==5.2.7",
   # TODO: pin djangorestframework until we figure out what the cause of
   # https://github.com/dandi/dandi-archive/issues/1896 is.
-  "djangorestframework==3.14.0",
+  "djangorestframework==3.17.1",
   "drf-extensions==0.8.0",
-  "drf-yasg==1.21.11",
-  "fsspec[http]==2025.9.0",
-  "jsonschema==4.25.1",
+  "drf-yasg==1.21.15",
+  "fsspec[http]==2025.12.0",
+  "jsonschema==4.26.0",
   "more_itertools==10.8.0",
-  "psycopg[binary]==3.2.10",
+  "psycopg[binary]==3.3.3",
   "pyyaml==6.0.3",
   "requests==2.32.5",
-  "rich==14.2.0",
-  "whitenoise[brotli]==6.11.0",
+  "rich==14.3.3",
+  "whitenoise[brotli]==6.12.0",
   "zarr-checksum==0.4.7",
   # Production-only
   "django-s3-file-field[s3]==1.1.0",
   "django-storages[s3]==1.14.6",
-  "sentry-sdk[celery,django,pure_eval]==2.41.0",
+  "sentry-sdk[celery,django,pure_eval]==2.56.0",
   "gunicorn==23.0.0",
   # Development-only, but required
-  "tqdm==4.67.1",
+  "tqdm==4.67.3",
 ]
 dynamic = ["version"]
 
 [project.optional-dependencies]
 development = [
   # Runtime dependencies, only needed with "development" settings
   "django-browser-reload==1.21.0",
-  "django-debug-toolbar==6.0.0",
-  "ipython==9.6.0",
+  "django-debug-toolbar==6.2.0",
+  "ipython==9.11.0",
   "watchdog==6.0.0",
-  "werkzeug==3.1.3",
+  "werkzeug==3.1.7",
 ]
 cli = ["dandi==0.74.3"]