diff --git a/pyproject.toml b/pyproject.toml
index f68ee0fa..662f1322 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -6,31 +6,31 @@ readme = "README.md"
 requires-python = ">=3.12"
 dependencies = [
     "boto3>=1.20.25",
-    "cachetools>=5.5.0",
+    "cachetools>=4.1.1",
     "cerberus>=1.3.5",
     "codecov-ribs>=0.1.18",
     "colour>=0.1.5",
-    "cryptography>=43.0.3",
+    "cryptography>=43.0.1",
     "django-better-admin-arrayfield>=1.4.2",
-    "django-model-utils>=5.0.0",
+    "django-model-utils>=4.5.1",
     "django-postgres-extra>=2.0.8",
     "django-prometheus>=2.3.1",
     "django<5",
-    "google-auth>=2.36.0",
-    "google-cloud-pubsub>=2.27.1",
+    "google-auth>=2.21.0",
+    "google-cloud-pubsub>=2.18.4",
     "google-cloud-storage>=2.18.2",
     "httpx>=0.23.0",
-    "ijson>=3.3.0",
-    "minio>=7.2.10",
-    "mmh3>=5.0.1",
-    "oauthlib>=3.2.2",
-    "orjson>=3.10.11",
-    "prometheus-client>=0.21.0",
-    "pyjwt>=2.9.0",
-    "pyparsing>=3.2.0",
+    "ijson>=3.2.3",
+    "minio>=7.1.13",
+    "mmh3>=4.0.1",
+    "oauthlib>=3.1.0",
+    "orjson>=3.10.9",
+    "prometheus-client>=0.17.1",
+    "pyjwt>=2.8.0",
+    "pyparsing>=2.4.7",
     "python-redis-lock>=4.0.0",
-    "pyyaml>=6.0.2",
-    "redis>=5.2.0",
+    "pyyaml>=6.0.1",
+    "redis>=4.4.4",
     "requests>=2.32.3",
     "sentry-sdk==2.13.0",
     "sqlalchemy<2",
@@ -42,22 +42,22 @@ build-backend = "hatchling.build"
 
 [tool.uv]
 dev-dependencies = [
-    "factory-boy>=3.3.1",
-    "freezegun>=1.5.1",
+    "factory-boy>=3.2.0",
+    "freezegun>=1.1.0",
     "mock>=5.1.0",
     "mypy>=1.13.0",
-    "pre-commit>=4.0.1",
-    "psycopg2-binary>=2.9.10",
-    "pytest-asyncio>=0.24.0",
-    "pytest-cov>=6.0.0",
-    "pytest-django>=4.9.0",
+    "pre-commit>=2.11.1",
+    "psycopg2-binary>=2.9.2",
+    "pytest-asyncio>=0.23.6",
+    "pytest-cov>=5.0.0",
+    "pytest-django>=4.8.0",
     "pytest-mock>=3.14.0",
-    "pytest>=8.3.3",
+    "pytest>=8.1.1",
     "respx>=0.21.1",
     "ruff>=0.7.3",
     "types-mock>=5.1.0.20240425",
     # NOTE: some weird interaction between existing `vcrpy` snapshots and the way
     # `oauth2` / `minio` deal with requests forces us to downgrade `urllib3`:
     "urllib3==1.26.19",
-    "vcrpy>=6.0.2",
+    "vcrpy>=6.0.1",
 ]
diff --git a/uv.lock b/uv.lock
index d200ad32..71787150 100644
--- a/uv.lock
+++ b/uv.lock
@@ -1455,31 +1455,31 @@ dev = [
 [package.metadata]
 requires-dist = [
     { name = "boto3", specifier = ">=1.20.25" },
-    { name = "cachetools", specifier = ">=5.5.0" },
+    { name = "cachetools", specifier = ">=4.1.1" },
     { name = "cerberus", specifier = ">=1.3.5" },
     { name = "codecov-ribs", specifier = ">=0.1.18" },
     { name = "colour", specifier = ">=0.1.5" },
-    { name = "cryptography", specifier = ">=43.0.3" },
+    { name = "cryptography", specifier = ">=43.0.1" },
     { name = "django", specifier = "<5" },
     { name = "django-better-admin-arrayfield", specifier = ">=1.4.2" },
-    { name = "django-model-utils", specifier = ">=5.0.0" },
+    { name = "django-model-utils", specifier = ">=4.5.1" },
     { name = "django-postgres-extra", specifier = ">=2.0.8" },
     { name = "django-prometheus", specifier = ">=2.3.1" },
-    { name = "google-auth", specifier = ">=2.36.0" },
-    { name = "google-cloud-pubsub", specifier = ">=2.27.1" },
+    { name = "google-auth", specifier = ">=2.21.0" },
+    { name = "google-cloud-pubsub", specifier = ">=2.18.4" },
     { name = "google-cloud-storage", specifier = ">=2.18.2" },
     { name = "httpx", specifier = ">=0.23.0" },
-    { name = "ijson", specifier = ">=3.3.0" },
-    { name = "minio", specifier = ">=7.2.10" },
-    { name = "mmh3", specifier = ">=5.0.1" },
-    { name = "oauthlib", specifier = ">=3.2.2" },
-    { name = "orjson", specifier = ">=3.10.11" },
-    { name = "prometheus-client", specifier = ">=0.21.0" },
-    { name = "pyjwt", specifier = ">=2.9.0" },
-    { name = "pyparsing", specifier = ">=3.2.0" },
+    { name = "ijson", specifier = ">=3.2.3" },
+    { name = "minio", specifier = ">=7.1.13" },
+    { name = "mmh3", specifier = ">=4.0.1" },
+    { name = "oauthlib", specifier = ">=3.1.0" },
+    { name = "orjson", specifier = ">=3.10.9" },
+    { name = "prometheus-client", specifier = ">=0.17.1" },
+    { name = "pyjwt", specifier = ">=2.8.0" },
+    { name = "pyparsing", specifier = ">=2.4.7" },
     { name = "python-redis-lock", specifier = ">=4.0.0" },
-    { name = "pyyaml", specifier = ">=6.0.2" },
-    { name = "redis", specifier = ">=5.2.0" },
+    { name = "pyyaml", specifier = ">=6.0.1" },
+    { name = "redis", specifier = ">=4.4.4" },
     { name = "requests", specifier = ">=2.32.3" },
     { name = "sentry-sdk", specifier = "==2.13.0" },
     { name = "sqlalchemy", specifier = "<2" },
@@ -1487,22 +1487,22 @@ requires-dist = [
 
 [package.metadata.requires-dev]
 dev = [
-    { name = "factory-boy", specifier = ">=3.3.1" },
-    { name = "freezegun", specifier = ">=1.5.1" },
+    { name = "factory-boy", specifier = ">=3.2.0" },
+    { name = "freezegun", specifier = ">=1.1.0" },
     { name = "mock", specifier = ">=5.1.0" },
     { name = "mypy", specifier = ">=1.13.0" },
-    { name = "pre-commit", specifier = ">=4.0.1" },
-    { name = "psycopg2-binary", specifier = ">=2.9.10" },
-    { name = "pytest", specifier = ">=8.3.3" },
-    { name = "pytest-asyncio", specifier = ">=0.24.0" },
-    { name = "pytest-cov", specifier = ">=6.0.0" },
-    { name = "pytest-django", specifier = ">=4.9.0" },
+    { name = "pre-commit", specifier = ">=2.11.1" },
+    { name = "psycopg2-binary", specifier = ">=2.9.2" },
+    { name = "pytest", specifier = ">=8.1.1" },
+    { name = "pytest-asyncio", specifier = ">=0.23.6" },
+    { name = "pytest-cov", specifier = ">=5.0.0" },
+    { name = "pytest-django", specifier = ">=4.8.0" },
     { name = "pytest-mock", specifier = ">=3.14.0" },
     { name = "respx", specifier = ">=0.21.1" },
     { name = "ruff", specifier = ">=0.7.3" },
     { name = "types-mock", specifier = ">=5.1.0.20240425" },
     { name = "urllib3", specifier = "==1.26.19" },
-    { name = "vcrpy", specifier = ">=6.0.2" },
+    { name = "vcrpy", specifier = ">=6.0.1" },
 ]
 
 [[package]]