diff --git a/pyproject.toml b/pyproject.toml
index f1db9a368..82e7243ca 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -13,10 +13,8 @@ dependencies = [
   "celery",
   "dandi",  # minimal version is also provided in API /info
   # Pin dandischema to exact version to make explicit which schema version is being used
-  "dandischema",  # schema version 0.6.10
+  "dandischema==0.11.1",  # schema version 0.6.10
   "django[argon2]",
-  # Pin to version where this bug is fixed
-  # https://codeberg.org/allauth/django-allauth/issues/4072
   "django-allauth",
   "django-auth-style",
   "django-click",
@@ -31,7 +29,7 @@ dependencies = [
   "django-stubs-ext",
   # TODO: pin djangorestframework until we figure out what the cause of
   # https://github.com/dandi/dandi-archive/issues/1896 is.
-  "djangorestframework",
+  "djangorestframework<3.15.0",
   "drf-extensions",
   "drf-yasg",
   "fsspec[http]",
diff --git a/uv.lock b/uv.lock
index 7d5a915db..223e6adce 100644
--- a/uv.lock
+++ b/uv.lock
@@ -731,7 +731,7 @@ requires-dist = [
     { name = "boto3" },
     { name = "celery" },
     { name = "dandi" },
-    { name = "dandischema" },
+    { name = "dandischema", specifier = "==0.11.1" },
     { name = "django", extras = ["argon2"] },
     { name = "django-allauth" },
     { name = "django-auth-style" },
@@ -749,7 +749,7 @@ requires-dist = [
     { name = "django-s3-file-field", extras = ["s3"] },
     { name = "django-storages", extras = ["s3"] },
     { name = "django-stubs-ext" },
-    { name = "djangorestframework" },
+    { name = "djangorestframework", specifier = "<3.15.0" },
     { name = "drf-extensions" },
     { name = "drf-yasg" },
     { name = "fsspec", extras = ["http"] },