diff --git a/pyproject.toml b/pyproject.toml
index 2301f77e..6043fb12 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -9,7 +9,7 @@ dependencies = [
     "cachetools",
     "dateparser",
     "discord.py",
-    "django~=4.2.11",
+    "django<5.0",
     "django-anymail",
     "django-auditlog>=3.0.0",
     "django-bleach",
@@ -20,7 +20,7 @@ dependencies = [
     "django-jsonform",
     "django-maintenance-mode",
     "django-markdownx",
-    "django-ninja",
+    "django-ninja>=1.2.2",
     "django-oauth-toolkit==2.3.0",
     "django-polymorphic @ git+https://github.com/jazzband/django-polymorphic/@v4.0.0a",
     "django-redis",
@@ -68,7 +68,7 @@ dev-dependencies = [
     "django-stubs>=5.0.2",
     "djlint~=1.34.1",
     "isort~=5.13.2",
-    "lxml-stubs",
+    "lxml-stubs>=0.5.1",
     "pyright>=1.1.371",
     "ruff",
     "mkdocs-material>=9.5.25",
@@ -93,7 +93,7 @@ plugins = ["mypy_django_plugin.main"]
 django_settings_module = "boofilsic.settings"
 
 [tool.ruff]
-exclude = ["neodb-takahe/*", "media", ".venv", ".git", "playground", "**/tests.py", "neodb", "**/migrations", "**/commands", "**/importers", "**/sites", "legacy" ]
+exclude = ["neodb-takahe/*", "media", ".venv", ".git", "playground", "**/tests.py", "neodb", "**/migrations", "**/commands", "**/importers",  "legacy" ]
 lint.ignore = ["F401", "F403", "F405"]
 
 [tool.setuptools]
diff --git a/requirements-dev.lock b/requirements-dev.lock
index f15fc5d9..08814051 100644
--- a/requirements-dev.lock
+++ b/requirements-dev.lock
@@ -7,6 +7,7 @@
 #   all-features: false
 #   with-sources: false
 #   generate-hashes: false
+#   universal: false
 
 aiohttp==3.9.5
     # via discord-py
@@ -63,7 +64,7 @@ deepmerge==1.1.1
 discord-py==2.3.2
 distlib==0.3.8
     # via virtualenv
-django==4.2.13
+django==4.2.14
     # via django-anymail
     # via django-appconf
     # via django-auditlog
@@ -95,7 +96,7 @@ django-hijack==3.5.4
 django-jsonform==2.22.0
 django-maintenance-mode==0.21.1
 django-markdownx==4.0.7
-django-ninja==1.1.0
+django-ninja==1.2.2
 django-oauth-toolkit==2.3.0
 django-polymorphic @ git+https://github.com/jazzband/django-polymorphic/@1039f882b99f97bf657bd958c949ee6a3b00377a
 django-redis==5.4.0
diff --git a/requirements.lock b/requirements.lock
index 682831ec..b3ec5ad2 100644
--- a/requirements.lock
+++ b/requirements.lock
@@ -7,6 +7,7 @@
 #   all-features: false
 #   with-sources: false
 #   generate-hashes: false
+#   universal: false
 
 aiohttp==3.9.5
     # via discord-py
@@ -47,7 +48,7 @@ cryptography==42.0.8
 dateparser==1.2.0
 deepmerge==1.1.1
 discord-py==2.3.2
-django==4.2.13
+django==4.2.14
     # via django-anymail
     # via django-appconf
     # via django-auditlog
@@ -77,7 +78,7 @@ django-hijack==3.5.4
 django-jsonform==2.22.0
 django-maintenance-mode==0.21.1
 django-markdownx==4.0.7
-django-ninja==1.1.0
+django-ninja==1.2.2
 django-oauth-toolkit==2.3.0
 django-polymorphic @ git+https://github.com/jazzband/django-polymorphic/@1039f882b99f97bf657bd958c949ee6a3b00377a
 django-redis==5.4.0
@@ -126,8 +127,6 @@ mistune==3.0.2
 multidict==6.0.5
     # via aiohttp
     # via yarl
-nodeenv==1.9.1
-    # via pyright
 oauthlib==3.2.2
     # via django-oauth-toolkit
 openpyxl==3.1.3
@@ -148,7 +147,6 @@ pydantic==2.7.3
     # via django-ninja
 pydantic-core==2.18.4
     # via pydantic
-pyright==1.1.370
 python-dateutil==2.9.0.post0
     # via dateparser
     # via django-auditlog