diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 25a2ac09..f9efa93d 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -29,7 +29,7 @@ jobs:
     runs-on: ubuntu-22.04
     steps:
     # Check out the PR head on pull_request, otherwise default
-    - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
+    - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4
       with:
         ref: ${{ github.event.pull_request.head.ref }}
         token: ${{ secrets.GH_TOKEN }}
diff --git a/pyproject.toml b/pyproject.toml
index e5f9d73a..4b99d7a4 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -32,7 +32,7 @@ include = [
 ]
 
 [tool.poetry.dependencies]
-python = ">=3.10,<3.12"
+python = ">=3.12,<3.13"
 ampel-plot = {version = ">=0.8.3-3,<0.9", source = "pypi"}
 ampel-ztf = {version = ">=0.8.13,<0.9", extras = ["kafka"], optional = true}
 ampel-photometry = {version = ">=0.8.3,<0.9", source = "pypi"}
@@ -50,7 +50,7 @@ astropy = ">=5.0"
 # pymage never made it to pypi; distribute our own package
 pymage = {version = "^0.5", optional = true, source = "desy-gitlab"}
 pandas = "^2.0.0"
-seaborn = "^0.12.0"
+seaborn = "^0.13.0"
 adjustText = "^1.0.0"
 extcats = {version = "^2.4.2", optional = true, source = "pypi"}
 slack-sdk = {version = "^3", optional = true}
@@ -63,7 +63,7 @@ more-itertools = "^9.0.0"
 uncertainties = "^3.1.7"
 scikit-learn = "^1.1.3"
 healpy = {version = "^1.16.2", optional = true}
-light-curve = {version = "^0.7.3"}
+light-curve = {version = "^0.9.0"}
 ampel-lsst = {version = ">=0.8.6,<0.9", optional = true}
 ligo-gracedb = {version = "^2.12.0", optional = true}
 astro-datalab = {version = "^2", optional = true}
@@ -71,10 +71,10 @@ astro-datalab = {version = "^2", optional = true}
 snpy = {version = "^2.5.3", optional = true, source = "desy-gitlab"}
 
 [tool.poetry.dev-dependencies]
-mypy = "^1.6.1"
-pytest = "^8.0.2"
+mypy = "^1.10.0"
+pytest = "^8.2.1"
 pytest-cov = "^5.0.0"
-pytest-mock = "^3.12.0"
+pytest-mock = "^3.14.0"
 types-requests = "^2.25.9"
 types-pytz = "^2022.1.2"
 # prevent poetry 1.3 from removing setuptools
@@ -94,7 +94,7 @@ voevent = ["voevent-parse"]
 ztf = ["ampel-ztf"]
 
 [tool.poetry.group.dev.dependencies]
-ruff = "^0.1.13"
+ruff = "^0.4.0"
 types-pyyaml = "^6.0.12.20240311"