diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
index b4efe9fdbf..4347ada173 100644
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -26,7 +26,7 @@ jobs:
       # if one python version fails, let the others finish
       fail-fast: false
       matrix:
-        python-version: ["3.9", "3.10", "3.11", "3.12"]
+        python-version: ["3.9", "3.10", "3.11", "3.12", "3.13"]
     steps:
       - uses: actions/checkout@v4
       - name: Set up Python
diff --git a/bbot/modules/extractous.py b/bbot/modules/extractous.py
index 63f4ecd6d1..c37be08008 100644
--- a/bbot/modules/extractous.py
+++ b/bbot/modules/extractous.py
@@ -65,7 +65,7 @@ class extractous(BaseModule):
         "extensions": "File extensions to parse",
     }
 
-    deps_pip = ["extractous"]
+    deps_pip = ["extractous~=0.3.0"]
     scope_distance_modifier = 1
 
     async def setup(self):
diff --git a/bbot/test/test_step_1/test_cli.py b/bbot/test/test_step_1/test_cli.py
index c700cfaad8..77f2ba4d6a 100644
--- a/bbot/test/test_step_1/test_cli.py
+++ b/bbot/test/test_step_1/test_cli.py
@@ -271,7 +271,7 @@ async def test_cli_args(monkeypatch, caplog, capsys, clean_default_config):
     result = await cli._main()
     out, err = capsys.readouterr()
     assert result is None
-    assert "Target:\n  -t TARGET [TARGET ...]" in out
+    assert "-t TARGET [TARGET ...]" in out
 
     # list modules
     monkeypatch.setattr("sys.argv", ["bbot", "-l"])
diff --git a/poetry.lock b/poetry.lock
index 733c8b1985..b6fe0e6087 100644
--- a/poetry.lock
+++ b/poetry.lock
@@ -3157,4 +3157,4 @@ type = ["pytest-mypy"]
 [metadata]
 lock-version = "2.0"
 python-versions = "^3.9"
-content-hash = "0145b8e3c345caf43d941534dbfae68125f0006a29c033857311c392ff73672f"
+content-hash = "3811533a6a78ec770a5cc7f953eba4807c4b13fba8f880b5dd4858e7fe6ababb"
diff --git a/pyproject.toml b/pyproject.toml
index 7b463077d2..e0323f04f2 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -41,7 +41,6 @@ pyjwt = "^2.7.0"
 beautifulsoup4 = "^4.12.2"
 lxml = ">=4.9.2,<6.0.0"
 dnspython = "^2.4.2"
-pydantic = "^2.4.2"
 tldextract = "^5.1.1"
 cachetools = "^5.3.2"
 socksio = "^1.0.0"
@@ -54,6 +53,7 @@ yara-python = "^4.5.1"
 pyzmq = "^26.0.3"
 httpx = "^0.27.0"
 puremagic = "^1.28"
+pydantic = "^2.9.2"
 radixtarget = "^3.0.13"
 cloudcheck = "^7.0.12"
 orjson = "^3.10.12"