diff --git a/.github/workflows/gate.yml b/.github/workflows/gate.yml
index 81e0f41f..d2e81936 100644
--- a/.github/workflows/gate.yml
+++ b/.github/workflows/gate.yml
@@ -14,7 +14,7 @@ on:
           - github_action_scripts/python_setup.sh
 jobs:
     build-gate:
-        runs-on: ubuntu-latest
+        runs-on: ubuntu-22.04
         strategy:
             matrix:
                 gate_version: ["8.6.1", "9.0.1"]
diff --git a/.github/workflows/integration-tests.yml b/.github/workflows/integration-tests.yml
index 0456c02c..dbc29d91 100644
--- a/.github/workflows/integration-tests.yml
+++ b/.github/workflows/integration-tests.yml
@@ -14,7 +14,7 @@ on:
             - github_action_scripts/python_setup.sh
 jobs:
     run-integration-tests:
-        runs-on: ubuntu-latest
+        runs-on: ubuntu-22.04
         strategy:
             matrix:
                 # add "postgres" when supported
diff --git a/.github/workflows/python-tests.yml b/.github/workflows/python-tests.yml
index a33b663e..ce995da7 100644
--- a/.github/workflows/python-tests.yml
+++ b/.github/workflows/python-tests.yml
@@ -13,7 +13,7 @@ on:
             - github_action_scripts/redis_setup.sh
 jobs:
     python-tests:
-        runs-on: ubuntu-latest
+        runs-on: ubuntu-22.04
         strategy:
             matrix:
                 # Run tests with sqlite for all python versions
diff --git a/setup.py b/setup.py
index c6a92b26..f30434e2 100755
--- a/setup.py
+++ b/setup.py
@@ -76,7 +76,7 @@
     "cherrypy==18.6.0",  # Cross-platform web server
     "colorlog==4.1.0",  # colour in logs
     "distro==1.5.0",  # replaces platform.linux_distribution
-    "django==4.2.16",  # for main CRATE research database web server
+    "django==4.2.17",  # for main CRATE research database web server
     "django-debug-toolbar==3.2.1",  # Django debug toolbar
     # "django-debug-toolbar-template-profiler==2.0.1",  # v1.0.1 removed 2017-01-30: division by zero when rendering time is zero  # noqa: E501
     "django-extensions==3.1.1",  # for graph_models, show_urls etc.
@@ -132,7 +132,7 @@
     "pyramid_tm==2.4",  # Pyramid transaction management
     "redis==4.5.4",  # interface to Redis in-memory key-value database
     "requests==2.32.2",  # HTTP requests
-    "tornado==6.4.1",  # web framework
+    "tornado==6.4.2",  # web framework
     "transaction==3.0.0",  # generic transaction management
     "urllib3==1.26.19",  # used by requests
     "waitress==3.0.1",  # pure-Python WSGI server