diff --git a/pyproject.toml b/pyproject.toml
index 35d09247b3..481d3270a7 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -10,7 +10,8 @@ package-mode = false
 [tool.poetry.dependencies]
 python = "~3.10"
 alembic-utils = "*"
-Authlib = "*"
+# TODO - was *@1.3.2.  Upgrades to 1.4.0 breaks?  The newer version is undocumented.
+Authlib = "~1.3.2"
 boto3 = "*"
 botocore = "*"
 cachelib = "*"
@@ -22,7 +23,8 @@ click-datetime = "*"
 # https://cryptography.io/en/latest/changelog/#v44-0-0
 # https://pkgs.alpinelinux.org/package/v3.19/main/x86_64/openssl
 cryptography = "~43"
-ddtrace = "*"
+# TODO - was *@2.18.1.  Upgrade breaks?
+ddtrace = "~2.16.2"
 docopt = "*"
 fido2 = "*"
 Flask = "*"