diff --git a/poetry.lock b/poetry.lock
index 1ed4dba66d2..66797f02ad9 100644
--- a/poetry.lock
+++ b/poetry.lock
@@ -956,7 +956,7 @@ testing = ["func-timeout", "jaraco.itertools", "pytest (>=6)", "pytest-black (>=
 [metadata]
 lock-version = "1.1"
 python-versions = "^3.7"
-content-hash = "7e40cde2399843d53e715f657b703397ce236196663788ada896d7e2a53c869a"
+content-hash = "a7c55dc6e77aa9e94c250323d90ddc80a28e2e95f049e2feccab7caeadce5e1d"
 
 [metadata.files]
 attrs = [
diff --git a/pyproject.toml b/pyproject.toml
index 8d95d3811c6..5c2d5d18d47 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -54,8 +54,7 @@ crashtest = "^0.3.0"
 html5lib = "^1.0"
 importlib-metadata = { version = "^4.4", python = "<3.10" }
 jsonschema = "^4.10.0"
-# keyring uses calver, so version is unclamped
-keyring = ">=21.2.0"
+keyring = "^23.9.0"
 # packaging uses calver, so version is unclamped
 packaging = ">=20.4"
 pexpect = "^4.7.0"
@@ -67,7 +66,7 @@ shellingham = "^1.5"
 # exclude 0.11.2 and 0.11.3 due to https://github.com/sdispater/tomlkit/issues/225
 tomlkit = ">=0.11.1,<1.0.0,!=0.11.2,!=0.11.3"
 # exclude 20.4.5 - 20.4.6 due to https://github.com/pypa/pip/issues/9953
-virtualenv = ">=20.4.3,!=20.4.5,!=20.4.6"
+virtualenv = "^20.4.3,!=20.4.5,!=20.4.6"
 xattr = { version = "^0.9.7", markers = "sys_platform == 'darwin'" }
 urllib3 = "^1.26.0"
 dulwich = "^0.20.44"