diff --git a/requirements/base.in b/requirements/base.in
index ea7ea985..e4489695 100644
--- a/requirements/base.in
+++ b/requirements/base.in
@@ -7,7 +7,7 @@ python-decouple  # processing of envvar configs
 jsonschema
 
 # Framework libraries
-django
+django~=4.2
 django-admin-index
 django-axes
 django-jsonsuit
diff --git a/requirements/base.txt b/requirements/base.txt
index dc28a9d4..3eb96db1 100644
--- a/requirements/base.txt
+++ b/requirements/base.txt
@@ -48,7 +48,7 @@ click-plugins==1.1.1
     # via celery
 click-repl==0.2.0
     # via celery
-commonground-api-common==1.12.1
+commonground-api-common==1.13.0
     # via -r requirements/base.in
 coreapi==2.3.3
     # via commonground-api-common
@@ -61,7 +61,7 @@ cryptography==42.0.2
     #   mozilla-django-oidc
     #   pyopenssl
     #   webauthn
-django==3.2.20
+django==4.2.11
     # via
     #   -r requirements/base.in
     #   commonground-api-common
@@ -136,7 +136,7 @@ django-solo==2.0.0
     #   zgw-consumers
 django-two-factor-auth[phonenumberslite,webauthn]==1.16.0
     # via maykin-2fa
-djangorestframework==3.12.4
+djangorestframework==3.14.0
     # via
     #   -r requirements/base.in
     #   commonground-api-common
@@ -243,11 +243,10 @@ pytz==2023.3
     # via
     #   -r requirements/base.in
     #   celery
-    #   django
+    #   djangorestframework
     #   drf-yasg
 pyyaml==6.0
     # via
-    #   commonground-api-common
     #   drf-spectacular
     #   drf-yasg
     #   gemma-zds-client
diff --git a/requirements/ci.txt b/requirements/ci.txt
index 2525b337..8795434e 100644
--- a/requirements/ci.txt
+++ b/requirements/ci.txt
@@ -78,7 +78,7 @@ click-repl==0.2.0
     # via
     #   -r requirements/base.txt
     #   celery
-commonground-api-common==1.12.1
+commonground-api-common==1.13.0
     # via -r requirements/base.txt
 coreapi==2.3.3
     # via
@@ -100,7 +100,7 @@ cryptography==42.0.2
     #   webauthn
 cssselect==1.2.0
     # via pyquery
-django==3.2.20
+django==4.2.11
     # via
     #   -r requirements/base.txt
     #   commonground-api-common
@@ -206,7 +206,7 @@ django-two-factor-auth[phonenumberslite,webauthn]==1.16.0
     #   maykin-2fa
 django-webtest==1.9.10
     # via -r requirements/test-tools.in
-djangorestframework==3.12.4
+djangorestframework==3.14.0
     # via
     #   -r requirements/base.txt
     #   commonground-api-common
@@ -373,12 +373,11 @@ pytz==2023.3
     # via
     #   -r requirements/base.txt
     #   celery
-    #   django
+    #   djangorestframework
     #   drf-yasg
 pyyaml==6.0
     # via
     #   -r requirements/base.txt
-    #   commonground-api-common
     #   drf-spectacular
     #   drf-yasg
     #   gemma-zds-client
diff --git a/requirements/dev.txt b/requirements/dev.txt
index f7d7acbd..75778c0e 100644
--- a/requirements/dev.txt
+++ b/requirements/dev.txt
@@ -94,7 +94,7 @@ click-repl==0.2.0
     # via
     #   -r requirements/ci.txt
     #   celery
-commonground-api-common==1.12.1
+commonground-api-common==1.13.0
     # via -r requirements/ci.txt
 coreapi==2.3.3
     # via
@@ -118,7 +118,7 @@ cssselect==1.2.0
     # via
     #   -r requirements/ci.txt
     #   pyquery
-django==3.2.20
+django==4.2.11
     # via
     #   -r requirements/ci.txt
     #   commonground-api-common
@@ -230,7 +230,7 @@ django-two-factor-auth[phonenumberslite,webauthn]==1.16.0
     #   maykin-2fa
 django-webtest==1.9.10
     # via -r requirements/ci.txt
-djangorestframework==3.12.4
+djangorestframework==3.14.0
     # via
     #   -r requirements/ci.txt
     #   commonground-api-common
@@ -431,12 +431,11 @@ pytz==2023.3
     # via
     #   -r requirements/ci.txt
     #   celery
-    #   django
+    #   djangorestframework
     #   drf-yasg
 pyyaml==6.0
     # via
     #   -r requirements/ci.txt
-    #   commonground-api-common
     #   drf-spectacular
     #   drf-yasg
     #   gemma-zds-client