diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index bc719704..720d2fc2 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -71,6 +71,9 @@ jobs:
     steps:
       - uses: actions/checkout@v4
       - uses: jupyterlab/maintainer-tools/.github/actions/base-setup@v1
+      - name: Install Python dependencies
+        run: |
+          pip install ".[test]"
       - uses: jupyterlab/maintainer-tools/.github/actions/check-links@v1
         with:
           ignore_links: "http://my-gateway-server.com:8888"
diff --git a/etc/docker/demo-base/Dockerfile b/etc/docker/demo-base/Dockerfile
index e9b49801..9b484c50 100644
--- a/etc/docker/demo-base/Dockerfile
+++ b/etc/docker/demo-base/Dockerfile
@@ -53,7 +53,8 @@ RUN dpkg --purge --force-depends ca-certificates-java \
     software-properties-common \
     openssh-server \
     openssh-client \
-    && apt-add-repository 'deb http://security.debian.org/debian-security stretch/updates main' \
+    && apt-add-repository 'deb http://security.debian.org/debian-security bullseye-security main' \
+    && apt-add-repository 'deb http://deb.debian.org/debian/ sid main' \
     && apt-get update && apt-get install -yq --no-install-recommends  \
     openjdk-8-jre-headless \
     ca-certificates-java \
diff --git a/etc/docker/kernel-tf-py/Dockerfile b/etc/docker/kernel-tf-py/Dockerfile
index 5e46d784..b6b7e225 100644
--- a/etc/docker/kernel-tf-py/Dockerfile
+++ b/etc/docker/kernel-tf-py/Dockerfile
@@ -1,6 +1,6 @@
 # Ubuntu:Bionic
 # TensorFlow 2.4.0
-ARG BASE_CONTAINER=jupyter/tensorflow-notebook:2023-03-13
+ARG BASE_CONTAINER=jupyter/tensorflow-notebook:2023-10-20
 
 FROM $BASE_CONTAINER
 
diff --git a/pyproject.toml b/pyproject.toml
index 4da7fef0..90cd4ee2 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -1,5 +1,5 @@
 [build-system]
-requires = ["hatchling>=1.5"]
+requires = ["hatchling>=1.21.1"]
 build-backend = "hatchling.build"
 
 [project]
@@ -57,7 +57,7 @@ jupyter-enterprisegateway = "enterprise_gateway.enterprisegatewayapp:launch_inst
 [project.optional-dependencies]
 test = [
   "coverage",
-  "pytest",
+  "pytest<8.1.0",
   "pytest-tornasync",
   "ipykernel",
   "pre-commit",