diff --git a/.github/workflows/lektor-build-deploy.yml b/.github/workflows/lektor-build-deploy.yml
index 25c9479e4..ab8385895 100644
--- a/.github/workflows/lektor-build-deploy.yml
+++ b/.github/workflows/lektor-build-deploy.yml
@@ -4,17 +4,28 @@ jobs:
  build-and-deploy:
   runs-on: ubuntu-latest
   steps:
-   - uses: actions/checkout@v2
-   - name: setup python version
-     uses: actions/setup-python@v3
-     with:
-      python-version: 3.9
-   - name: Install dependencies
-     run: |
-      pip install pipenv
-      pipenv sync
-      pipenv run lektor build -f webpack
-   - name: Deploy to production
-     if: github.ref == 'refs/heads/main'
-     run: |
-      pipenv run lektor deploy ghpages --username ${{ secrets.LEKTOR_DEPLOY_USERNAME }} --password ${{ secrets.LEKTOR_DEPLOY_PASSWORD }}
+
+    # https://github.com/actions/setup-python
+    - name: setup python version
+      uses: actions/setup-python@v5
+      with:
+        python-version: 3.11
+
+    - name: Install pipenv
+      run: |
+        pip install --upgrade pip
+        pip install pipenv
+
+    # https://github.com/actions/checkout
+    - uses: actions/checkout@v4
+
+    - name: Install dependencies
+      run: pipenv sync
+
+    - name: Build static site and use webpack
+      run: pipenv run lektor build -f webpack
+
+    - name: Deploy to production
+      if: github.ref == 'refs/heads/main'
+      run: |
+        pipenv run lektor deploy ghpages --username ${{ secrets.LEKTOR_DEPLOY_USERNAME }} --password ${{ secrets.LEKTOR_DEPLOY_PASSWORD }}
diff --git a/Pipfile b/Pipfile
index ca3d75d9b..e17e81ee0 100644
--- a/Pipfile
+++ b/Pipfile
@@ -4,10 +4,10 @@ url = "https://pypi.org/simple"
 verify_ssl = true
 
 [packages]
-black = "*"
+black = ">=24.3.0"
 flake8 = "*"
 isort = "*"
-lektor = "*"
+lektor = ">=3.3.11"
 
 [requires]
-python_version = "3.9"
+python_version = "3.11"