diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index a8046c29..7047e78a 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -19,4 +19,6 @@ updates:
     schedule:
       interval: "monthly"
     ignore:
+      - dependency-name: "invenio-accounts"  # see https://github.com/HEPData/hepdata/issues/816
+      - dependency-name: "pytest"  # see https://github.com/HEPData/hepdata/issues/815
       - dependency-name: "pytest-cov"  # see https://github.com/HEPData/hepdata/issues/580
diff --git a/requirements.txt b/requirements.txt
index 845345af..83c4abab 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -5,9 +5,8 @@ gunicorn==22.0.0
 hepdata-converter-ws-client==0.2.2
 hepdata-validator==0.3.5
 invenio-access==2.0.0     # Indirect (needed by invenio-admin)
-invenio-accounts==5.0.1
+invenio-accounts==5.0.1  # https://github.com/HEPData/hepdata/issues/816
 invenio-admin==1.5.0
-invenio-app==1.5.0
 invenio-assets==3.0.3
 invenio-config==1.0.4
 invenio-db[postgresql]==1.1.5
diff --git a/setup.py b/setup.py
index 9317ca69..93995a73 100644
--- a/setup.py
+++ b/setup.py
@@ -32,8 +32,8 @@
 history = open('CHANGES.rst').read()
 
 tests_require = [
-    'pytest>=6.0.2',
-    'pytest-cov>=2.9.0,<4.0.0',
+    'pytest>=6.0.2,<8.0.0',  # see https://github.com/HEPData/hepdata/issues/815
+    'pytest-cov>=2.9.0,<4.0.0',  # see https://github.com/HEPData/hepdata/issues/580
     'pytest-flask>=1.0.0',
     'pytest-mock>=3.1.0',
     'pytest-timeout>=1.4.2',