diff --git a/docker-compose.override.yml b/docker-compose.override.yml
index 15a671817..796062b9e 100644
--- a/docker-compose.override.yml
+++ b/docker-compose.override.yml
@@ -91,7 +91,7 @@ services:
       - perma_payments
 
   perma-payments:
-    image: registry.lil.tools/harvardlil/perma-payments:20-cd472eae28bb3affe3b6da1880ff17a2
+    image: registry.lil.tools/harvardlil/perma-payments:21-fb891216b5f7d0402db430b123b82fa8
     # hack: sleep to give the database time to start up
     command: >
       sh -c "sleep 5 && ./manage.py migrate && invoke run"
diff --git a/perma_web/requirements.txt b/perma_web/requirements.txt
index 77058783b..8a7bb2505 100644
--- a/perma_web/requirements.txt
+++ b/perma_web/requirements.txt
@@ -234,9 +234,9 @@ decorator==5.1.1 \
     # via
     #   ipdb
     #   ipython
-django==4.2.17 \
-    --hash=sha256:3a93350214ba25f178d4045c0786c61573e7dbfa3c509b3551374f1e11ba8de0 \
-    --hash=sha256:6b56d834cc94c8b21a8f4e775064896be3b4a4ca387f2612d4406a5927cd2fdc
+django==4.2.18 \
+    --hash=sha256:52ae8eacf635617c0f13b44f749e5ea13dc34262819b2cc8c8636abb08d82c4b \
+    --hash=sha256:ba52eff7e228f1c775d5b0db2ba53d8c49d2f8bfe6ca0234df6b7dd12fb25b19
     # via
     #   -r requirements.in
     #   django-admin-smoke-tests