diff --git a/projects/agpt.co/package.yml b/projects/agpt.co/package.yml
index d92dec5c..e5a202ed 100644
--- a/projects/agpt.co/package.yml
+++ b/projects/agpt.co/package.yml
@@ -13,7 +13,7 @@ platforms:
 entrypoint: tea ./entrypoint.sh
 
 dependencies:
-  python.org: ^3.10
+  python.org: '>=3.10<3.12'
   redis.io: ^7
   tea.xyz: ^0
 
diff --git a/projects/ansible.com/package.yml b/projects/ansible.com/package.yml
index ae8c7abf..444dbdcd 100644
--- a/projects/ansible.com/package.yml
+++ b/projects/ansible.com/package.yml
@@ -7,7 +7,7 @@ versions:
   strip: /^v/
 
 dependencies:
-  python.org: '>=3.7'
+  python.org: '>=3.7<3.12'
 
 build:
   script: |
diff --git a/projects/apache.org/arrow/package.yml b/projects/apache.org/arrow/package.yml
index 66c93ab9..b268b676 100644
--- a/projects/apache.org/arrow/package.yml
+++ b/projects/apache.org/arrow/package.yml
@@ -26,7 +26,7 @@ build:
     boost.org: '*'
     cmake.org: '*'
     llvm.org: ~16
-    python.org: '*'
+    python.org: '<3.12'
   working-directory: cpp
   script:
     - cmake -B build $CMAKE_ARGS
diff --git a/projects/apache.org/subversion/package.yml b/projects/apache.org/subversion/package.yml
index 2f592938..4f0061ac 100644
--- a/projects/apache.org/subversion/package.yml
+++ b/projects/apache.org/subversion/package.yml
@@ -25,7 +25,7 @@ build:
   dependencies:
     freedesktop.org/pkg-config: ^0.29
     swig.org: ^4
-    python.org: ^3.11
+    python.org: ~3.11
   script: |
     ./configure $ARGS
     make --jobs {{ hw.concurrency }}
diff --git a/projects/bloomreach.com/s4cmd/package.yml b/projects/bloomreach.com/s4cmd/package.yml
index bd5402f7..61485cb9 100644
--- a/projects/bloomreach.com/s4cmd/package.yml
+++ b/projects/bloomreach.com/s4cmd/package.yml
@@ -6,7 +6,7 @@ versions:
   github: bloomreach/s4cmd/tags
 
 dependencies:
-  python.org: ^3
+  python.org: '>=3<3.12'
 
 build:
   python-venv.sh {{prefix}}/bin/s4cmd
diff --git a/projects/cairographics.org/pycairo/package.yml b/projects/cairographics.org/pycairo/package.yml
index 754050f8..51c65046 100644
--- a/projects/cairographics.org/pycairo/package.yml
+++ b/projects/cairographics.org/pycairo/package.yml
@@ -11,7 +11,7 @@ runtime:
 build:
   dependencies:
     freedesktop.org/pkg-config: '*'
-    python.org: ^3.11
+    python.org: ~3.11
   script:
     - python3 setup.py install $ARGS
     - mv {{prefix}}/lib/python{{deps.python.org.version.marketing}}/site-packages/*/* {{prefix}}/lib/python{{deps.python.org.version.marketing}}/site-packages/
@@ -23,6 +23,6 @@ build:
       - --prefix={{prefix}}
 test:
   dependencies:
-    python.org: ^3.11
+    python.org: ~3.11
   script:
     - python3 -c "import cairo; print(cairo.version)" | grep {{version}}
diff --git a/projects/certbot.eff.org/package.yml b/projects/certbot.eff.org/package.yml
index 5e0cbc43..003a9daf 100644
--- a/projects/certbot.eff.org/package.yml
+++ b/projects/certbot.eff.org/package.yml
@@ -4,7 +4,7 @@ distributable:
 versions:
   github: certbot/certbot
 dependencies:
-  python.org: ^3.11
+  python.org: ~3.11
 build:
   script:
     - python-venv.sh {{prefix}}/bin/certbot
diff --git a/projects/cruft.github.io/package.yml b/projects/cruft.github.io/package.yml
index a2f31d89..94e6fddd 100644
--- a/projects/cruft.github.io/package.yml
+++ b/projects/cruft.github.io/package.yml
@@ -6,7 +6,7 @@ versions:
   github: cruft/cruft
 
 dependencies:
-  python.org: ">=3.7"
+  python.org: '>=3.7<3.12'
   git-scm.org: ^2
 
 build:
diff --git a/projects/cython.org/libcython/package.yml b/projects/cython.org/libcython/package.yml
index c247c059..be945e81 100644
--- a/projects/cython.org/libcython/package.yml
+++ b/projects/cython.org/libcython/package.yml
@@ -4,7 +4,7 @@ distributable:
 versions:
   github: cython/cython
 dependencies:
-  python.org: ^3.11
+  python.org: ~3.11
 runtime:
   env:
     PYTHONPATH: "{{prefix}}/lib/python{{deps.python.org.version.major}}/site-packages"
diff --git a/projects/cython.org/package.yml b/projects/cython.org/package.yml
index 68a19fd2..56fff644 100644
--- a/projects/cython.org/package.yml
+++ b/projects/cython.org/package.yml
@@ -9,7 +9,7 @@ provides:
   - bin/cython
 
 dependencies:
-  python.org: '*'
+  python.org: '<3.12'
 
 build:
   script: |
diff --git a/projects/dart.dev/package.yml b/projects/dart.dev/package.yml
index 243c2dc0..ccf966b3 100644
--- a/projects/dart.dev/package.yml
+++ b/projects/dart.dev/package.yml
@@ -8,7 +8,7 @@ build:
     ninja-build.org: '*'
     rust-lang.org: '*'
     curl.se: '*'
-    python.org: ^3
+    python.org: '>=3<3.12'
     tukaani.org/xz: '*'
     git-scm.org: '*'
   script:
diff --git a/projects/debian.org/iso-codes/package.yml b/projects/debian.org/iso-codes/package.yml
index 61727274..8986c06f 100644
--- a/projects/debian.org/iso-codes/package.yml
+++ b/projects/debian.org/iso-codes/package.yml
@@ -11,7 +11,7 @@ dependencies:
   gnu.org/gettext: '*'
 build:
   dependencies:
-    python.org: '*'
+    python.org: '<3.12'
   script:
     - ./configure $CONFIGURE_ARGS
     - make --jobs {{hw.concurrency}}
diff --git a/projects/docutils.org/package.yml b/projects/docutils.org/package.yml
index 3181e775..96c92ed6 100644
--- a/projects/docutils.org/package.yml
+++ b/projects/docutils.org/package.yml
@@ -10,7 +10,7 @@ versions:
     - /\/"/
 
 dependencies:
-  python.org: 3.11
+  python.org: ~3.11
 
 build:
   script: |
diff --git a/projects/doxygen.nl/package.yml b/projects/doxygen.nl/package.yml
index 45d07d4b..9eed3c0b 100644
--- a/projects/doxygen.nl/package.yml
+++ b/projects/doxygen.nl/package.yml
@@ -12,7 +12,7 @@ build:
     gnu.org/bison: ^3
     cmake.org: ^3
     github.com/westes/flex: 2
-    python.org: ^3
+    python.org: '>=3<3.12'
   working-directory: build
   script: |
     cmake $ARGS -G "Unix Makefiles" ..
diff --git a/projects/dri.freedesktop.org/package.yml b/projects/dri.freedesktop.org/package.yml
index 749adf37..3176c828 100644
--- a/projects/dri.freedesktop.org/package.yml
+++ b/projects/dri.freedesktop.org/package.yml
@@ -22,7 +22,7 @@ build:
     mesonbuild.com: '*'
     ninja-build.org: '*'
     freedesktop.org/pkg-config: '*'
-    python.org: ^3.11
+    python.org: ~3.11
 
   working-directory: build
   script:
diff --git a/projects/flit.pypa.io/package.yml b/projects/flit.pypa.io/package.yml
index fe89bb7e..c4522ac3 100644
--- a/projects/flit.pypa.io/package.yml
+++ b/projects/flit.pypa.io/package.yml
@@ -6,7 +6,7 @@ versions:
   github: pypa/flit/tags
 
 dependencies:
-  python.org: ^3
+  python.org: '>=3<3.12'
 
 build: python-venv.sh {{prefix}}/bin/flit
 
diff --git a/projects/freedesktop.org/XKeyboardConfig/package.yml b/projects/freedesktop.org/XKeyboardConfig/package.yml
index 8e6e1da8..a7f4578d 100644
--- a/projects/freedesktop.org/XKeyboardConfig/package.yml
+++ b/projects/freedesktop.org/XKeyboardConfig/package.yml
@@ -17,7 +17,7 @@ build:
     mesonbuild.com: '*'
     ninja-build.org: '*'
     freedesktop.org/pkg-config: '*'
-    python.org: ^3.11
+    python.org: ~3.11
     gnome.org/libxslt: '*'
   script:
     - meson setup build $MESON_ARGS
diff --git a/projects/freedesktop.org/dbus/package.yml b/projects/freedesktop.org/dbus/package.yml
index 665549a1..2f7b82de 100644
--- a/projects/freedesktop.org/dbus/package.yml
+++ b/projects/freedesktop.org/dbus/package.yml
@@ -44,7 +44,7 @@ provides:
   - bin/dbus-uuidgen
 test:
   dependencies:
-    python.org: ^3.11
+    python.org: ~3.11
     freedesktop.org/pkg-config: '*'
   script:
     - dbus-daemon --version | grep {{version}}
diff --git a/projects/freedesktop.org/fontconfig/package.yml b/projects/freedesktop.org/fontconfig/package.yml
index 7e4b2123..57c3ea97 100644
--- a/projects/freedesktop.org/fontconfig/package.yml
+++ b/projects/freedesktop.org/fontconfig/package.yml
@@ -16,7 +16,7 @@ build:
   dependencies:
     freedesktop.org/pkg-config: ^0.29
     gnu.org/gperf: 3
-    python.org: 3
+    python.org: '>=3<3.12'
   script: |
     ./configure --prefix={{ prefix }}
     make --jobs {{ hw.concurrency }} install RUN_FC_CACHE_TEST=false
diff --git a/projects/github.com/AntonOsika/gpt-engineer/package.yml b/projects/github.com/AntonOsika/gpt-engineer/package.yml
index b56c3886..71ead266 100644
--- a/projects/github.com/AntonOsika/gpt-engineer/package.yml
+++ b/projects/github.com/AntonOsika/gpt-engineer/package.yml
@@ -8,7 +8,7 @@ versions:
 display-name: GPT Engineer
 
 dependencies:
-  python.org: ^3
+  python.org: '>=3<3.12'
   tea.xyz: ^0
 
 entrypoint: tea ./entrypoint.sh
diff --git a/projects/github.com/KhronosGroup/Vulkan-Loader/package.yml b/projects/github.com/KhronosGroup/Vulkan-Loader/package.yml
index b112dc47..97618b93 100644
--- a/projects/github.com/KhronosGroup/Vulkan-Loader/package.yml
+++ b/projects/github.com/KhronosGroup/Vulkan-Loader/package.yml
@@ -14,7 +14,7 @@ build:
     gnu.org/make: '*'
     cmake.org: '*'
     freedesktop.org/pkg-config: '*'
-    python.org: ^3.11
+    python.org: ~3.11
     linux:
       x.org/xrandr: '*'
   script:
diff --git a/projects/github.com/Mbed-TLS/mbedtls/package.yml b/projects/github.com/Mbed-TLS/mbedtls/package.yml
index b2925670..5d45df74 100644
--- a/projects/github.com/Mbed-TLS/mbedtls/package.yml
+++ b/projects/github.com/Mbed-TLS/mbedtls/package.yml
@@ -13,7 +13,7 @@ build:
     cmake.org: '*'
     linux/aarch64:
       llvm.org: <16 # otherwise we get an error from the arm_neon.h include
-    python.org: ^3.11
+    python.org: ~3.11
   script:
     # MBEDTLS_THREADING_PTHREAD - enable pthread mutexes
     # MBEDTLS_THREADING_C - allow use of mutexes within mbed TLS
diff --git a/projects/github.com/Z3Prover/z3/package.yml b/projects/github.com/Z3Prover/z3/package.yml
index f006a1d4..7c46dba7 100644
--- a/projects/github.com/Z3Prover/z3/package.yml
+++ b/projects/github.com/Z3Prover/z3/package.yml
@@ -9,7 +9,7 @@ versions:
 build:
   dependencies:
     cmake.org: ^3
-    python.org: ^3
+    python.org: '>=3<3.12'
   working-directory: build
   script: |
     cmake .. $ARGS
@@ -40,7 +40,7 @@ provides:
 test:
   dependencies:
     gnu.org/wget: '*'
-    python.org: ^3.11
+    python.org: ~3.11
   script: |
     wget https://raw.githubusercontent.com/Z3Prover/z3/master/examples/c/test_capi.c
     cc -lz3 test_capi.c
diff --git a/projects/github.com/adrienverge/yamllint/package.yml b/projects/github.com/adrienverge/yamllint/package.yml
index 5d78743f..2b1e6b06 100644
--- a/projects/github.com/adrienverge/yamllint/package.yml
+++ b/projects/github.com/adrienverge/yamllint/package.yml
@@ -6,7 +6,7 @@ versions:
   github: adrienverge/yamllint/tags
 
 dependencies:
-  python.org: ^3.11
+  python.org: ~3.11
   pyyaml.org: '*'
 
 build: python-venv.sh {{prefix}}/bin/yamllint
diff --git a/projects/github.com/anholt/libepoxy/package.yml b/projects/github.com/anholt/libepoxy/package.yml
index 975af7c4..4c2a6c96 100644
--- a/projects/github.com/anholt/libepoxy/package.yml
+++ b/projects/github.com/anholt/libepoxy/package.yml
@@ -15,7 +15,7 @@ build:
     mesonbuild.com: '*'
     ninja-build.org: '*'
     freedesktop.org/pkg-config: '*'
-    python.org: ^3.1
+    python.org: '>=3.1<3.12'
   working-directory: build
   script:
     - run: "sed -i'' -e 's|auto|no|g' $HOME/../meson_options.txt"
diff --git a/projects/github.com/asciidoc-py/asciidoc-py/package.yml b/projects/github.com/asciidoc-py/asciidoc-py/package.yml
index 267f7b0b..1c94f370 100644
--- a/projects/github.com/asciidoc-py/asciidoc-py/package.yml
+++ b/projects/github.com/asciidoc-py/asciidoc-py/package.yml
@@ -7,7 +7,7 @@ versions:
 
 dependencies:
   docbook.org: '*'
-  python.org: 3.11
+  python.org: ~3.11
   gnu.org/source-highlight: '*'
 
 build:
diff --git a/projects/github.com/aws-cloudformation/cfn-lint/package.yml b/projects/github.com/aws-cloudformation/cfn-lint/package.yml
index 2ff9def8..b8a3ac44 100644
--- a/projects/github.com/aws-cloudformation/cfn-lint/package.yml
+++ b/projects/github.com/aws-cloudformation/cfn-lint/package.yml
@@ -4,7 +4,7 @@ distributable:
 versions:
   github: aws-cloudformation/cfn-lint
 dependencies:
-  python.org: ^3.11
+  python.org: ~3.11
   pyyaml.org: '*'
   github.com/benjaminp/six: '*'
 build:
diff --git a/projects/github.com/benjaminp/six/package.yml b/projects/github.com/benjaminp/six/package.yml
index ad42b77c..84be763d 100644
--- a/projects/github.com/benjaminp/six/package.yml
+++ b/projects/github.com/benjaminp/six/package.yml
@@ -4,7 +4,7 @@ distributable:
 versions:
   github: benjaminp/six/tags
 dependencies:
-  python.org: ^3.11
+  python.org: ~3.11
 runtime:
   env:
     PYTHONPATH: "{{prefix}}/lib/python{{deps.python.org.version.marketing}}/site-packages/six-{{version}}-py{{deps.python.org.version.marketing}}.egg:$PYTHONPATH"
diff --git a/projects/github.com/confluentinc/librdkafka/package.yml b/projects/github.com/confluentinc/librdkafka/package.yml
index 143d30fd..cbf60158 100644
--- a/projects/github.com/confluentinc/librdkafka/package.yml
+++ b/projects/github.com/confluentinc/librdkafka/package.yml
@@ -15,7 +15,7 @@ dependencies:
 build:
   dependencies:
     freedesktop.org/pkg-config: '*'
-    python.org: '^3.11'
+    python.org: ~3.11
   script: |
     ./configure $ARGS
     make --jobs {{ hw.concurrency }}
diff --git a/projects/github.com/coqui-ai/TTS/package.yml b/projects/github.com/coqui-ai/TTS/package.yml
index 35379680..18e1b875 100644
--- a/projects/github.com/coqui-ai/TTS/package.yml
+++ b/projects/github.com/coqui-ai/TTS/package.yml
@@ -17,7 +17,7 @@ provides:
   - bin/ttx
 
 dependencies:
-  python.org: '>=3.7 <3.11'
+  python.org: '>=3.7<3.11'
   taku910.github.io/mecab: '*'
 
 build:
diff --git a/projects/github.com/eliben/pycparser/package.yml b/projects/github.com/eliben/pycparser/package.yml
index 353efbce..d318cc7a 100644
--- a/projects/github.com/eliben/pycparser/package.yml
+++ b/projects/github.com/eliben/pycparser/package.yml
@@ -8,7 +8,7 @@ runtime:
   env:
     PYTHONPATH: '{{prefix}}/lib/python{{deps.python.org.version.major}}/site-packages:$PYTHONPATH'
 dependencies:
-  python.org: ^3.11
+  python.org: ~3.11
 build:
   script:
     - python -m pip install --prefix={{prefix}} .
diff --git a/projects/github.com/ggerganov/llama.cpp/package.yml b/projects/github.com/ggerganov/llama.cpp/package.yml
index b15c4fc3..93432002 100644
--- a/projects/github.com/ggerganov/llama.cpp/package.yml
+++ b/projects/github.com/ggerganov/llama.cpp/package.yml
@@ -19,7 +19,7 @@ platforms:
   # Illegal instruction: 4 on darwin/x86-64
 
 dependencies:
-  python.org: ^3.11
+  python.org: ~3.11
   tea.xyz: ^0  # the scripts use tea/cli
 
 build:
diff --git a/projects/github.com/libsndfile/libsndfile/package.yml b/projects/github.com/libsndfile/libsndfile/package.yml
index 7ceba4ed..a56f43d6 100644
--- a/projects/github.com/libsndfile/libsndfile/package.yml
+++ b/projects/github.com/libsndfile/libsndfile/package.yml
@@ -21,7 +21,7 @@ dependencies:
 build:
   dependencies:
     cmake.org: '*'
-    python.org: ^3.11
+    python.org: ~3.11
   script: |
     cmake -S . -B build $ARGS
     cmake --build build
diff --git a/projects/github.com/lra/mackup/package.yml b/projects/github.com/lra/mackup/package.yml
index 1e39e286..5b9df507 100644
--- a/projects/github.com/lra/mackup/package.yml
+++ b/projects/github.com/lra/mackup/package.yml
@@ -6,7 +6,7 @@ versions:
   github: lra/mackup/releases/tags
 
 dependencies:
-  python.org: ^3
+  python.org: '>=3<3.12'
 
 build:
   python-venv.sh {{prefix}}/bin/mackup
diff --git a/projects/github.com/mattrobenolt/jinja2-cli/package.yml b/projects/github.com/mattrobenolt/jinja2-cli/package.yml
index c28f99c2..4f3a7ae0 100644
--- a/projects/github.com/mattrobenolt/jinja2-cli/package.yml
+++ b/projects/github.com/mattrobenolt/jinja2-cli/package.yml
@@ -6,7 +6,7 @@ versions:
   github: mattrobenolt/jinja2-cli/tags
 
 dependencies:
-  python.org: '>=3.7'
+  python.org: '>=3.7<3.12'
 
 runtime:
   env:
diff --git a/projects/github.com/npiv/chatblade/package.yml b/projects/github.com/npiv/chatblade/package.yml
index 97faa3dd..93efe28a 100644
--- a/projects/github.com/npiv/chatblade/package.yml
+++ b/projects/github.com/npiv/chatblade/package.yml
@@ -7,7 +7,7 @@ versions:
   strip: /^v/
 
 dependencies:
-  python.org: ^3
+  python.org: '>=3<3.12'
 
 build:
   python-venv.sh {{prefix}}/bin/chatblade
diff --git a/projects/github.com/nvbn/thefuck/package.yml b/projects/github.com/nvbn/thefuck/package.yml
index 6a4fb320..f74d4bcc 100644
--- a/projects/github.com/nvbn/thefuck/package.yml
+++ b/projects/github.com/nvbn/thefuck/package.yml
@@ -6,7 +6,7 @@ versions:
   github: nvbn/thefuck/releases/tags
 
 dependencies:
-  python.org: '>=3.11'
+  python.org: ~3.11
 
 build:
   python-venv.sh {{prefix}}/bin/thefuck
@@ -16,7 +16,7 @@ provides:
 
 test:
   dependencies:
-    python.org: ^3
+    python.org: '>=3<3.12'
   script: >
     thefuck -y ptyhon --version 2>&1 |
       grep -E '^The Fuck {{version.marketing}} using
diff --git a/projects/github.com/ocrmypdf/OCRmyPDF/package.yml b/projects/github.com/ocrmypdf/OCRmyPDF/package.yml
index 1bcd03c7..8d7b801c 100644
--- a/projects/github.com/ocrmypdf/OCRmyPDF/package.yml
+++ b/projects/github.com/ocrmypdf/OCRmyPDF/package.yml
@@ -10,7 +10,7 @@ platforms:
   - linux/x86-64
 
 dependencies:
-  python.org: ^3.11
+  python.org: ~3.11
 
 build:
   script: |
diff --git a/projects/github.com/psf/black/package.yml b/projects/github.com/psf/black/package.yml
index 7c97abb4..6b2f0877 100644
--- a/projects/github.com/psf/black/package.yml
+++ b/projects/github.com/psf/black/package.yml
@@ -7,7 +7,7 @@ versions:
   strip: /^v/
 
 dependencies:
-  python.org: '>=3.7'
+  python.org: '>=3.7<3.12'
 
 build:
   script: |
diff --git a/projects/github.com/pypa/build/package.yml b/projects/github.com/pypa/build/package.yml
index 83410ab1..79286622 100644
--- a/projects/github.com/pypa/build/package.yml
+++ b/projects/github.com/pypa/build/package.yml
@@ -6,7 +6,7 @@ versions:
   github: pypa/build/tags
 
 dependencies:
-  python.org: ^3
+  python.org: '>=3<3.12'
 
 build: python-venv.sh {{prefix}}/bin/pyproject-build
 
diff --git a/projects/github.com/pypa/twine/package.yml b/projects/github.com/pypa/twine/package.yml
index 862e9175..0c09be0d 100644
--- a/projects/github.com/pypa/twine/package.yml
+++ b/projects/github.com/pypa/twine/package.yml
@@ -7,7 +7,7 @@ versions:
   strip: /^v/
 
 dependencies:
-  python.org: '>=3.7'
+  python.org: '>=3.7<3.12'
 
 build:
   script: |
diff --git a/projects/github.com/python-lsp/python-lsp-server/package.yml b/projects/github.com/python-lsp/python-lsp-server/package.yml
index bdfa5c7c..0f29b40c 100644
--- a/projects/github.com/python-lsp/python-lsp-server/package.yml
+++ b/projects/github.com/python-lsp/python-lsp-server/package.yml
@@ -7,7 +7,7 @@ versions:
   strip: /^v/
 
 dependencies:
-  python.org: ^3
+  python.org: '>=3<3.12'
 
 build: python-venv.sh {{prefix}}/bin/pylsp
 
diff --git a/projects/github.com/rrthomas/psutils/package.yml b/projects/github.com/rrthomas/psutils/package.yml
index 1fa6a016..eb73551c 100644
--- a/projects/github.com/rrthomas/psutils/package.yml
+++ b/projects/github.com/rrthomas/psutils/package.yml
@@ -4,7 +4,7 @@ distributable:
 versions:
   github: rrthomas/psutils
 dependencies:
-  python.org: ^3.11
+  python.org: ~3.11
   github.com/rrthomas/libpaper: '*'
 build:
   script:
diff --git a/projects/github.com/sivel/speedtest-cli/package.yml b/projects/github.com/sivel/speedtest-cli/package.yml
index 8570603d..ec466ece 100644
--- a/projects/github.com/sivel/speedtest-cli/package.yml
+++ b/projects/github.com/sivel/speedtest-cli/package.yml
@@ -7,7 +7,7 @@ versions:
   strip: /^v/
 
 dependencies:
-  python.org: '>=3.7'
+  python.org: '>=3.7<3.12'
 
 build:
   script:
diff --git a/projects/gnome.org/PyGObject/package.yml b/projects/gnome.org/PyGObject/package.yml
index 7f600177..9e022bd0 100644
--- a/projects/gnome.org/PyGObject/package.yml
+++ b/projects/gnome.org/PyGObject/package.yml
@@ -18,7 +18,7 @@ build:
     mesonbuild.com: '*'
     ninja-build.org: '*'
     freedesktop.org/pkg-config: '*'
-    python.org: ^3.11
+    python.org: ~3.11
   script:
     - meson setup build $MESON_ARGS
     - meson compile -C build --verbose
@@ -34,6 +34,6 @@ build:
       - -Dpycairo=enabled
 test:
   dependencies:
-    python.org: ^3.11
+    python.org: ~3.11
   script:
     - python -c 'import gi; print(gi.__version__)' | grep {{version}}
diff --git a/projects/gnome.org/gdk-pixbuf/package.yml b/projects/gnome.org/gdk-pixbuf/package.yml
index 9135b5ca..f5042052 100644
--- a/projects/gnome.org/gdk-pixbuf/package.yml
+++ b/projects/gnome.org/gdk-pixbuf/package.yml
@@ -18,7 +18,7 @@ build:
     ninja-build.org: 1
     freedesktop.org/pkg-config: ^0.29
     gnome.org/gobject-introspection: 1
-    python.org: 3 #FIXME rq’d by gnome.org/gobject-introspection but should be added by tea-env
+    python.org: '>=3<3.12' #FIXME rq’d by gnome.org/gobject-introspection but should be added by tea-env
   working-directory: build
   script: |
     if test {{ hw.platform }} == linux; then
diff --git a/projects/gnome.org/glib/package.yml b/projects/gnome.org/glib/package.yml
index c248136e..c9d02187 100644
--- a/projects/gnome.org/glib/package.yml
+++ b/projects/gnome.org/glib/package.yml
@@ -23,7 +23,7 @@ build:
     mesonbuild.com: ^0.63
     ninja-build.org: 1
     freedesktop.org/pkg-config: ^0.29
-    python.org: 3 #TODO ^3.5
+    python.org: '>=3.5<3.12'
   script: |
     meson out $ARGS
 
diff --git a/projects/gnome.org/gobject-introspection/package.yml b/projects/gnome.org/gobject-introspection/package.yml
index 9e41306a..28ec7d1e 100644
--- a/projects/gnome.org/gobject-introspection/package.yml
+++ b/projects/gnome.org/gobject-introspection/package.yml
@@ -10,7 +10,7 @@ dependencies:
   gnome.org/glib: 2
   sourceware.org/libffi: 3
   gnu.org/bison: 3  #NOTE macOS provides v2
-  python.org: 3
+  python.org: '>=3<3.12'
   github.com/westes/flex: 2
 
 build:
diff --git a/projects/gnome.org/gsettings-desktop-schemas/package.yml b/projects/gnome.org/gsettings-desktop-schemas/package.yml
index 07c017f1..ba8938ad 100644
--- a/projects/gnome.org/gsettings-desktop-schemas/package.yml
+++ b/projects/gnome.org/gsettings-desktop-schemas/package.yml
@@ -15,7 +15,7 @@ build:
     mesonbuild.com: '*'
     ninja-build.org: '*'
     freedesktop.org/pkg-config: '*'
-    python.org: '^3.11'
+    python.org: ~3.11
   script: |
     meson setup build $ARGS
     meson compile -C build --verbose
diff --git a/projects/gnome.org/librsvg/package.yml b/projects/gnome.org/librsvg/package.yml
index 4d7b0d3b..23c15d53 100644
--- a/projects/gnome.org/librsvg/package.yml
+++ b/projects/gnome.org/librsvg/package.yml
@@ -19,7 +19,7 @@ build:
     rust-lang.org: ^1.63
     freedesktop.org/pkg-config: ^0.29
     gnome.org/gobject-introspection: 1
-    python.org: 3
+    python.org: '>=3<3.12'
   script:
     - ./configure $ARGS
     - make --jobs {{hw.concurrency}} install
diff --git a/projects/gnome.org/libxml2/package.yml b/projects/gnome.org/libxml2/package.yml
index 7c9fc3ec..6d20cdc3 100644
--- a/projects/gnome.org/libxml2/package.yml
+++ b/projects/gnome.org/libxml2/package.yml
@@ -14,7 +14,7 @@ dependencies:
 
 build:
   dependencies:
-    python.org: ^3
+    python.org: '>=3<3.12'
     freedesktop.org/pkg-config: ~0.29
   script: |
     ./configure $ARGS
@@ -37,7 +37,7 @@ build:
 
 test:
   dependencies:
-    python.org: ^3
+    python.org: '>=3<3.12'
   script: |
     cc `xml2-config --cflags --libs` test.c
     ./a.out
diff --git a/projects/gnome.org/pango/package.yml b/projects/gnome.org/pango/package.yml
index 59ff2146..f3eafb54 100644
--- a/projects/gnome.org/pango/package.yml
+++ b/projects/gnome.org/pango/package.yml
@@ -23,7 +23,7 @@ build:
     ninja-build.org: 1
     freedesktop.org/pkg-config: ^0.29
     gnome.org/gobject-introspection: 1
-    python.org: 3  #FIXME rq’d by gnome.org/gobject-introspection but should be added by tea-env
+    python.org: '>=3<3.12' #FIXME rq’d by gnome.org/gobject-introspection but should be added by tea-env
   working-directory: build
   script: |
     meson .. $ARGS
diff --git a/projects/google.com/sentencepiece/package.yml b/projects/google.com/sentencepiece/package.yml
index 4a18a4c7..4d7fdb89 100644
--- a/projects/google.com/sentencepiece/package.yml
+++ b/projects/google.com/sentencepiece/package.yml
@@ -9,7 +9,7 @@ versions:
 build:
   dependencies:
     cmake.org: ^3
-    python.org: ^3
+    python.org: '>=3<3.12'
     pip.pypa.io: '*'
     freedesktop.org/pkg-config: ~0.29
   working-directory: build
@@ -33,7 +33,7 @@ runtime:
 test:
   dependencies:
     gnu.org/wget: '*'
-    python.org: ^3
+    python.org: '>=3<3.12'
   script: |
     wget https://raw.githubusercontent.com/google/sentencepiece/master/data/botchan.txt
     spm_train --input=botchan.txt --model_prefix=m --vocab_size=1000
diff --git a/projects/harfbuzz.org/package.yml b/projects/harfbuzz.org/package.yml
index 8f5653fd..b0f63a02 100644
--- a/projects/harfbuzz.org/package.yml
+++ b/projects/harfbuzz.org/package.yml
@@ -18,7 +18,7 @@ build:
     ninja-build.org: 1
     freedesktop.org/pkg-config: ^0.29
     gnome.org/gobject-introspection: 1
-    python.org: 3  #FIXME rq’d by gnome.org/gobject-introspection but should be added by tea-env
+    python.org: '>=3<3.12' #FIXME rq’d by gnome.org/gobject-introspection but should be added by tea-env
   working-directory: build
   script: |
     meson .. $ARGS
@@ -50,8 +50,7 @@ test:
     test $out = '[gid0=0+500|gid0=0+500|gid0=2+500|gid0=2+500|gid0=4+500|gid0=4+500]'
   env:
     FIXTURE: https://github.com/harfbuzz/harfbuzz/raw/fc0daafab0336b847ac14682e581a8838f36a0bf/test/shaping/fonts/sha1sum/270b89df543a7e48e206a2d830c0e10e5265c630.ttf
-  receipt:
-    build/meson-logs/meson-log.txt
+  receipt: build/meson-logs/meson-log.txt
 
 provides:
   - bin/hb-ot-shape-closure
diff --git a/projects/haskell.org/package.yml-from-source b/projects/haskell.org/package.yml-from-source
index 097c29cf..8dd99aaf 100644
--- a/projects/haskell.org/package.yml-from-source
+++ b/projects/haskell.org/package.yml-from-source
@@ -36,7 +36,7 @@ build:
     curl.se: '*'
     gnu.org/m4: '*'
     git-scm.org: ^2
-    python.org: ^3
+    python.org: '>=3<3.12'
     gnu.org/patch: '*'
     linux:
       github.com/numactl/numactl: ^2 # ghcup needs this
diff --git a/projects/hatch.pypa.io/package.yml b/projects/hatch.pypa.io/package.yml
index f820d5b1..8c6fed6c 100644
--- a/projects/hatch.pypa.io/package.yml
+++ b/projects/hatch.pypa.io/package.yml
@@ -8,7 +8,7 @@ versions:
   ignore: /^hatchling-/
 
 dependencies:
-  python.org: ^3
+  python.org: '>=3<3.12'
 
 build: python-venv.sh {{prefix}}/bin/hatch
 
diff --git a/projects/httpie.io/package.yml b/projects/httpie.io/package.yml
index debafb3b..0d71ea5f 100644
--- a/projects/httpie.io/package.yml
+++ b/projects/httpie.io/package.yml
@@ -6,7 +6,7 @@ versions:
   github: httpie/httpie/releases/tags
 
 dependencies:
-  python.org: ^3
+  python.org: '>=3<3.12'
 
 build: |
   python-venv.sh {{prefix}}/bin/http
diff --git a/projects/ipython.org/package.yml b/projects/ipython.org/package.yml
index 51f910d9..1c43ef50 100644
--- a/projects/ipython.org/package.yml
+++ b/projects/ipython.org/package.yml
@@ -10,7 +10,7 @@ provides:
   - bin/ipython3
 
 dependencies:
-  python.org: '>=3.7'
+  python.org: '>=3.7<3.12'
 
 build:
   script: |
diff --git a/projects/itstool.org/package.yml b/projects/itstool.org/package.yml
index f5dcc5a0..31a64473 100644
--- a/projects/itstool.org/package.yml
+++ b/projects/itstool.org/package.yml
@@ -11,7 +11,7 @@ versions:
 
 dependencies:
   gnome.org/libxml2: '*'
-  python.org: =3.11
+  python.org: ~3.11
 
 build:
   script:
diff --git a/projects/jupyter.org/package.yml b/projects/jupyter.org/package.yml
index 3f9dbc3d..f5ad8370 100644
--- a/projects/jupyter.org/package.yml
+++ b/projects/jupyter.org/package.yml
@@ -34,7 +34,7 @@ provides:
   - bin/jupyter-trust
 
 dependencies:
-  python.org: '>=3.7'
+  python.org: '>=3.7<3.12'
 
 build:
   script: |
diff --git a/projects/keephq.dev/package.yml b/projects/keephq.dev/package.yml
index d5b0d376..2563166d 100644
--- a/projects/keephq.dev/package.yml
+++ b/projects/keephq.dev/package.yml
@@ -7,7 +7,7 @@ versions:
   - 0.0.0
 
 dependencies:
-  python.org: 3
+  python.org: '>=3<3.12'
 
 build: python-venv.sh {{prefix}}/bin/keep
 
diff --git a/projects/khronos.org/glslang/package.yml b/projects/khronos.org/glslang/package.yml
index 92155e50..acf1c897 100644
--- a/projects/khronos.org/glslang/package.yml
+++ b/projects/khronos.org/glslang/package.yml
@@ -6,7 +6,7 @@ versions:
 build:
   dependencies:
     cmake.org: '*'
-    python.org: ^3.11
+    python.org: ~3.11
   script:
     - cmake -S . -B build $ARGS
     - cmake --build build
diff --git a/projects/khronos.org/opencl-headers/package.yml b/projects/khronos.org/opencl-headers/package.yml
index a741e5b8..6c0ff151 100644
--- a/projects/khronos.org/opencl-headers/package.yml
+++ b/projects/khronos.org/opencl-headers/package.yml
@@ -10,7 +10,7 @@ build:
   dependencies:
     gnu.org/make: '*'
     cmake.org: '*'
-    python.org: ^3.11
+    python.org: ~3.11
   script:
     - cmake -S . -B build $ARGS
     - cmake --build build
diff --git a/projects/llm.datasette.io/package.yml b/projects/llm.datasette.io/package.yml
index 03bbc3b2..7198c22a 100644
--- a/projects/llm.datasette.io/package.yml
+++ b/projects/llm.datasette.io/package.yml
@@ -6,7 +6,7 @@ versions:
   github: simonw/llm
 
 dependencies:
-  python.org: ^3.11
+  python.org: ~3.11
 
 build:
   python-venv.sh {{prefix}}/bin/llm
diff --git a/projects/llvm.org/clang-format/package.yml b/projects/llvm.org/clang-format/package.yml
index e20a2c32..7d7a61a9 100644
--- a/projects/llvm.org/clang-format/package.yml
+++ b/projects/llvm.org/clang-format/package.yml
@@ -8,7 +8,7 @@ versions:
 dependencies:
   gnome.org/libxml2: '*'
   invisible-island.net/ncurses: '*'
-  python.org: '*'
+  python.org: '<3.12'
   zlib.net: '*'
 build:
   dependencies:
diff --git a/projects/llvm.org/package.yml b/projects/llvm.org/package.yml
index a9cf9b3f..271c7fd7 100644
--- a/projects/llvm.org/package.yml
+++ b/projects/llvm.org/package.yml
@@ -18,7 +18,7 @@ build:
   dependencies:
     cmake.org: 3
     ninja-build.org: 1
-    python.org: 3
+    python.org: '>=3<3.12'
     crates.io/semverator: '*'
   working-directory: build
   script:
diff --git a/projects/macvim.org/package.yml b/projects/macvim.org/package.yml
index 83ab0260..1a9b4a1f 100644
--- a/projects/macvim.org/package.yml
+++ b/projects/macvim.org/package.yml
@@ -15,7 +15,7 @@ dependencies:
   cscope.sourceforge.io: '*'
   invisible-island.net/ncurses: '*'
   lua.org: '*'
-  python.org: ^3.11
+  python.org: ~3.11
   ruby-lang.org: '*'
   libsodium.org: '*'
   gnu.org/gettext: '*'
diff --git a/projects/makotemplates.org/package.yml b/projects/makotemplates.org/package.yml
index 1d22ad56..2d32076a 100644
--- a/projects/makotemplates.org/package.yml
+++ b/projects/makotemplates.org/package.yml
@@ -6,7 +6,7 @@ versions:
   strip:
     - /rel_/
 dependencies:
-  python.org: ^3.11
+  python.org: ~3.11
 runtime:
   env:
     PYTHONPATH: "{{prefix}}/venv/lib/python3.11/site-packages:$PYTHONPATH"
diff --git a/projects/markupsafe.palletsprojects.com/package.yml b/projects/markupsafe.palletsprojects.com/package.yml
index 8dbdc834..06d22d5b 100644
--- a/projects/markupsafe.palletsprojects.com/package.yml
+++ b/projects/markupsafe.palletsprojects.com/package.yml
@@ -4,7 +4,7 @@ distributable:
 versions:
   github: pallets/markupsafe
 dependencies:
-  python.org: ^3.11
+  python.org: ~3.11
 runtime:
   env:
     PYTHONPATH: "{{prefix}}/lib/python{{deps.python.org.version.marketing}}/site-packages:$PYTHONPATH"
diff --git a/projects/mercurial-scm.org/package.yml b/projects/mercurial-scm.org/package.yml
index e525edad..69603edf 100644
--- a/projects/mercurial-scm.org/package.yml
+++ b/projects/mercurial-scm.org/package.yml
@@ -8,7 +8,7 @@ versions:
     - /^mercurial-/
     - /\.tar\.gz/
 dependencies:
-  python.org: ^3.11
+  python.org: ~3.11
 build:
   dependencies:
     gnu.org/make: '*'
diff --git a/projects/mesonbuild.com/package.yml b/projects/mesonbuild.com/package.yml
index 8a96f45c..4c368760 100644
--- a/projects/mesonbuild.com/package.yml
+++ b/projects/mesonbuild.com/package.yml
@@ -6,7 +6,7 @@ versions:
   github: mesonbuild/meson/tags
 
 dependencies:
-  python.org: ^3
+  python.org: '>=3<3.12'
 
 build:
   python-venv.sh "{{prefix}}/bin/meson"
diff --git a/projects/microsoft.com/azure-cli/package.yml b/projects/microsoft.com/azure-cli/package.yml
index 9eff7558..7fe0f727 100644
--- a/projects/microsoft.com/azure-cli/package.yml
+++ b/projects/microsoft.com/azure-cli/package.yml
@@ -9,7 +9,7 @@ versions:
 
 dependencies:
   openssl.org: 1.1
-  python.org: ^3.10
+  python.org: '>=3.10<3.12'
   sourceware.org/libffi: '*'
 
 build:
diff --git a/projects/mitmproxy.org/package.yml b/projects/mitmproxy.org/package.yml
index e3db4462..7253c7f2 100644
--- a/projects/mitmproxy.org/package.yml
+++ b/projects/mitmproxy.org/package.yml
@@ -4,7 +4,7 @@ distributable:
 versions:
   github: mitmproxy/mitmproxy
 dependencies:
-  python.org: ^3.11
+  python.org: ~3.11
 build:
   script:
     - python-venv.sh {{prefix}}/bin/mitmproxy
diff --git a/projects/mypy-lang.org/package.yml b/projects/mypy-lang.org/package.yml
index a8952325..42c3995d 100644
--- a/projects/mypy-lang.org/package.yml
+++ b/projects/mypy-lang.org/package.yml
@@ -6,7 +6,7 @@ versions:
   github: python/mypy/tags
 
 dependencies:
-  python.org: ^3
+  python.org: '>=3<3.12'
 
 build:
   env:
diff --git a/projects/nodejs.org/package.yml b/projects/nodejs.org/package.yml
index 625201be..6608b3d2 100644
--- a/projects/nodejs.org/package.yml
+++ b/projects/nodejs.org/package.yml
@@ -25,7 +25,7 @@ build:
     # otherwise, we hit https://reviews.llvm.org/D131307
     linux:
       llvm.org: '<16'
-    python.org: '>=3.7 <3.11'
+    python.org: '>=3.7<3.11'
     freedesktop.org/pkg-config: ^0.29
   script: |
     ./configure $ARGS
diff --git a/projects/openai.com/openai-python/package.yml b/projects/openai.com/openai-python/package.yml
index cf9ddd45..0635faaa 100644
--- a/projects/openai.com/openai-python/package.yml
+++ b/projects/openai.com/openai-python/package.yml
@@ -7,7 +7,7 @@ versions:
   strip: /^v/
 
 dependencies:
-  python.org: ^3
+  python.org: '>=3<3.12'
 
 build:
   python-venv.sh {{prefix}}/bin/openai
diff --git a/projects/openmp.llvm.org/package.yml b/projects/openmp.llvm.org/package.yml
index 61f536f0..d3d8d9aa 100644
--- a/projects/openmp.llvm.org/package.yml
+++ b/projects/openmp.llvm.org/package.yml
@@ -10,7 +10,7 @@ versions:
 
 dependencies:
   linux:
-    python.org: ^3.11
+    python.org: ~3.11
     perl.org: '*'
 
 build:
diff --git a/projects/paulfitz.github.io/daff/package.yml b/projects/paulfitz.github.io/daff/package.yml
index 9cb5e329..96cd654c 100644
--- a/projects/paulfitz.github.io/daff/package.yml
+++ b/projects/paulfitz.github.io/daff/package.yml
@@ -12,7 +12,7 @@ provides:
   - bin/daff
 
 dependencies:
-  python.org: '^3.7'
+  python.org: '>=3.7<3.12'
 
 build:
   script: |
diff --git a/projects/pdm.fming.dev/package.yml b/projects/pdm.fming.dev/package.yml
index afcfaf91..1ad4883d 100644
--- a/projects/pdm.fming.dev/package.yml
+++ b/projects/pdm.fming.dev/package.yml
@@ -7,7 +7,7 @@ versions:
   strip: /^v/
 
 dependencies:
-  python.org: ^3
+  python.org: '>=3<3.12'
 
 build: python-venv.sh {{prefix}}/bin/pdm
 
diff --git a/projects/pipenv.pypa.io/package.yml b/projects/pipenv.pypa.io/package.yml
index e114d7d6..7d07559d 100644
--- a/projects/pipenv.pypa.io/package.yml
+++ b/projects/pipenv.pypa.io/package.yml
@@ -10,12 +10,12 @@ dependencies:
   tea.xyz: ^0
 
 companions:
-  python.org: ^3.7
+  python.org: '>=3.7<3.12'
   pip.pypa.io: '*'
 
 build:
   dependencies:
-    python.org: ^3.7
+    python.org: '>=3.7<3.12'
     crates.io/semverator: '*'
   script:
     - python-venv.sh {{prefix}}/bin/pipenv
diff --git a/projects/pre-commit.com/package.yml b/projects/pre-commit.com/package.yml
index e0ece602..4b233c19 100644
--- a/projects/pre-commit.com/package.yml
+++ b/projects/pre-commit.com/package.yml
@@ -7,7 +7,7 @@ versions:
   strip: /^v/
 
 dependencies:
-  python.org: '>=3.8'
+  python.org: '>=3.8<3.12'
 
 build:
   python-venv.sh {{prefix}}/bin/pre-commit
diff --git a/projects/pygments.org/package.yml b/projects/pygments.org/package.yml
index ded4c8e2..629ad065 100644
--- a/projects/pygments.org/package.yml
+++ b/projects/pygments.org/package.yml
@@ -6,7 +6,7 @@ versions:
   github: pygments/pygments/tags
 
 dependencies:
-  python.org: 3.11
+  python.org: ~3.11
 
 build:
   script: |
diff --git a/projects/pypa.github.io/pipx/package.yml b/projects/pypa.github.io/pipx/package.yml
index 52ef0b79..bb4134ad 100644
--- a/projects/pypa.github.io/pipx/package.yml
+++ b/projects/pypa.github.io/pipx/package.yml
@@ -6,7 +6,7 @@ versions:
   github: pypa/pipx
 
 dependencies:
-  python.org: 3
+  python.org: '>=3<3.12'
 
 build:
   python-venv.sh "{{prefix}}"/bin/pipx
diff --git a/projects/pytest.org/package.yml b/projects/pytest.org/package.yml
index d13afed7..79cf98c6 100644
--- a/projects/pytest.org/package.yml
+++ b/projects/pytest.org/package.yml
@@ -6,7 +6,7 @@ versions:
   github: pytest-dev/pytest/releases/tags
 
 dependencies:
-  python.org: '>=3.7'
+  python.org: '>=3.7<3.12'
 
 build:
   python-venv.sh {{prefix}}/bin/pytest
diff --git a/projects/python-poetry.org/package.yml b/projects/python-poetry.org/package.yml
index c43c7b0f..ef066bde 100644
--- a/projects/python-poetry.org/package.yml
+++ b/projects/python-poetry.org/package.yml
@@ -6,7 +6,7 @@ versions:
   github: python-poetry/poetry
 
 dependencies:
-  python.org: 3
+  python.org: '>=3<3.12'
 
 build:
   dependencies:
diff --git a/projects/python.org/typing_extensions/package.yml b/projects/python.org/typing_extensions/package.yml
index 829af544..51e5f9d2 100644
--- a/projects/python.org/typing_extensions/package.yml
+++ b/projects/python.org/typing_extensions/package.yml
@@ -9,7 +9,7 @@ runtime:
 build:
   dependencies:
     flit.pypa.io: '*'
-    python.org: ^3.11
+    python.org: ~3.11
   script:
     - flit build --format wheel
     - python -m pip install --prefix={{prefix}} dist/typing_extensions-*.whl
@@ -19,7 +19,7 @@ build:
       working-directory: "{{prefix}}/lib"
 test:
   dependencies:
-    python.org: ^3.11
+    python.org: ~3.11
     mypy-lang.org: '*'
   script:
     - python -c "import typing_extensions"
diff --git a/projects/riverbankcomputing.com/pyqt-builder/package.yml b/projects/riverbankcomputing.com/pyqt-builder/package.yml
index 27a1cf39..b672831f 100644
--- a/projects/riverbankcomputing.com/pyqt-builder/package.yml
+++ b/projects/riverbankcomputing.com/pyqt-builder/package.yml
@@ -10,7 +10,7 @@ runtime:
   env:
     PYTHONPATH: "{{prefix}}/venv/lib/python{{deps.python.org.version.marketing}}/site-packages:$PYTHONPATH"
 dependencies:
-  python.org: ^3.11
+  python.org: ~3.11
   riverbankcomputing.com/sip: '*'
   linux:
 build:
diff --git a/projects/riverbankcomputing.com/sip/package.yml b/projects/riverbankcomputing.com/sip/package.yml
index 627f64d1..1eb8dad4 100644
--- a/projects/riverbankcomputing.com/sip/package.yml
+++ b/projects/riverbankcomputing.com/sip/package.yml
@@ -7,7 +7,7 @@ versions:
   strip:
     - /^rev\//
 dependencies:
-  python.org: ^3.11
+  python.org: ~3.11
   linux:
 build:
   script:
diff --git a/projects/rust-lang.org/package.yml b/projects/rust-lang.org/package.yml
index 6559e9c7..ffbc44d5 100644
--- a/projects/rust-lang.org/package.yml
+++ b/projects/rust-lang.org/package.yml
@@ -40,7 +40,7 @@ build:
   dependencies:
     cmake.org: ^3.20
     ninja-build.org: ^1.10
-    python.org: 3
+    python.org: '>=3<3.12'
     openssl.org: '*' # needed to build openssl-sys
     freedesktop.org/pkg-config: ^0.29
     crates.io/semverator: 0
diff --git a/projects/s3tools.org/package.yml b/projects/s3tools.org/package.yml
index 4630e01a..4886bd92 100644
--- a/projects/s3tools.org/package.yml
+++ b/projects/s3tools.org/package.yml
@@ -7,7 +7,7 @@ versions:
   strip: /^v/
 
 dependencies:
-  python.org: ^3
+  python.org: '>=3<3.12'
 
 build:
   python-venv.sh {{prefix}}/bin/s3cmd
diff --git a/projects/spawn.link/package.yml b/projects/spawn.link/package.yml
index 2346785e..c5be06d9 100644
--- a/projects/spawn.link/package.yml
+++ b/projects/spawn.link/package.yml
@@ -10,7 +10,7 @@ platforms: linux
 build:
   dependencies:
     git-scm.org: '*'
-    python.org: ^3
+    python.org: '>=3<3.12'
   script: |
     # Set the version
     sed -i.bak -e 's/^VERSION=.*/VERSION={{ version }}/' tools/update-version
diff --git a/projects/sphinx-doc.org/package.yml b/projects/sphinx-doc.org/package.yml
index 6bc06528..4260032c 100644
--- a/projects/sphinx-doc.org/package.yml
+++ b/projects/sphinx-doc.org/package.yml
@@ -6,7 +6,7 @@ versions:
   github: sphinx-doc/sphinx
 
 dependencies:
-  python.org: ^3.8
+  python.org: '>=3.8<3.12'
 
 build: |
   python-venv.sh {{prefix}}/bin/sphinx-build
diff --git a/projects/sqlfluff.com/package.yml b/projects/sqlfluff.com/package.yml
index 44369ea0..864472b7 100644
--- a/projects/sqlfluff.com/package.yml
+++ b/projects/sqlfluff.com/package.yml
@@ -6,7 +6,7 @@ versions:
   github: sqlfluff/sqlfluff
 
 dependencies:
-  python.org: ">=3.7"
+  python.org: '>=3.7<3.12'
 
 build:
   script: |
diff --git a/projects/systemd.io/package.yml b/projects/systemd.io/package.yml
index a4513d6d..b4265b75 100644
--- a/projects/systemd.io/package.yml
+++ b/projects/systemd.io/package.yml
@@ -38,7 +38,7 @@ build:
     mesonbuild.com: '*'
     ninja-build.org: '*'
     freedesktop.org/pkg-config: '*'
-    python.org: ^3
+    python.org: '>=3<3.12'
     rsync.samba.org: '*'
   script:
     - meson setup $ARGS build
diff --git a/projects/vim.org/package.yml b/projects/vim.org/package.yml
index de98d550..42bcc07f 100644
--- a/projects/vim.org/package.yml
+++ b/projects/vim.org/package.yml
@@ -11,7 +11,7 @@ provides:
   - bin/vi
 
 dependencies:
-  python.org: '~3.11'
+  python.org: ~3.11
   lua.org: '>=5.4'
   invisible-island.net/ncurses: '>=6.3'
   perl.org: '>=5.36'
diff --git a/projects/virtualenv.pypa.io/package.yml b/projects/virtualenv.pypa.io/package.yml
index d81c01f5..6d92c189 100644
--- a/projects/virtualenv.pypa.io/package.yml
+++ b/projects/virtualenv.pypa.io/package.yml
@@ -7,7 +7,7 @@ versions:
   strip: /^v/
 
 dependencies:
-  python.org: '>=3.7'
+  python.org: '>=3.7<3.12'
 
 build:
   python-venv.sh {{prefix}}/bin/virtualenv
diff --git a/projects/wayland.freedesktop.org/protocols/package.yml b/projects/wayland.freedesktop.org/protocols/package.yml
index c430463c..4dc1847d 100644
--- a/projects/wayland.freedesktop.org/protocols/package.yml
+++ b/projects/wayland.freedesktop.org/protocols/package.yml
@@ -11,7 +11,7 @@ build:
     mesonbuild.com: '*'
     ninja-build.org: '*'
     freedesktop.org/pkg-config: '*'
-    python.org: ^3.11
+    python.org: ~3.11
     wayland.freedesktop.org: '*'
   working-directory: build
   script:
diff --git a/projects/x.org/protocol/xcb/package.yml b/projects/x.org/protocol/xcb/package.yml
index e4b928d5..339d2149 100644
--- a/projects/x.org/protocol/xcb/package.yml
+++ b/projects/x.org/protocol/xcb/package.yml
@@ -11,7 +11,7 @@ versions:
 
 build:
   dependencies:
-    python.org: ^3.11
+    python.org: ~3.11
     freedesktop.org/pkg-config: ~0.29
   script: |
     ./configure \
@@ -29,7 +29,7 @@ runtime:
 test:
   dependencies:
     freedesktop.org/pkg-config: ~0.29
-    python.org: ^3.11
+    python.org: ~3.11
   script: |
     pkg-config --variable=xcbincludedir xcb-proto
 
diff --git a/projects/x.org/xcb/package.yml b/projects/x.org/xcb/package.yml
index fe86eb14..361de051 100644
--- a/projects/x.org/xcb/package.yml
+++ b/projects/x.org/xcb/package.yml
@@ -16,7 +16,7 @@ dependencies:
 build:
   dependencies:
     freedesktop.org/pkg-config: ^0.29
-    python.org: ^3.11
+    python.org: ~3.11
     x.org/protocol/xcb: ^1
     gnu.org/patch: '*'
   script:
diff --git a/projects/youtube-dl.org/package.yml b/projects/youtube-dl.org/package.yml
index 1b5060d5..415e95a0 100644
--- a/projects/youtube-dl.org/package.yml
+++ b/projects/youtube-dl.org/package.yml
@@ -10,7 +10,7 @@ versions:
   #strip: /^youtube-dl /
 
 dependencies:
-  python.org: 3
+  python.org: '>=3<3.12'
 
 build:
   python-venv.sh {{prefix}}/bin/youtube-dl
diff --git a/projects/yt-dlp.org/package.yml b/projects/yt-dlp.org/package.yml
index 2feb492d..66c97260 100644
--- a/projects/yt-dlp.org/package.yml
+++ b/projects/yt-dlp.org/package.yml
@@ -7,7 +7,7 @@ versions:
   strip: /^yt-dlp /
 
 dependencies:
-  python.org: 3
+  python.org: '>=3<3.12'
 
 build: python-venv.sh {{prefix}}/bin/yt-dlp