diff --git a/networking-calico/test-requirements.txt b/networking-calico/test-requirements.txt
index 6e708fcef6f..19f0604632a 100644
--- a/networking-calico/test-requirements.txt
+++ b/networking-calico/test-requirements.txt
@@ -2,7 +2,7 @@
 # of appearance. Changing the order has an impact on the overall integration
 # process, which may cause wedges in the gate later.
 
-setuptools!=24.0.0,!=34.0.0,!=34.0.1,!=34.0.2,!=34.0.3,!=34.1.0,!=34.1.1,!=34.2.0,!=34.3.0,!=34.3.1,!=34.3.2,!=36.2.0,>=21.0.0 # PSF/ZPL
+setuptools!=65.5.1,!=34.0.0,!=34.0.1,!=34.0.2,!=34.0.3,!=34.1.0,!=34.1.1,!=34.2.0,!=34.3.0,!=34.3.1,!=34.3.2,!=36.2.0,>=21.0.0 # PSF/ZPL
 
 hacking<0.11,>=0.10.0
 
@@ -16,7 +16,8 @@ testrepository>=0.0.18 # Apache-2.0/BSD
 testscenarios>=0.4 # Apache-2.0/BSD
 testtools>=2.2.0 # MIT
 
-neutron>=16,<17
+neutron>=21.0.0.0rc1,<17
 neutron-lib==2.3.0
 mock>=3.0.0 # BSD
 pyroute2<0.6.0 # Apache v2
+dnspython>=2.6.1 # not directly required, pinned by Snyk to avoid a vulnerability