diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index bd831bbf..7a538bec 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -21,3 +21,16 @@ updates:
   open-pull-requests-limit: 10
   cooldown:
     default-days: 7
+- package-ecosystem: pip
+  directories:
+    - "/python_components/accessibility_scan"
+    - "/python_components/ci"
+    - "/python_components/classifier"
+    - "/python_components/crawler"
+    - "/python_components/document_inference"
+    - "/python_components/evaluation"
+  schedule:
+    interval: daily
+  open-pull-requests-limit: 10
+  cooldown:
+    default-days: 7
diff --git a/docker-compose.yml b/docker-compose.yml
index 78d463fb..d4378ceb 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -4,6 +4,7 @@ services:
     ports:
       - "4566:4566"  # LocalStack edge port
     environment:
+      - LOCALSTACK_AUTH_TOKEN=${LOCALSTACK_AUTH_TOKEN:?LocalStack now requires an auth token. Get one at https://app.localstack.cloud and set LOCALSTACK_AUTH_TOKEN in your shell or a gitignored .env file.}
       - SERVICES=s3,lambda,logs,secretsmanager
       - AWS_DEFAULT_REGION=us-east-1
       - DOCKER_HOST=unix:///var/run/docker.sock
diff --git a/terraform/modules/ses/main.tf b/terraform/modules/ses/main.tf
index 92848162..1c56f3ce 100644
--- a/terraform/modules/ses/main.tf
+++ b/terraform/modules/ses/main.tf
@@ -4,7 +4,7 @@ data "aws_route53_zone" "domain" {
 
 module "ses" {
   name =  "${var.project_name}-${var.environment}-ses"
-  source = "github.com/cloudposse/terraform-aws-ses"
+  source = "github.com/cloudposse/terraform-aws-ses?ref=v0.25.2"
   domain = var.domain_name
   zone_id = data.aws_route53_zone.domain.id
   verify_domain = true