diff --git a/h2o-py/test-requirements.txt b/h2o-py/test-requirements.txt
index 8e45560b1982..a743bf393db5 100644
--- a/h2o-py/test-requirements.txt
+++ b/h2o-py/test-requirements.txt
@@ -10,7 +10,8 @@ twine==1.10.0
 urllib3==1.26.5
 grip==4.4.0
 wheel==0.38.0
-numpy==1.23.5
+numpy<=1.23.5; python_version < '3.8'
+numpy==1.23.5; python_version >= '3.8'
 scipy==1.2.3; python_version == '3.6'
 scipy==1.6.3; python_version == '3.7'
 scipy==1.10.1; python_version > '3.7'
@@ -34,15 +35,16 @@ shap==0.29.1
 boto3==1.18.65
 lifelines>=0.19.5
 xlsxwriter==1.3.7
-xgboost==1.7.6
+xgboost==1.7.6; python_version >= '3.8'
 causalml==0.12.3; python_version <= '3.7'
 causalml==0.14.1; python_version > '3.7' and python_version < '3.11'
 colorama
-# not directly required, pinned by Snyk to avoid a vulnerability
-pygments==2.7.4; python_version <= '3.7' 
-pygments==2.15.1; python_version > '3.7'
-sphinx==3.0.4; python_version <= '3.8'
-sphinx==6.1.3; python_version > '3.8'
 datatable==1.0.0; python_version <= '3.9'
 polars==0.19.17; python_version > '3.9'
 pyarrow==14.0.1; python_version > '3.9'
+# not directly required, pinned by Snyk to avoid a vulnerability
+pygments==2.7.4; python_version < '3.5'
+pygments==2.15.1; python_version >= '3.7'
+sphinx==3.0.4; python_version < '3.5'
+sphinx==3.5.4; python_version >= '3.6' and python_version <= '3.8'
+sphinx==6.1.3; python_version > '3.8'