diff --git a/requirements/base-base.in b/requirements/base-base.in
index 9c4ee90..dd23763 100644
--- a/requirements/base-base.in
+++ b/requirements/base-base.in
@@ -40,7 +40,7 @@ python-slugify==8.0.1  # 2023 Feb https://pypi.org/project/python-slugify/8.0.1/
 # not yet 4.2 django-allauth==0.54.0  # 2023 Apr https://pypi.org/project/django-allauth/0.54.0/
 # see https://github.com/simkimsia/django-allauth/releases/tag/v0.55.0-django42 for details
 # git+https://github.com/simkimsia/django-allauth@v0.55.0-django42#egg=django-allauth
-django-allauth==0.57.0 # 2023 Sep https://pypi.org/project/django-allauth/0.57.0/
+django-allauth==0.60.0 # 2023 Sep https://pypi.org/project/django-allauth/0.57.0/
 # we use argon2 because https://docs.djangoproject.com/en/dev/topics/auth/passwords/#using-argon2-with-django
 # better than Django's default and better than bcrypt
 argon2-cffi==23.1.0  # 2023 Aug https://pypi.org/project/argon2-cffi/23.1.0/
diff --git a/requirements/base-base.txt b/requirements/base-base.txt
index bcfccac..aa2283a 100644
--- a/requirements/base-base.txt
+++ b/requirements/base-base.txt
@@ -5,7 +5,7 @@
 #    pip-compile base-base.in
 #
 argon2-cffi==23.1.0
-    # via -r base-base.in
+    # via -r requirements/base-base.in
 argon2-cffi-bindings==21.2.0
     # via argon2-cffi
 asgiref==3.7.2
@@ -25,21 +25,21 @@ cryptography==41.0.2
 defusedxml==0.7.1
     # via python3-openid
 dj-database-url==2.1.0
-    # via -r base-base.in
+    # via -r requirements/base-base.in
 django==4.2.6
     # via
-    #   -r base-base.in
+    #   -r requirements/base-base.in
     #   dj-database-url
     #   django-allauth
-django-allauth==0.57.0
-    # via -r base-base.in
+django-allauth==0.60.0
+    # via -r requirements/base-base.in
 django-environ==0.11.2
-    # via -r base-base.in
+    # via -r requirements/base-base.in
 idna==3.4
     # via requests
 marshmallow==3.20.1
     # via
-    #   -r base-base.in
+    #   -r requirements/base-base.in
     #   webargs
 oauthlib==3.2.2
     # via requests-oauthlib
@@ -48,25 +48,27 @@ packaging==23.2
     #   marshmallow
     #   webargs
 psycopg==3.1.12
-    # via -r base-base.in
+    # via -r requirements/base-base.in
 pycparser==2.21
     # via cffi
 pyjwt[crypto]==2.7.0
-    # via django-allauth
+    # via
+    #   django-allauth
+    #   pyjwt
 python-benedict==0.32.1
-    # via -r base-base.in
+    # via -r requirements/base-base.in
 python-fsutil==0.10.0
     # via python-benedict
 python-slugify==8.0.1
     # via
-    #   -r base-base.in
+    #   -r requirements/base-base.in
     #   python-benedict
 python3-openid==3.2.0
     # via django-allauth
 pytz==2023.3.post1
-    # via -r base-base.in
+    # via -r requirements/base-base.in
 redis==5.0.1
-    # via -r base-base.in
+    # via -r requirements/base-base.in
 requests==2.31.0
     # via
     #   django-allauth
@@ -86,4 +88,4 @@ typing-extensions==4.7.1
 urllib3==2.0.3
     # via requests
 webargs==8.3.0
-    # via -r base-base.in
+    # via -r requirements/base-base.in