diff --git a/pyproject.toml b/pyproject.toml
index b5aa4de..b3110ab 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -25,6 +25,15 @@ include = [
 [tool.poetry.dependencies]
 python = "^3.8"
 
+# moved here from vendors/pyproject.toml
+# jsonschema 4.18 has binary dependencies, making it unsuitable for vendoring.
+# Since we are devendoring the dependencies in the RPM package, we removed the upper
+# constraint (<4.18.0) to avoid future problems if jsonschema gets updated.
+jsonschema = "^4.17.3"
+lark = "^1.1.3"
+packaging = ">=22.0"
+tomli = {version = "^2.0.1", python = "<3.11"}
+
 [tool.poetry.group.dev.dependencies]
 pre-commit = ">=2.15.0"
 vendoring = ">=1.0"
diff --git a/vendors/pyproject.toml b/vendors/pyproject.toml
index e6d172b..24fc1ae 100644
--- a/vendors/pyproject.toml
+++ b/vendors/pyproject.toml
@@ -21,8 +21,3 @@ classifiers = [
 [tool.poetry.dependencies]
 python = "^3.8"
 
-# jsonschema 4.18 has binary dependencies, making it unsuitable for vendoring.
-jsonschema = "^4.17.3,<4.18.0"
-lark = "^1.1.3"
-packaging = ">=22.0"
-tomli = "^2.0.1"