diff --git a/requirements/base.txt b/requirements/base.txt
index 51102f4..386b876 100644
--- a/requirements/base.txt
+++ b/requirements/base.txt
@@ -6,11 +6,11 @@
 #
 appdirs==1.4.4
     # via fs
-asgiref==3.10.0
+asgiref==3.11.0
     # via django
-boto3==1.40.55
+boto3==1.41.2
     # via fs-s3fs
-botocore==1.40.55
+botocore==1.41.2
     # via
     #   boto3
     #   s3transfer
@@ -18,7 +18,7 @@ cssselect==1.2.0
     # via
     #   -c requirements/constraints.txt
     #   parsel
-django==4.2.25
+django==5.2.8
     # via
     #   -c https://raw.githubusercontent.com/edx/edx-lint/master/edx_lint/files/common_constraints.txt
     #   openedx-django-pyfs
@@ -59,7 +59,7 @@ pytz==2025.2
     # via xblock
 pyyaml==6.0.3
     # via xblock
-s3transfer==0.14.0
+s3transfer==0.15.0
     # via boto3
 simplejson==3.20.2
     # via xblock
diff --git a/requirements/ci.txt b/requirements/ci.txt
index 6555e14..735409a 100644
--- a/requirements/ci.txt
+++ b/requirements/ci.txt
@@ -4,7 +4,7 @@
 #
 #    make upgrade
 #
-cachetools==6.2.1
+cachetools==6.2.2
     # via tox
 chardet==5.2.0
     # via tox
@@ -28,7 +28,7 @@ pluggy==1.6.0
     # via tox
 pyproject-api==1.10.0
     # via tox
-tox==4.31.0
+tox==4.32.0
     # via -r requirements/ci.in
-virtualenv==20.35.3
+virtualenv==20.35.4
     # via tox
diff --git a/requirements/pip-tools.txt b/requirements/pip-tools.txt
index e97cb1b..383d2a0 100644
--- a/requirements/pip-tools.txt
+++ b/requirements/pip-tools.txt
@@ -6,11 +6,11 @@
 #
 build==1.3.0
     # via pip-tools
-click==8.3.0
+click==8.3.1
     # via pip-tools
 packaging==25.0
     # via build
-pip-tools==7.5.1
+pip-tools==7.5.2
     # via -r requirements/pip-tools.in
 pyproject-hooks==1.2.0
     # via
diff --git a/requirements/pip.txt b/requirements/pip.txt
index dec1587..172b7cc 100644
--- a/requirements/pip.txt
+++ b/requirements/pip.txt
@@ -9,6 +9,8 @@ wheel==0.45.1
 
 # The following packages are considered to be unsafe in a requirements file:
 pip==25.2
-    # via -r requirements/pip.in
+    # via
+    #   -c https://raw.githubusercontent.com/edx/edx-lint/master/edx_lint/files/common_constraints.txt
+    #   -r requirements/pip.in
 setuptools==80.9.0
     # via -r requirements/pip.in
diff --git a/requirements/test.txt b/requirements/test.txt
index 312a975..583b8b6 100644
--- a/requirements/test.txt
+++ b/requirements/test.txt
@@ -10,7 +10,7 @@ appdirs==1.4.4
     #   fs
 arrow==1.4.0
     # via cookiecutter
-asgiref==3.10.0
+asgiref==3.11.0
     # via
     #   -r requirements/base.txt
     #   django
@@ -20,22 +20,22 @@ astroid==3.3.11
     #   pylint-celery
 binaryornot==0.4.4
     # via cookiecutter
-boto3==1.40.55
+boto3==1.41.2
     # via
     #   -r requirements/base.txt
     #   fs-s3fs
-botocore==1.40.55
+botocore==1.41.2
     # via
     #   -r requirements/base.txt
     #   boto3
     #   s3transfer
-certifi==2025.10.5
+certifi==2025.11.12
     # via requests
 chardet==5.2.0
     # via binaryornot
 charset-normalizer==3.4.4
     # via requests
-click==8.3.0
+click==8.3.1
     # via
     #   click-log
     #   code-annotations
@@ -47,7 +47,7 @@ code-annotations==2.3.0
     # via edx-lint
 cookiecutter==2.6.0
     # via xblock-sdk
-coverage[toml]==7.11.0
+coverage[toml]==7.12.0
     # via pytest-cov
 cssselect==1.2.0
     # via
@@ -155,7 +155,7 @@ pylint-plugin-utils==0.9.0
     #   pylint-django
 pypng==0.20220715.0
     # via xblock-sdk
-pytest==8.4.2
+pytest==9.0.1
     # via
     #   pytest-cov
     #   pytest-django
@@ -189,7 +189,7 @@ requests==2.32.5
     #   xblock-sdk
 rich==14.2.0
     # via cookiecutter
-s3transfer==0.14.0
+s3transfer==0.15.0
     # via
     #   -r requirements/base.txt
     #   boto3
@@ -210,7 +210,7 @@ sqlparse==0.5.3
     # via
     #   -r requirements/base.txt
     #   django
-stevedore==5.5.0
+stevedore==5.6.0
     # via code-annotations
 text-unidecode==1.3
     # via python-slugify