diff --git a/requirements/devpi.txt b/requirements/devpi.txt
index bcf1c28..a1dd521 100644
--- a/requirements/devpi.txt
+++ b/requirements/devpi.txt
@@ -6,14 +6,16 @@
 #
 anyio==4.9.0
     # via httpx
-argon2-cffi==23.1.0
+argon2-cffi==25.1.0
     # via
     #   devpi-server
     #   passlib
 argon2-cffi-bindings==21.2.0
     # via argon2-cffi
 attrs==25.3.0
-    # via devpi-server
+    # via
+    #   devpi-server
+    #   devpi-web
 beautifulsoup4==4.13.4
     # via devpi-web
 build==1.2.2.post1
@@ -52,7 +54,7 @@ devpi-server==6.15.0
     # via
     #   -r devpi.in
     #   devpi-web
-devpi-web==4.3.0
+devpi-web==5.0.0
     # via -r devpi.in
 docutils==0.21.2
     # via
@@ -112,9 +114,7 @@ pluggy==1.6.0
     #   devpi-client
     #   devpi-server
 py==1.11.0
-    # via
-    #   devpi-server
-    #   devpi-web
+    # via devpi-server
 pycparser==2.22
     # via cffi
 pygments==2.19.1
@@ -136,9 +136,9 @@ readme-renderer[md]==44.0
     # via devpi-web
 repoze-lru==0.7
     # via devpi-server
-requests==2.32.3
+requests==2.32.4
     # via devpi-common
-ruamel-yaml==0.18.11
+ruamel-yaml==0.18.14
     # via devpi-server
 ruamel-yaml-clib==0.2.12
     # via ruamel-yaml
@@ -152,7 +152,7 @@ strictyaml==1.7.3
     # via devpi-server
 translationstring==1.4
     # via pyramid
-typing-extensions==4.13.2
+typing-extensions==4.14.0
     # via beautifulsoup4
 urllib3==2.4.0
     # via requests
diff --git a/requirements/test.txt b/requirements/test.txt
index 2413d04..5afa4fb 100644
--- a/requirements/test.txt
+++ b/requirements/test.txt
@@ -12,7 +12,7 @@ cffi==1.17.1
     # via cryptography
 charset-normalizer==3.4.2
     # via requests
-cryptography==45.0.3
+cryptography==45.0.4
     # via secretstorage
 docutils==0.21.2
     # via readme-renderer
@@ -56,7 +56,7 @@ pyproject-hooks==1.2.0
     # via build
 readme-renderer==44.0
     # via twine
-requests==2.32.3
+requests==2.32.4
     # via
     #   id
     #   requests-toolbelt