diff --git a/requirements/devpi.txt b/requirements/devpi.txt
index 50bc20b..4442efc 100644
--- a/requirements/devpi.txt
+++ b/requirements/devpi.txt
@@ -81,7 +81,7 @@ legacy-cgi==2.6.3
     # via
     #   devpi-server
     #   webob
-nh3==0.2.21
+nh3==0.3.0
     # via readme-renderer
 packaging==25.0
     # via
diff --git a/requirements/test.txt b/requirements/test.txt
index ae797af..20a5586 100644
--- a/requirements/test.txt
+++ b/requirements/test.txt
@@ -36,7 +36,7 @@ more-itertools==10.7.0
     # via
     #   jaraco-classes
     #   jaraco-functools
-nh3==0.2.21
+nh3==0.3.0
     # via readme-renderer
 packaging==25.0
     # via
@@ -61,7 +61,7 @@ requests-toolbelt==1.0.0
     # via twine
 rfc3986==2.0.0
     # via twine
-rich==14.0.0
+rich==14.1.0
     # via twine
 secretstorage==3.3.3
     # via keyring