diff --git a/requirements/devpi.txt b/requirements/devpi.txt
index acb4582..f9c007d 100644
--- a/requirements/devpi.txt
+++ b/requirements/devpi.txt
@@ -23,7 +23,7 @@ certifi==2025.8.3
     #   httpcore
     #   httpx
     #   requests
-cffi==1.17.1
+cffi==2.0.0
     # via
     #   argon2-cffi-bindings
     #   cmarkgfm
@@ -111,7 +111,7 @@ pluggy==1.6.0
     #   devpi-server
 py==1.11.0
     # via devpi-server
-pycparser==2.22
+pycparser==2.23
     # via cffi
 pygments==2.19.2
     # via
@@ -166,7 +166,7 @@ webob==1.8.9
     # via pyramid
 whoosh==2.7.4
     # via devpi-web
-zope-deprecation==5.1
+zope-deprecation==6.0
     # via pyramid
-zope-interface==7.2
+zope-interface==8.0
     # via pyramid
diff --git a/requirements/test.txt b/requirements/test.txt
index 19fb749..416634f 100644
--- a/requirements/test.txt
+++ b/requirements/test.txt
@@ -4,11 +4,11 @@ build==1.3.0
     # via -r test.in
 certifi==2025.8.3
     # via requests
-cffi==1.17.1
+cffi==2.0.0
     # via cryptography
 charset-normalizer==3.4.3
     # via requests
-cryptography==45.0.6
+cryptography==45.0.7
     # via secretstorage
 docutils==0.22
     # via readme-renderer
@@ -32,7 +32,7 @@ markdown-it-py==4.0.0
     # via rich
 mdurl==0.1.2
     # via markdown-it-py
-more-itertools==10.7.0
+more-itertools==10.8.0
     # via
     #   jaraco-classes
     #   jaraco-functools
@@ -42,7 +42,7 @@ packaging==25.0
     # via
     #   build
     #   twine
-pycparser==2.22
+pycparser==2.23
     # via cffi
 pygments==2.19.2
     # via
@@ -63,9 +63,9 @@ rfc3986==2.0.0
     # via twine
 rich==14.1.0
     # via twine
-secretstorage==3.3.3
+secretstorage==3.4.0
     # via keyring
-twine==6.1.0
+twine==6.2.0
     # via -r test.in
 urllib3==2.5.0
     # via