diff --git a/requirements/devpi.txt b/requirements/devpi.txt
index 293e5a4..a64248b 100644
--- a/requirements/devpi.txt
+++ b/requirements/devpi.txt
@@ -18,7 +18,7 @@ build==1.3.0
     # via
     #   check-manifest
     #   devpi-client
-certifi==2025.10.5
+certifi==2025.11.12
     # via
     #   httpcore
     #   httpx
@@ -52,7 +52,7 @@ devpi-server==6.17.0
     #   devpi-web
 devpi-web==5.0.1
     # via -r devpi.in
-docutils==0.22.2
+docutils==0.22.3
     # via
     #   devpi-web
     #   readme-renderer
@@ -81,7 +81,7 @@ legacy-cgi==2.6.4
     # via
     #   devpi-server
     #   webob
-nh3==0.3.1
+nh3==0.3.2
     # via readme-renderer
 packaging==25.0
     # via
@@ -167,5 +167,5 @@ whoosh==2.7.4
     # via devpi-web
 zope-deprecation==6.0
     # via pyramid
-zope-interface==8.0.1
+zope-interface==8.1
     # via pyramid
diff --git a/requirements/test.txt b/requirements/test.txt
index d73f258..e77f0b9 100644
--- a/requirements/test.txt
+++ b/requirements/test.txt
@@ -2,7 +2,7 @@
 #    uv pip compile --output-file=test.txt test.in
 build==1.3.0
     # via -r test.in
-certifi==2025.10.5
+certifi==2025.11.12
     # via requests
 cffi==2.0.0
     # via cryptography
@@ -10,7 +10,7 @@ charset-normalizer==3.4.4
     # via requests
 cryptography==46.0.3
     # via secretstorage
-docutils==0.22.2
+docutils==0.22.3
     # via readme-renderer
 id==1.5.0
     # via twine
@@ -36,7 +36,7 @@ more-itertools==10.8.0
     # via
     #   jaraco-classes
     #   jaraco-functools
-nh3==0.3.1
+nh3==0.3.2
     # via readme-renderer
 packaging==25.0
     # via
@@ -63,7 +63,7 @@ rfc3986==2.0.0
     # via twine
 rich==14.2.0
     # via twine
-secretstorage==3.4.0
+secretstorage==3.4.1
     # via keyring
 twine==6.2.0
     # via -r test.in