diff --git a/requirements/build.txt b/requirements/build.txt
index 2d7aef17f9..fc5bb56b8e 100644
--- a/requirements/build.txt
+++ b/requirements/build.txt
@@ -1,4 +1,4 @@
 # The build and tox versions specified here are also used as constraints
 # during CI and CD Github workflows
-build==1.2.2.post1
+build==1.3.0
 tox==4.1.2
diff --git a/requirements/lint.txt b/requirements/lint.txt
index 16b9222674..fd68243e6c 100644
--- a/requirements/lint.txt
+++ b/requirements/lint.txt
@@ -6,9 +6,9 @@
 # Lint tools
 # (We are not so interested in the specific versions of the tools: the versions
 # are pinned to prevent unexpected linting failures when tools update)
-ruff==0.12.0
-mypy==1.16.1
-zizmor==1.9.0
+ruff==0.12.8
+mypy==1.17.1
+zizmor==1.11.0
 
 # Required for type stubs
-freezegun==1.5.3
+freezegun==1.5.5
diff --git a/requirements/pinned.txt b/requirements/pinned.txt
index 6a312eab92..47ef14e382 100644
--- a/requirements/pinned.txt
+++ b/requirements/pinned.txt
@@ -6,7 +6,7 @@
 #
 cffi==1.17.1
     # via cryptography
-cryptography==45.0.5
+cryptography==45.0.6
     # via securesystemslib
 pycparser==2.22
     # via cffi
diff --git a/requirements/test.txt b/requirements/test.txt
index 0c6c8bc994..2ac691c1b4 100644
--- a/requirements/test.txt
+++ b/requirements/test.txt
@@ -4,5 +4,5 @@
 -r pinned.txt
 
 # coverage measurement
-coverage[toml]==7.9.2
-freezegun==1.5.3
+coverage[toml]==7.10.3
+freezegun==1.5.5
diff --git a/tox.ini b/tox.ini
index 5eae84cfba..7ef098ba3c 100644
--- a/tox.ini
+++ b/tox.ini
@@ -42,7 +42,7 @@ commands =
     ruff format --diff {[testenv:lint]lint_dirs}
 
     mypy {[testenv:lint]lint_dirs}
-    zizmor --persona=pedantic -q .
+    zizmor -q .
 
 [testenv:fix]
 deps = {[testenv:lint]deps}