diff --git a/requirements/ci.txt b/requirements/ci.txt
index 7b5a586..0276132 100644
--- a/requirements/ci.txt
+++ b/requirements/ci.txt
@@ -29,11 +29,11 @@ binaryornot==0.4.4
     # via
     #   -r requirements/test.txt
     #   cookiecutter
-boto3==1.39.4
+boto3==1.39.9
     # via
     #   -r requirements/test.txt
     #   fs-s3fs
-botocore==1.39.4
+botocore==1.39.9
     # via
     #   -r requirements/test.txt
     #   boto3
@@ -42,7 +42,7 @@ cachetools==6.1.0
     # via
     #   -r requirements/tox.txt
     #   tox
-certifi==2025.7.9
+certifi==2025.7.14
     # via
     #   -r requirements/test.txt
     #   requests
@@ -99,7 +99,7 @@ dill==0.4.0
     # via
     #   -r requirements/test.txt
     #   pylint
-distlib==0.3.9
+distlib==0.4.0
     # via
     #   -r requirements/tox.txt
     #   virtualenv
@@ -215,7 +215,7 @@ more-itertools==10.7.0
     #   -r requirements/test.txt
     #   jaraco-classes
     #   jaraco-functools
-nh3==0.2.21
+nh3==0.3.0
     # via
     #   -r requirements/test.txt
     #   readme-renderer
@@ -331,7 +331,7 @@ rich==14.0.0
     #   -r requirements/test.txt
     #   cookiecutter
     #   twine
-s3transfer==0.13.0
+s3transfer==0.13.1
     # via
     #   -r requirements/test.txt
     #   boto3
@@ -367,7 +367,7 @@ tomlkit==0.13.3
     # via
     #   -r requirements/test.txt
     #   pylint
-tox==4.27.0
+tox==4.28.0
     # via -r requirements/tox.txt
 twine==6.1.0
     # via -r requirements/test.txt
diff --git a/requirements/docs.txt b/requirements/docs.txt
index 2c0f580..9eb1fcd 100644
--- a/requirements/docs.txt
+++ b/requirements/docs.txt
@@ -22,7 +22,7 @@ babel==2.17.0
     #   sphinx
 beautifulsoup4==4.13.4
     # via pydata-sphinx-theme
-certifi==2025.7.9
+certifi==2025.7.14
     # via requests
 charset-normalizer==3.4.2
     # via requests
diff --git a/requirements/quality.txt b/requirements/quality.txt
index 99ca9be..60897ab 100644
--- a/requirements/quality.txt
+++ b/requirements/quality.txt
@@ -20,13 +20,13 @@ astroid==3.3.11
     #   pylint-celery
 binaryornot==0.4.4
     # via cookiecutter
-boto3==1.39.4
+boto3==1.39.9
     # via fs-s3fs
-botocore==1.39.4
+botocore==1.39.9
     # via
     #   boto3
     #   s3transfer
-certifi==2025.7.9
+certifi==2025.7.14
     # via requests
 chardet==5.2.0
     # via binaryornot
@@ -146,7 +146,7 @@ requests==2.32.4
     #   xblock-sdk
 rich==14.0.0
     # via cookiecutter
-s3transfer==0.13.0
+s3transfer==0.13.1
     # via boto3
 simplejson==3.20.1
     # via
diff --git a/requirements/test.txt b/requirements/test.txt
index f0825b1..3e82ada 100644
--- a/requirements/test.txt
+++ b/requirements/test.txt
@@ -22,13 +22,13 @@ backports-tarfile==1.2.0
     # via jaraco-context
 binaryornot==0.4.4
     # via cookiecutter
-boto3==1.39.4
+boto3==1.39.9
     # via fs-s3fs
-botocore==1.39.4
+botocore==1.39.9
     # via
     #   boto3
     #   s3transfer
-certifi==2025.7.9
+certifi==2025.7.14
     # via requests
 cffi==1.17.1
     # via cryptography
@@ -130,7 +130,7 @@ more-itertools==10.7.0
     # via
     #   jaraco-classes
     #   jaraco-functools
-nh3==0.2.21
+nh3==0.3.0
     # via readme-renderer
 packaging==25.0
     # via
@@ -205,7 +205,7 @@ rich==14.0.0
     # via
     #   cookiecutter
     #   twine
-s3transfer==0.13.0
+s3transfer==0.13.1
     # via boto3
 secretstorage==3.3.3
     # via keyring
diff --git a/requirements/tox.txt b/requirements/tox.txt
index 6f56498..6538cec 100644
--- a/requirements/tox.txt
+++ b/requirements/tox.txt
@@ -10,7 +10,7 @@ chardet==5.2.0
     # via tox
 colorama==0.4.6
     # via tox
-distlib==0.3.9
+distlib==0.4.0
     # via virtualenv
 filelock==3.18.0
     # via
@@ -28,7 +28,7 @@ pluggy==1.6.0
     # via tox
 pyproject-api==1.9.1
     # via tox
-tox==4.27.0
+tox==4.28.0
     # via -r requirements/tox.in
 virtualenv==20.31.2
     # via tox