diff --git a/requirements/devpi.txt b/requirements/devpi.txt
index 019bb2d..fc2e0e5 100644
--- a/requirements/devpi.txt
+++ b/requirements/devpi.txt
@@ -12,7 +12,7 @@ argon2-cffi==23.1.0
     #   passlib
 argon2-cffi-bindings==21.2.0
     # via argon2-cffi
-attrs==25.1.0
+attrs==25.3.0
     # via devpi-server
 beautifulsoup4==4.13.3
     # via devpi-web
@@ -168,7 +168,7 @@ zope-interface==7.2
     # via pyramid
 
 # The following packages are considered to be unsafe in a requirements file:
-setuptools==75.8.2
+setuptools==76.0.0
     # via
     #   check-manifest
     #   pyramid
diff --git a/requirements/test.txt b/requirements/test.txt
index 79c6393..4b091da 100644
--- a/requirements/test.txt
+++ b/requirements/test.txt
@@ -12,7 +12,7 @@ cffi==1.17.1
     # via cryptography
 charset-normalizer==3.4.1
     # via requests
-cryptography==44.0.1
+cryptography==44.0.2
     # via secretstorage
 docutils==0.21.2
     # via readme-renderer