diff --git a/composer/airflow_1_samples/constraints.txt b/composer/airflow_1_samples/constraints.txt
index ad6c5d081b8..b633933a1ab 100644
--- a/composer/airflow_1_samples/constraints.txt
+++ b/composer/airflow_1_samples/constraints.txt
@@ -11,7 +11,7 @@ Flask-OpenID==1.3.0
 Flask-SQLAlchemy==2.4.4
 Flask-WTF==0.14.3
 Flask==1.1.2
-GitPython==3.1.11
+GitPython==3.1.54
 JPype1==0.7.1
 JayDeBeApi==1.2.3
 Jinja2==2.11.2
@@ -19,7 +19,7 @@ Mako==1.1.3
 Markdown==2.6.11
 MarkupSafe==1.1.1
 PyHive==0.6.3
-PyJWT==1.7.1
+PyJWT==2.13.0
 PyNaCl==1.4.0
 PySmbClient==0.1.5
 PyYAML==5.3.1
@@ -156,7 +156,7 @@ grpcio==1.33.2
 gunicorn==20.0.4
 hdfs==2.5.8
 hmsclient==0.1.1
-httplib2==0.18.1
+httplib2==0.32.0
 humanize==3.1.0
 hvac==0.10.5
 identify==1.5.10
@@ -248,7 +248,7 @@ pyOpenSSL==20.0.0
 #pyarrow==0.17.1
 pyarrow==1.0.0
 pyasn1-modules==0.2.8
-pyasn1==0.4.8
+pyasn1==0.6.4
 pycodestyle==2.6.0
 pycparser==2.20
 pycryptodomex==3.9.9
diff --git a/composer/workflows/constraints.txt b/composer/workflows/constraints.txt
index ee214047af0..7d7c3aa8ca5 100644
--- a/composer/workflows/constraints.txt
+++ b/composer/workflows/constraints.txt
@@ -46,7 +46,7 @@ Flask-SQLAlchemy==2.5.1
 Flask-Session==0.5.0
 Flask-WTF==1.2.1
 Flask==2.2.5
-GitPython==3.1.43
+GitPython==3.1.54
 JPype1==1.5.0
 JayDeBeApi==1.2.3
 Jinja2==3.1.4
@@ -57,7 +57,7 @@ MarkupSafe==2.1.5
 PyAthena==3.8.3
 PyGithub==2.3.0
 PyHive==0.7.0
-PyJWT==2.8.0
+PyJWT==2.13.0
 PyNaCl==1.5.0
 PyYAML==6.0.1
 Pygments==2.18.0
@@ -166,7 +166,7 @@ apache-airflow-providers-presto==5.5.1
 apache-airflow-providers-qdrant==1.1.1
 apache-airflow-providers-redis==3.7.1
 apache-airflow-providers-salesforce==5.7.1
-apache-airflow-providers-samba==4.7.1
+apache-airflow-providers-samba==4.12.6
 apache-airflow-providers-segment==3.5.1
 apache-airflow-providers-sendgrid==3.5.1
 apache-airflow-providers-sftp==4.10.1
@@ -381,7 +381,7 @@ hdfs==2.7.3
 hmsclient==0.1.1
 hpack==4.0.0
 httpcore==0.16.3
-httplib2==0.22.0
+httplib2==0.32.0
 httpx==0.23.3
 humanize==4.9.0
 hvac==2.2.0
@@ -546,7 +546,7 @@ pyOpenSSL==24.1.0
 pyarrow-hotfix==0.6
 pyarrow==14.0.2
 pyasn1-modules==0.3.0
-pyasn1==0.5.1
+pyasn1==0.6.4
 pycountry==24.6.1
 pycparser==2.22
 pycryptodome==3.20.0
diff --git a/dataflow/flex-templates/pipeline_with_dependencies/requirements.txt b/dataflow/flex-templates/pipeline_with_dependencies/requirements.txt
index cc9fda76736..8d68af442b7 100644
--- a/dataflow/flex-templates/pipeline_with_dependencies/requirements.txt
+++ b/dataflow/flex-templates/pipeline_with_dependencies/requirements.txt
@@ -169,7 +169,7 @@ grpcio-status==1.62.0
     #   google-cloud-pubsublite
 hdfs==2.7.3
     # via apache-beam
-httplib2==0.22.0
+httplib2==0.32.0
     # via
     #   apache-beam
     #   google-apitools
@@ -242,7 +242,7 @@ pyarrow==14.0.2
     # via apache-beam
 pyarrow-hotfix==0.6
     # via apache-beam
-pyasn1==0.5.1
+pyasn1==0.6.4
     # via
     #   oauth2client
     #   pyasn1-modules
diff --git a/genai/live/requirements.txt b/genai/live/requirements.txt
index ee7f068754b..30cac56fb1e 100644
--- a/genai/live/requirements.txt
+++ b/genai/live/requirements.txt
@@ -4,7 +4,7 @@ websockets==15.0.1
 numpy==1.26.4
 soundfile==0.12.1
 openai==1.99.1
-setuptools==80.9.0
+setuptools==83.0.0
 pyaudio==0.2.14
 librosa==0.11.0
 simpleaudio==1.0.0
\ No newline at end of file
diff --git a/generative_ai/reasoning_engine/requirements.txt b/generative_ai/reasoning_engine/requirements.txt
index 2bcc3b8bdc2..bfeecd60f2f 100644
--- a/generative_ai/reasoning_engine/requirements.txt
+++ b/generative_ai/reasoning_engine/requirements.txt
@@ -1,7 +1,7 @@
 pandas==2.2.3; python_version == '3.7'
 pandas==2.2.3; python_version == '3.8'
 pandas==2.2.3; python_version > '3.8'
-pillow==12.2.0
+pillow==12.3.0
 google-cloud-aiplatform[full]==1.157.0
 sentencepiece==0.2.0
 google-auth==2.38.0
diff --git a/people-and-planet-ai/image-classification/requirements.txt b/people-and-planet-ai/image-classification/requirements.txt
index 4594256679e..ccfe52b49a4 100644
--- a/people-and-planet-ai/image-classification/requirements.txt
+++ b/people-and-planet-ai/image-classification/requirements.txt
@@ -1,3 +1,3 @@
-pillow==12.2.0
+pillow==12.3.0
 apache-beam[gcp]==2.55.1
 google-cloud-aiplatform==1.157.0
diff --git a/run/mcp-server/uv.lock b/run/mcp-server/uv.lock
index 4d787934105..3a598f202ce 100644
--- a/run/mcp-server/uv.lock
+++ b/run/mcp-server/uv.lock
@@ -953,11 +953,11 @@ memory = [
 
 [[package]]
 name = "pyasn1"
-version = "0.6.3"
+version = "0.6.4"
 source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/5c/5f/6583902b6f79b399c9c40674ac384fd9cd77805f9e6205075f828ef11fb2/pyasn1-0.6.3.tar.gz", hash = "sha256:697a8ecd6d98891189184ca1fa05d1bb00e2f84b5977c481452050549c8a72cf", size = 148685, upload-time = "2026-03-17T01:06:53.382Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/a4/9a/23310166d960def5897e91fe20e5b724601b02a22e84ba1f94232c0b7f67/pyasn1-0.6.4.tar.gz", hash = "sha256:9c447d8431c947fe4c8febc4ed9e760bc29011a5b01e5c74b67025bd9fb8ce81", size = 151262, upload-time = "2026-07-09T01:12:33.988Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/5d/a0/7d793dce3fa811fe047d6ae2431c672364b462850c6235ae306c0efd025f/pyasn1-0.6.3-py3-none-any.whl", hash = "sha256:a80184d120f0864a52a073acc6fc642847d0be408e7c7252f31390c0f4eadcde", size = 83997, upload-time = "2026-03-17T01:06:52.036Z" },
+    { url = "https://files.pythonhosted.org/packages/9a/3b/6163796d69c3977d1e4287bea4a6979161cbbdd170ebb430511e8e1999ce/pyasn1-0.6.4-py3-none-any.whl", hash = "sha256:deda9277cfd454080ec40b207fb6df82206a3a2688735233cdcd8d3d565f088b", size = 84410, upload-time = "2026-07-09T01:12:32.92Z" },
 ]
 
 [[package]]
@@ -1140,11 +1140,14 @@ wheels = [
 
 [[package]]
 name = "pyjwt"
-version = "2.11.0"
+version = "2.13.0"
 source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/5c/5a/b46fa56bf322901eee5b0454a34343cdbdae202cd421775a8ee4e42fd519/pyjwt-2.11.0.tar.gz", hash = "sha256:35f95c1f0fbe5d5ba6e43f00271c275f7a1a4db1dab27bf708073b75318ea623", size = 98019, upload-time = "2026-01-30T19:59:55.694Z" }
+dependencies = [
+    { name = "typing-extensions", marker = "python_full_version < '3.11'" },
+]
+sdist = { url = "https://files.pythonhosted.org/packages/3b/81/58d0ac84e1ef3a3843791d6954d94c0b33d526c75eeb1efbce9d0a4c4077/pyjwt-2.13.0.tar.gz", hash = "sha256:41571c89ca91598c79e8ef18a2d07367d4810fbbd6f637794879baf1b7703423", size = 107515, upload-time = "2026-05-21T19:54:36.618Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/6f/01/c26ce75ba460d5cd503da9e13b21a33804d38c2165dec7b716d06b13010c/pyjwt-2.11.0-py3-none-any.whl", hash = "sha256:94a6bde30eb5c8e04fee991062b534071fd1439ef58d2adc9ccb823e7bcd0469", size = 28224, upload-time = "2026-01-30T19:59:54.539Z" },
+    { url = "https://files.pythonhosted.org/packages/a3/5e/ecf12fdb62546d64385c158514e9b2b671f7832108ef2ecd2020ce0af2d1/pyjwt-2.13.0-py3-none-any.whl", hash = "sha256:66adcc2aff09b3f1bbd95fc1e1577df8ac8723c978552fd43304c8a290ac5728", size = 31274, upload-time = "2026-05-21T19:54:35.362Z" },
 ]
 
 [package.optional-dependencies]
diff --git a/vision/snippets/crop_hints/requirements.txt b/vision/snippets/crop_hints/requirements.txt
index defcaa2ab63..21a3e83ee97 100644
--- a/vision/snippets/crop_hints/requirements.txt
+++ b/vision/snippets/crop_hints/requirements.txt
@@ -1,2 +1,2 @@
 google-cloud-vision==3.8.1
-pillow==12.2.0; python_version >= "3.10"
+pillow==12.3.0; python_version >= "3.10"
diff --git a/vision/snippets/document_text/requirements.txt b/vision/snippets/document_text/requirements.txt
index defcaa2ab63..21a3e83ee97 100644
--- a/vision/snippets/document_text/requirements.txt
+++ b/vision/snippets/document_text/requirements.txt
@@ -1,2 +1,2 @@
 google-cloud-vision==3.8.1
-pillow==12.2.0; python_version >= "3.10"
+pillow==12.3.0; python_version >= "3.10"
diff --git a/vision/snippets/face_detection/requirements.txt b/vision/snippets/face_detection/requirements.txt
index defcaa2ab63..21a3e83ee97 100644
--- a/vision/snippets/face_detection/requirements.txt
+++ b/vision/snippets/face_detection/requirements.txt
@@ -1,2 +1,2 @@
 google-cloud-vision==3.8.1
-pillow==12.2.0; python_version >= "3.10"
+pillow==12.3.0; python_version >= "3.10"