diff --git a/requirements/devpi.txt b/requirements/devpi.txt
index 8782a3e..9c66f92 100644
--- a/requirements/devpi.txt
+++ b/requirements/devpi.txt
@@ -46,7 +46,7 @@ devpi-common==4.1.0
     #   devpi-client
     #   devpi-server
     #   devpi-web
-devpi-server==6.17.0
+devpi-server==6.18.0
     # via
     #   -r devpi.in
     #   devpi-web
@@ -83,7 +83,7 @@ legacy-cgi==2.6.4
     #   webob
 nh3==0.3.2
     # via readme-renderer
-packaging==25.0
+packaging==26.0
     # via
     #   build
     #   packaging-legacy
@@ -111,7 +111,7 @@ pluggy==1.6.0
     #   devpi-server
 py==1.11.0
     # via devpi-server
-pycparser==2.23
+pycparser==3.0
     # via cffi
 pygments==2.19.2
     # via
@@ -136,14 +136,14 @@ requests==2.32.5
     # via devpi-common
 ruamel-yaml==0.19.1
     # via devpi-server
-setuptools==80.9.0
+setuptools==80.10.2
     # via
     #   check-manifest
     #   pyramid
     #   zope-deprecation
 six==1.17.0
     # via python-dateutil
-soupsieve==2.8.1
+soupsieve==2.8.3
     # via beautifulsoup4
 strictyaml==1.7.3
     # via devpi-server
diff --git a/requirements/test.txt b/requirements/test.txt
index e84328b..f68e22f 100644
--- a/requirements/test.txt
+++ b/requirements/test.txt
@@ -8,7 +8,7 @@ cffi==2.0.0
     # via cryptography
 charset-normalizer==3.4.4
     # via requests
-cryptography==46.0.3
+cryptography==46.0.4
     # via secretstorage
 docutils==0.22.4
     # via readme-renderer
@@ -38,11 +38,11 @@ more-itertools==10.8.0
     #   jaraco-functools
 nh3==0.3.2
     # via readme-renderer
-packaging==25.0
+packaging==26.0
     # via
     #   build
     #   twine
-pycparser==2.23
+pycparser==3.0
     # via cffi
 pygments==2.19.2
     # via
@@ -61,7 +61,7 @@ requests-toolbelt==1.0.0
     # via twine
 rfc3986==2.0.0
     # via twine
-rich==14.2.0
+rich==14.3.1
     # via twine
 secretstorage==3.5.0
     # via keyring