diff --git a/requirements/base.txt b/requirements/base.txt
index e23fca1..f447bb2 100644
--- a/requirements/base.txt
+++ b/requirements/base.txt
@@ -8,13 +8,13 @@ appdirs==1.4.4
     # via fs
 asgiref==3.11.1
     # via django
-boto3==1.43.40
+boto3==1.43.46
     # via fs-s3fs
-botocore==1.43.40
+botocore==1.43.46
     # via
     #   boto3
     #   s3transfer
-django==5.2.15
+django==5.2.16
     # via
     #   -c https://raw.githubusercontent.com/edx/edx-lint/master/edx_lint/files/common_constraints.txt
     #   openedx-django-pyfs
@@ -55,7 +55,7 @@ pytz==2026.2
     # via xblock
 pyyaml==6.0.3
     # via xblock
-s3transfer==0.19.0
+s3transfer==0.19.1
     # via boto3
 simplejson==4.1.1
     # via xblock
@@ -74,7 +74,7 @@ urllib3==2.7.0
     # via botocore
 webob==1.8.10
     # via xblock
-xblock[django]==6.3.0
+xblock[django]==6.3.1
     # via -r requirements/base.in
 
 # The following packages are considered to be unsafe in a requirements file:
diff --git a/requirements/ci.txt b/requirements/ci.txt
index 6c3e461..1e94b7a 100644
--- a/requirements/ci.txt
+++ b/requirements/ci.txt
@@ -10,7 +10,7 @@ colorama==0.4.6
     # via tox
 distlib==0.4.3
     # via virtualenv
-filelock==3.29.5
+filelock==3.29.7
     # via
     #   python-discovery
     #   tox
@@ -28,13 +28,13 @@ pluggy==1.6.0
     # via tox
 pyproject-api==1.10.1
     # via tox
-python-discovery==1.4.3
+python-discovery==1.4.4
     # via
     #   tox
     #   virtualenv
 tomli-w==1.2.0
     # via tox
-tox==4.56.1
+tox==4.56.4
     # via -r requirements/ci.in
-virtualenv==21.5.1
+virtualenv==21.6.1
     # via tox
diff --git a/requirements/pip-tools.txt b/requirements/pip-tools.txt
index a082bfc..1c1849c 100644
--- a/requirements/pip-tools.txt
+++ b/requirements/pip-tools.txt
@@ -4,7 +4,7 @@
 #
 #    make upgrade
 #
-build==1.5.0
+build==1.5.1
     # via pip-tools
 click==8.4.2
     # via pip-tools
diff --git a/requirements/test.txt b/requirements/test.txt
index 5034dfd..82a8dda 100644
--- a/requirements/test.txt
+++ b/requirements/test.txt
@@ -20,18 +20,18 @@ astroid==4.0.4
     #   pylint-celery
 binaryornot==0.6.0
     # via cookiecutter
-boto3==1.43.40
+boto3==1.43.46
     # via
     #   -r requirements/base.txt
     #   fs-s3fs
-botocore==1.43.40
+botocore==1.43.46
     # via
     #   -r requirements/base.txt
     #   boto3
     #   s3transfer
 certifi==2026.6.17
     # via requests
-charset-normalizer==3.4.7
+charset-normalizer==3.4.9
     # via requests
 click==8.4.2
     # via
@@ -45,7 +45,7 @@ code-annotations==3.0.0
     # via edx-lint
 cookiecutter==2.7.1
     # via xblock-sdk
-coverage[toml]==7.15.0
+coverage[toml]==7.15.1
     # via pytest-cov
 dill==0.4.1
     # via pylint
@@ -143,7 +143,7 @@ pylint==4.0.6
     #   pylint-plugin-utils
 pylint-celery==0.3
     # via edx-lint
-pylint-django==2.7.0
+pylint-django==2.8.0
     # via edx-lint
 pylint-plugin-utils==0.9.0
     # via
@@ -189,7 +189,7 @@ requests==2.34.2
     #   xblock-sdk
 rich==15.0.0
     # via cookiecutter
-s3transfer==0.19.0
+s3transfer==0.19.1
     # via
     #   -r requirements/base.txt
     #   boto3
@@ -224,7 +224,7 @@ typing-extensions==4.16.0
     # via
     #   -r requirements/base.txt
     #   edx-opaque-keys
-tzdata==2026.2
+tzdata==2026.3
     # via arrow
 urllib3==2.7.0
     # via
@@ -238,7 +238,7 @@ webob==1.8.10
     #   -r requirements/base.txt
     #   xblock
     #   xblock-sdk
-xblock[django]==6.3.0
+xblock[django]==6.3.1
     # via
     #   -r requirements/base.txt
     #   xblock-sdk