diff --git a/requirements.txt b/requirements.txt
index 36e0f7886..093633d73 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -2,7 +2,7 @@ requests==2.32.5
 click==8.3.0
 docker==7.1.0
 Jinja2==3.1.6
-ruamel.yaml==0.18.15
+ruamel.yaml==0.18.16
 dnspython>=2.6.1
 MarkupSafe==3.0.3
 semver==3.0.4
@@ -15,35 +15,33 @@ pytest-asyncio==1.2.0
 pycognito==2024.5.1
 PyYAML==6.0.3
 urllib3==2.5.0
-cryptography==46.0.2
+cryptography==46.0.3
 python-dateutil==2.9.0.post0
 python-ldap==3.4.5
 GitPython==3.1.45
 setuptools>=71.0.3 # not directly required, pinned by Snyk to avoid a vulnerability
-opentelemetry-api
-opentelemetry-sdk
-pytest-opentelemetry
-jedi
-rope
+opentelemetry-api==1.38.0
+opentelemetry-sdk==1.38.0
+pytest-opentelemetry==1.1.0
 black==25.9.0
-flake8
-isort==6.1.0
+flake8==7.3.0
+isort==7.0.0
 shrub.py==3.10.0
 pytest-mock==3.15.1
 wrapt==1.17.3
-botocore==1.40.51
-boto3==1.40.51
+botocore==1.40.68
+boto3==1.40.68
 python-frontmatter==1.1.0
-python-on-whales==0.78.0
+python-on-whales==0.79.0
 yamale==6.0.0
 yamllint==1.37.1
-PyGithub==2.7.0
+PyGithub==2.8.1
 
 # from kubeobject
 freezegun==1.5.5
 python-box==7.3.2
 autopep8==2.3.2
-flake8-isort==6.1.2
+flake8-isort==7.0.0
 mypy==1.18.2
 types-freezegun==1.1.10
 types-PyYAML==6.0.12.20250915