diff --git a/requirements/devpi.txt b/requirements/devpi.txt
index 0fe44a7..4dea67f 100644
--- a/requirements/devpi.txt
+++ b/requirements/devpi.txt
@@ -14,11 +14,11 @@ attrs==26.1.0
     #   devpi-web
 beautifulsoup4==4.14.3
     # via devpi-web
-build==1.4.3
+build==1.4.4
     # via
     #   check-manifest
     #   devpi-client
-certifi==2026.2.25
+certifi==2026.4.22
     # via
     #   httpcore
     #   httpx
@@ -64,7 +64,7 @@ httpx==0.28.1
     # via devpi-server
 hupper==1.12.1
     # via pyramid
-idna==3.11
+idna==3.13
     # via
     #   anyio
     #   httpx
@@ -81,9 +81,9 @@ legacy-cgi==2.6.4
     # via
     #   devpi-server
     #   webob
-nh3==0.3.4
+nh3==0.3.5
     # via readme-renderer
-packaging==26.0
+packaging==26.2
     # via
     #   build
     #   packaging-legacy
@@ -167,5 +167,5 @@ whoosh==2.7.4
     # via devpi-web
 zope-deprecation==6.0
     # via pyramid
-zope-interface==8.3
+zope-interface==8.4
     # via pyramid
diff --git a/requirements/test.txt b/requirements/test.txt
index 595e62c..1f8a7a8 100644
--- a/requirements/test.txt
+++ b/requirements/test.txt
@@ -1,20 +1,20 @@
 # This file was autogenerated by uv via the following command:
 #    uv pip compile --output-file=test.txt test.in
-build==1.4.3
+build==1.4.4
     # via -r test.in
-certifi==2026.2.25
+certifi==2026.4.22
     # via requests
 cffi==2.0.0
     # via cryptography
 charset-normalizer==3.4.7
     # via requests
-cryptography==46.0.7
+cryptography==47.0.0
     # via secretstorage
 docutils==0.22.4
     # via readme-renderer
 id==1.6.1
     # via twine
-idna==3.11
+idna==3.13
     # via requests
 jaraco-classes==3.4.0
     # via keyring
@@ -36,9 +36,9 @@ more-itertools==11.0.2
     # via
     #   jaraco-classes
     #   jaraco-functools
-nh3==0.3.4
+nh3==0.3.5
     # via readme-renderer
-packaging==26.0
+packaging==26.2
     # via
     #   build
     #   twine