diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index e2c8790e..2d7ada01 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -30,15 +30,15 @@ jobs:
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@d1ba80a13dd99fba24a470575428917156a28b43 # v4.37.5
+        uses: github/codeql-action/init@5595ccaf912efad79be6eef63a5619ff05969be3 # v4.37.6
         with:
           languages: ${{ matrix.language }}
           queries: +security-and-quality
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@d1ba80a13dd99fba24a470575428917156a28b43 # v4.37.5
+        uses: github/codeql-action/autobuild@5595ccaf912efad79be6eef63a5619ff05969be3 # v4.37.6
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@d1ba80a13dd99fba24a470575428917156a28b43 # v4.37.5
+        uses: github/codeql-action/analyze@5595ccaf912efad79be6eef63a5619ff05969be3 # v4.37.6
         with:
           category: "/language:${{ matrix.language }}"
diff --git a/docs/requirements.in b/docs/requirements.in
index 7196bbdd..3661d9db 100644
--- a/docs/requirements.in
+++ b/docs/requirements.in
@@ -3,14 +3,14 @@ sphinx==9.1.0
 sphinx-autobuild==2025.8.25
 
 # if using typehints
-sphinx-autodoc-typehints==3.13.0
+sphinx-autodoc-typehints==3.13.2
 
 mock==5.2.0
 autodoc==0.5.0
 
-tornado==6.5.7
+tornado==6.5.8
 jinja2==3.1.6
 idna==3.18
-starlette==1.3.1
+starlette==1.6.0
 
 requests>=2.34.2
\ No newline at end of file
diff --git a/docs/requirements.txt b/docs/requirements.txt
index 8e77f4a0..2c1169ff 100644
--- a/docs/requirements.txt
+++ b/docs/requirements.txt
@@ -81,7 +81,7 @@ sphinx==9.1.0
     #   sphinx-basic-ng
 sphinx-autobuild==2025.8.25
     # via -r requirements.in
-sphinx-autodoc-typehints==3.13.0
+sphinx-autodoc-typehints==3.13.2
     # via -r requirements.in
 sphinx-basic-ng==1.0.0b2
     # via furo
@@ -97,11 +97,11 @@ sphinxcontrib-qthelp==2.0.0
     # via sphinx
 sphinxcontrib-serializinghtml==2.0.0
     # via sphinx
-starlette==1.3.1
+starlette==1.6.0
     # via
     #   -r requirements.in
     #   sphinx-autobuild
-tornado==6.5.7
+tornado==6.5.8
     # via -r requirements.in
 typing-extensions==4.12.2
     # via beautifulsoup4
diff --git a/requirements-dev.in b/requirements-dev.in
index 0faa6549..9ac81fe9 100644
--- a/requirements-dev.in
+++ b/requirements-dev.in
@@ -4,8 +4,8 @@ xmltodict>=0.14.2
 pytest>=8.4.1
 pytest-cov>=7.1.0
 pytest-xdist>=3.8.0
-coverage>=7.15.2
-ruff>=0.16.1
+coverage>=7.15.4
+ruff>=0.16.2
 setuptools>=80.9.0
 pygments>=2.20.0
 # Note: ty is run via uvx, not installed as a dependency
diff --git a/requirements-dev.txt b/requirements-dev.txt
index 6a84ccca..38805ba3 100644
--- a/requirements-dev.txt
+++ b/requirements-dev.txt
@@ -4,7 +4,7 @@
 #
 #    pip-compile requirements-dev.in
 #
-coverage[toml]==7.15.3
+coverage[toml]==7.15.4
     # via
     #   -r requirements-dev.in
     #   pytest-cov
@@ -35,7 +35,7 @@ pytest-cov==7.1.0
     # via -r requirements-dev.in
 pytest-xdist==3.8.0
     # via -r requirements-dev.in
-ruff==0.16.1
+ruff==0.16.2
     # via -r requirements-dev.in
 tomli==2.4.1
     # via