diff --git a/requirements/build.txt b/requirements/build.txt
index 97d0dac1c7..4cf789f7a8 100644
--- a/requirements/build.txt
+++ b/requirements/build.txt
@@ -1,5 +1,5 @@
 # The build and tox versions specified here are also used as constraints
 # during CI and CD Github workflows
-build==1.2.1
-tox==4.1.2
+build==1.2.2
+tox==4.18.1
 hatchling==1.25.0
diff --git a/requirements/lint.txt b/requirements/lint.txt
index 3feab75ff8..ffdbbe4b56 100644
--- a/requirements/lint.txt
+++ b/requirements/lint.txt
@@ -6,5 +6,5 @@
 # Lint tools
 # (We are not so interested in the specific versions of the tools: the versions
 # are pinned to prevent unexpected linting failures when tools update)
-ruff==0.5.1
-mypy==1.10.1
+ruff==0.6.4
+mypy==1.11.2
diff --git a/requirements/pinned.txt b/requirements/pinned.txt
index e435e928b4..b253ef17aa 100644
--- a/requirements/pinned.txt
+++ b/requirements/pinned.txt
@@ -1,8 +1,8 @@
-certifi==2024.7.4        # via requests
-cffi==1.16.0              # via cryptography, pynacl
+certifi==2024.8.30        # via requests
+cffi==1.17.1              # via cryptography, pynacl
 charset-normalizer==3.3.2 # via requests
-cryptography==42.0.8      # via securesystemslib
-idna==3.7                 # via requests
+cryptography==43.0.1      # via securesystemslib
+idna==3.8                 # via requests
 pycparser==2.22           # via cffi
 pynacl==1.5.0             # via securesystemslib
 requests==2.32.3
diff --git a/requirements/test.txt b/requirements/test.txt
index 0ad7f77abf..d5f61d17a5 100644
--- a/requirements/test.txt
+++ b/requirements/test.txt
@@ -4,4 +4,4 @@
 -r pinned.txt
 
 # coverage measurement
-coverage==7.5.4
+coverage==7.6.1