diff --git a/requirements/base.txt b/requirements/base.txt
index d8bba5f8..d4aa5652 100644
--- a/requirements/base.txt
+++ b/requirements/base.txt
@@ -10,9 +10,9 @@ asgiref==3.8.1
     # via django
 bleach[css]==6.2.0
     # via -r requirements/base.in
-boto3==1.37.23
+boto3==1.37.28
     # via fs-s3fs
-botocore==1.37.23
+botocore==1.37.28
     # via
     #   boto3
     #   s3transfer
@@ -39,7 +39,7 @@ jmespath==1.0.1
     #   botocore
 lazy==1.6
     # via xblock
-lxml==5.3.1
+lxml==5.3.2
     # via xblock
 mako==1.3.9
     # via xblock
@@ -74,7 +74,7 @@ urllib3==2.2.3
     # via
     #   -c https://raw.githubusercontent.com/edx/edx-lint/master/edx_lint/files/common_constraints.txt
     #   botocore
-web-fragments==2.2.0
+web-fragments==3.0.0
     # via xblock
 webencodings==0.5.1
     # via
diff --git a/requirements/ci.txt b/requirements/ci.txt
index ace01a5b..318edfd8 100644
--- a/requirements/ci.txt
+++ b/requirements/ci.txt
@@ -30,5 +30,5 @@ pyproject-api==1.9.0
     # via tox
 tox==4.25.0
     # via -r requirements/ci.in
-virtualenv==20.29.3
+virtualenv==20.30.0
     # via tox
diff --git a/requirements/dev.txt b/requirements/dev.txt
index 2765b27f..135841a7 100644
--- a/requirements/dev.txt
+++ b/requirements/dev.txt
@@ -27,11 +27,11 @@ binaryornot==0.4.4
     #   cookiecutter
 bleach[css]==6.2.0
     # via -r requirements/quality.txt
-boto3==1.37.23
+boto3==1.37.28
     # via
     #   -r requirements/quality.txt
     #   fs-s3fs
-botocore==1.37.23
+botocore==1.37.28
     # via
     #   -r requirements/quality.txt
     #   boto3
@@ -158,7 +158,7 @@ lazy==1.6
     # via
     #   -r requirements/quality.txt
     #   xblock
-lxml[html-clean]==5.3.1
+lxml[html-clean]==5.3.2
     # via
     #   -r requirements/quality.txt
     #   edx-i18n-tools
@@ -277,9 +277,9 @@ pytest==8.3.5
     #   -r requirements/quality.txt
     #   pytest-cov
     #   pytest-django
-pytest-cov==6.0.0
+pytest-cov==6.1.1
     # via -r requirements/quality.txt
-pytest-django==4.10.0
+pytest-django==4.11.1
     # via -r requirements/quality.txt
 python-dateutil==2.9.0.post0
     # via
@@ -360,11 +360,11 @@ urllib3==2.2.3
     #   -r requirements/quality.txt
     #   botocore
     #   requests
-virtualenv==20.29.3
+virtualenv==20.30.0
     # via
     #   -r requirements/ci.txt
     #   tox
-web-fragments==2.2.0
+web-fragments==3.0.0
     # via
     #   -r requirements/quality.txt
     #   xblock
diff --git a/requirements/quality.txt b/requirements/quality.txt
index b9ec160d..42552b89 100644
--- a/requirements/quality.txt
+++ b/requirements/quality.txt
@@ -26,11 +26,11 @@ binaryornot==0.4.4
     #   cookiecutter
 bleach[css]==6.2.0
     # via -r requirements/test.txt
-boto3==1.37.23
+boto3==1.37.28
     # via
     #   -r requirements/test.txt
     #   fs-s3fs
-botocore==1.37.23
+botocore==1.37.28
     # via
     #   -r requirements/test.txt
     #   boto3
@@ -124,7 +124,7 @@ lazy==1.6
     # via
     #   -r requirements/test.txt
     #   xblock
-lxml[html-clean]==5.3.1
+lxml[html-clean]==5.3.2
     # via
     #   -r requirements/test.txt
     #   edx-i18n-tools
@@ -210,9 +210,9 @@ pytest==8.3.5
     #   -r requirements/test.txt
     #   pytest-cov
     #   pytest-django
-pytest-cov==6.0.0
+pytest-cov==6.1.1
     # via -r requirements/test.txt
-pytest-django==4.10.0
+pytest-django==4.11.1
     # via -r requirements/test.txt
 python-dateutil==2.9.0.post0
     # via
@@ -287,7 +287,7 @@ urllib3==2.2.3
     #   -r requirements/test.txt
     #   botocore
     #   requests
-web-fragments==2.2.0
+web-fragments==3.0.0
     # via
     #   -r requirements/test.txt
     #   xblock
diff --git a/requirements/test.txt b/requirements/test.txt
index 4aa212f8..a515cf4f 100644
--- a/requirements/test.txt
+++ b/requirements/test.txt
@@ -18,11 +18,11 @@ binaryornot==0.4.4
     # via cookiecutter
 bleach[css]==6.2.0
     # via -r requirements/base.txt
-boto3==1.37.23
+boto3==1.37.28
     # via
     #   -r requirements/base.txt
     #   fs-s3fs
-botocore==1.37.23
+botocore==1.37.28
     # via
     #   -r requirements/base.txt
     #   boto3
@@ -83,7 +83,7 @@ lazy==1.6
     # via
     #   -r requirements/base.txt
     #   xblock
-lxml[html-clean]==5.3.1
+lxml[html-clean]==5.3.2
     # via
     #   -r requirements/base.txt
     #   edx-i18n-tools
@@ -129,9 +129,9 @@ pytest==8.3.5
     # via
     #   pytest-cov
     #   pytest-django
-pytest-cov==6.0.0
+pytest-cov==6.1.1
     # via -r requirements/test.in
-pytest-django==4.10.0
+pytest-django==4.11.1
     # via -r requirements/test.in
 python-dateutil==2.9.0.post0
     # via
@@ -190,7 +190,7 @@ urllib3==2.2.3
     #   -r requirements/base.txt
     #   botocore
     #   requests
-web-fragments==2.2.0
+web-fragments==3.0.0
     # via
     #   -r requirements/base.txt
     #   xblock