diff --git a/lambda/requirements.txt b/lambda/requirements.txt
index 8470fd8..8382c08 100644
--- a/lambda/requirements.txt
+++ b/lambda/requirements.txt
@@ -17,13 +17,13 @@ aws-xray-sdk==2.15.0 \
     --hash=sha256:422d62ad7d52e373eebb90b642eb1bb24657afe03b22a8df4a8b2e5108e278a3 \
     --hash=sha256:794381b96e835314345068ae1dd3b9120bd8b4e21295066c37e8814dbb341365
     # via aws-lambda-powertools
-boto3==1.43.2 \
-    --hash=sha256:796e859cfb5e93c55276ce746f8020f691eda6b68a0ec4ce4f6fd07a1cca6859 \
-    --hash=sha256:be951cc22769fbcda73fac523b031ee38db45c3ae2b0d828c76b8f6e8e683073
+boto3==1.43.31 \
+    --hash=sha256:69c5521ad864f33d4d53b0e18a3927697f4558210693b1cb4dd97da959d1f7b9 \
+    --hash=sha256:8165b79c02955affbe4b4e9aa7c560684d0d4d86b4b9de66a37b45eb79fc4b69
     # via aws-encryption-sdk
-botocore==1.43.24 \
-    --hash=sha256:0c02f2b40e99419d496ece0ea2dcdedb5c45998c16fd1674276c7dbb30767a16 \
-    --hash=sha256:42903b4bfafd8f15a735ed940473f28e4ba21b2ea67a9b9aaa11dfa7fcb19fd5
+botocore==1.43.31 \
+    --hash=sha256:4c51c63f39515fc1a2b8e3e2c29e452009c988ba55ad489251658fdd3aedad6e \
+    --hash=sha256:c249625faaa353c5b4004043706a394a4f3bcd3643e242f6b01fff6dc70e988b
     # via
     #   aws-xray-sdk
     #   boto3
diff --git a/pyproject.toml b/pyproject.toml
index dcfd21e..ed069d3 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -28,7 +28,7 @@ Issues = "https://github.com/timpugh/lambda-powertools-reference/issues"
 lambda = [
     "aws-lambda-powertools[all]==3.29.0",
     "aws-xray-sdk==2.15.0",
-    "boto3==1.43.2",
+    "boto3==1.43.31",
 ]
 
 # CDK infrastructure — used by `app.py`, `infrastructure/`, and the CDK stack
@@ -67,21 +67,21 @@ lint = [
     "radon==6.0.1",
     "xenon==0.9.3",
     "mypy==1.20.2",
-    "ruff==0.15.12",
-    "pylint==4.0.5",
+    "ruff==0.15.17",
+    "pylint==4.0.6",
     "bandit==1.9.4",
-    "pip-audit==2.10.0",
+    "pip-audit==2.10.1",
     "pre-commit==4.6.0",
-    "boto3-stubs==1.43.5",
+    "boto3-stubs==1.43.31",
     "pydantic==2.13.4",
 ]
 
 # Documentation build — used only by `make docs`. The Zensical static site
 # generator is pre-1.0, so versions are pinned exactly.
 docs = [
-    "zensical==0.0.40",
+    "zensical==0.0.45",
     "mkdocstrings==1.0.4",
-    "mkdocstrings-python==2.0.3",
+    "mkdocstrings-python==2.0.4",
 ]
 
 # =============================================================================