diff --git a/requirements/base.txt b/requirements/base.txt
index 6b0b4cb..4cb316d 100644
--- a/requirements/base.txt
+++ b/requirements/base.txt
@@ -29,7 +29,7 @@ six==1.17.0
     #   -r requirements/base.in
     #   fs
     #   python-dateutil
-web-fragments==3.1.0
+web-fragments==4.0.0
     # via
     #   -r requirements/base.in
     #   xblock
diff --git a/requirements/pip.txt b/requirements/pip.txt
index 084d708..c87fe30 100644
--- a/requirements/pip.txt
+++ b/requirements/pip.txt
@@ -12,5 +12,5 @@ wheel==0.46.3
 # The following packages are considered to be unsafe in a requirements file:
 pip==26.0.1
     # via -r requirements/pip.in
-setuptools==82.0.0
+setuptools==82.0.1
     # via -r requirements/pip.in
diff --git a/requirements/test.txt b/requirements/test.txt
index dc2ad69..e21b4cc 100644
--- a/requirements/test.txt
+++ b/requirements/test.txt
@@ -4,7 +4,7 @@
 #
 #    make upgrade
 #
-coverage[toml]==7.13.4
+coverage[toml]==7.13.5
     # via pytest-cov
 iniconfig==2.3.0
     # via pytest
@@ -18,5 +18,5 @@ pygments==2.19.2
     # via pytest
 pytest==9.0.2
     # via pytest-cov
-pytest-cov==7.0.0
+pytest-cov==7.1.0
     # via -r requirements/test.in