diff --git a/docker-services.yml b/docker-services.yml
index 390ee90e8..36892b23f 100644
--- a/docker-services.yml
+++ b/docker-services.yml
@@ -30,7 +30,7 @@ services:
       - "${DOCKER_SERVICES_IP_BIND:-127.0.0.1}:5672:5672"
   search:
     # to use ES7: docker.elastic.co/elasticsearch/elasticsearch-oss:7.9.1
-    image: opensearchproject/opensearch:2.11.1
+    image: opensearchproject/opensearch:3.2.0
     environment:
       - bootstrap.memory_lock=true
       - "OPENSEARCH_JAVA_OPTS=-Xms512m -Xmx512m"
@@ -56,7 +56,7 @@ services:
     ports:
       - "${DOCKER_SERVICES_IP_BIND:-127.0.0.1}:5555:5555"
   opensearch-dashboards:
-    image: opensearchproject/opensearch-dashboards:2.11.1
+    image: opensearchproject/opensearch-dashboards:3.2.0
     ports:
       - "${DOCKER_SERVICES_IP_BIND:-127.0.0.1}:5601:5601"
     environment:
diff --git a/requirements.pinned.txt b/requirements.pinned.txt
index 37d1c67e3..ef3b42a2e 100644
--- a/requirements.pinned.txt
+++ b/requirements.pinned.txt
@@ -1,10 +1,10 @@
 alembic==1.16.5
 amqp==5.3.1
 appdirs==1.4.4
-arrow==1.3.0
+arrow==1.4.0
 asttokens==3.0.0
 async-timeout==5.0.1
-attrs==25.3.0
+attrs==25.4.0
 babel==2.17.0
 babel-edtf==1.2.1
 base32-lib==1.0.2
@@ -14,19 +14,19 @@ blinker==1.9.0
 cachelib==0.13.0
 cds-dojson==0.13.0
 celery==5.3.6
-certifi==2025.8.3
+certifi==2025.10.5
 cffi==2.0.0
-charset-normalizer==3.4.3
+charset-normalizer==3.4.4
 click==8.1.8
 click-default-group==1.2.4
 click-didyoumean==0.3.1
 click-plugins==1.1.1.2
 click-repl==0.3.0
 commonmark==0.9.1
-counter-robots==2025.2
-cryptography==46.0.2
+counter-robots==2025.11
+cryptography==46.0.3
 decorator==5.2.1
-Deprecated==1.2.18
+Deprecated==1.3.1
 dictdiffer==0.9.0
 dnspython==2.7.0
 dojson==1.7.0
@@ -51,7 +51,7 @@ flask-menu==2.0.0
 Flask-OAuthlib-Invenio==1.1.2
 Flask-Principal==0.4.0
 flask-resources==1.2.0
-Flask-Security-Invenio==3.7.0
+Flask-Security-Invenio==3.8.2
 flask-shell-ipython==0.5.3
 Flask-SQLAlchemy==3.1.1
 flask-talisman==0.8.1
@@ -64,14 +64,14 @@ fuzzywuzzy==0.18.0
 geojson==3.2.0
 github3.py==4.0.1
 greenlet==3.2.4
-idna==3.10
+idna==3.11
 idutils==1.5.0
 importlib_metadata==8.7.0
 importlib_resources==6.5.2
 infinity==1.5
 intervals==0.9.2
-invenio-access==4.2.0
-invenio-accounts==6.2.0
+invenio-access==4.2.1
+invenio-accounts==6.2.1
 invenio-administration==4.3.0
 invenio-app==2.3.0
 invenio-app-ils==6.0.0
@@ -83,32 +83,32 @@ invenio-celery==2.2.0
 invenio-circulation==3.0.0a1
 invenio-config==1.1.0
 invenio-db==2.1.1
-invenio-files-rest==3.3.1
-invenio-formatter==3.3.0
-invenio-i18n==3.4.2
+invenio-files-rest==3.4.1
+invenio-formatter==3.3.1
+invenio-i18n==3.4.3
 invenio-indexer==3.1.0
 invenio-jsonschemas==2.1.0
 invenio-logging==4.1.1
 invenio-mail==2.3.0
-invenio-oaiserver==3.7.2
-invenio-oauth2server==3.3.0
-invenio-oauthclient==5.3.0
+invenio-oaiserver==3.7.3
+invenio-oauth2server==3.3.1
+invenio-oauthclient==5.3.1
 invenio-opendefinition==2.0.0a2
-invenio-pages==7.2.0
+invenio-pages==7.2.1
 invenio-pidrelations==1.0.0
-invenio-pidstore==2.2.1
+invenio-pidstore==2.2.2
 invenio-query-parser==0.6.0
-invenio-queues==1.0.1
-invenio-records==3.1.0
-invenio-records-permissions==1.2.0
-invenio-records-resources==8.6.1
-invenio-records-rest==3.2.0
+invenio-queues==1.0.2
+invenio-records==3.1.1
+invenio-records-permissions==1.2.1
+invenio-records-resources==8.6.2
+invenio-records-rest==3.2.1
 invenio-rest==2.0.5
-invenio-search==3.1.0
-invenio-search-ui==4.1.2
+invenio-search==3.1.1
+invenio-search-ui==4.1.3
 invenio-stats==5.1.1
-invenio-theme==4.4.1
-invenio-userprofiles==4.1.0
+invenio-theme==4.4.3
+invenio-userprofiles==4.1.1
 ipython==8.18.1
 isbnlib==3.10.14
 itsdangerous==2.2.0
@@ -121,7 +121,7 @@ jsonref==1.1.0
 jsonresolver==0.4.1
 jsonschema==4.25.1
 jsonschema-specifications==2025.9.1
-kombu==5.5.4
+kombu==5.6.0
 limits==4.2
 lorem==0.1.1
 luqum==1.0.0
@@ -130,11 +130,11 @@ Mako==1.3.10
 MarkupSafe==3.0.3
 marshmallow==3.26.1
 marshmallow-oneofschema==3.2.0
-marshmallow-utils==0.13.0
-matplotlib-inline==0.1.7
+marshmallow-utils==0.13.1
+matplotlib-inline==0.2.1
 maxminddb==2.8.2
 maxminddb-geolite2==2018.703
-msgpack==1.1.1
+msgpack==1.1.2
 oauthlib==3.3.1
 opensearch-dsl==2.1.0
 opensearch-py==2.8.0
@@ -149,7 +149,7 @@ pluggy==1.6.0
 ply==3.11
 polib==1.2.0
 prompt_toolkit==3.0.52
-psycopg2-binary==2.9.10
+psycopg2-binary==2.9.11
 ptyprocess==0.7.0
 pure_eval==0.2.3
 pyasn1==0.6.1
@@ -164,11 +164,11 @@ pyparsing==3.2.5
 pyPEG2==2.15.2
 python-dateutil==2.9.0.post0
 python-geoip==1.2
-python-ldap==3.4.4
+python-ldap==3.4.5
 pytz==2024.1
 pywebpack==2.2.0
 PyYAML==6.0.3
-redis==6.4.0
+redis==7.0.1
 referencing==0.36.2
 requests==2.32.5
 requests-oauthlib==2.0.0
@@ -179,14 +179,13 @@ simplejson==3.20.2
 simplekv==0.14.1
 six==1.17.0
 speaklater==1.3
-SQLAlchemy==2.0.43
-SQLAlchemy-Continuum==1.5.1
+SQLAlchemy==2.0.44
+SQLAlchemy-Continuum==1.5.2
 SQLAlchemy-Utils==0.41.2
 stack-data==0.6.3
 tinycss2==1.4.0
-tomli==2.2.1
+tomli==2.3.0
 traitlets==5.14.3
-types-python-dateutil==2.9.0.20250822
 typing_extensions==4.15.0
 tzdata==2025.2
 ua-parser==1.0.1
@@ -202,10 +201,11 @@ wcwidth==0.2.14
 webargs==5.5.3
 webencodings==0.5.1
 Werkzeug==3.1.3
-wrapt==1.17.3
+wrapt==2.0.0
 WTForms==3.2.1
 WTForms-Alchemy==0.19.1
 WTForms-Components==0.11.0
 xmltodict==0.12.0
 zipp==3.23.0
 zipstream-ng==1.9.0
+zxcvbn==4.5.0