diff --git a/requirements/dev.txt b/requirements/dev.txt
index 385f4074..25d1961c 100644
--- a/requirements/dev.txt
+++ b/requirements/dev.txt
@@ -24,7 +24,7 @@ certifi==2024.7.4
     #   -r prod.txt
     #   requests
     #   sentry-sdk
-cffi==1.16.0
+cffi==2.0.0
     # via
     #   -r prod.txt
     #   cryptography
@@ -36,7 +36,7 @@ checkmatelib==1.0.18
     # via -r prod.txt
 click==8.1.7
     # via pip-tools
-cryptography==44.0.1
+cryptography==46.0.5
     # via
     #   -r prod.txt
     #   joserfc
@@ -317,9 +317,7 @@ zope-sqlalchemy==3.1
 
 # The following packages are considered to be unsafe in a requirements file:
 pip==25.3
-    # via
-    #   -r prod.txt
-    #   pip-tools
+    # via pip-tools
 setuptools==78.1.1
     # via
     #   -r prod.txt
diff --git a/requirements/functests.txt b/requirements/functests.txt
index 8cb04e8b..f2b89ec3 100644
--- a/requirements/functests.txt
+++ b/requirements/functests.txt
@@ -24,7 +24,7 @@ certifi==2024.7.4
     #   -r prod.txt
     #   requests
     #   sentry-sdk
-cffi==1.16.0
+cffi==2.0.0
     # via
     #   -r prod.txt
     #   cryptography
@@ -36,7 +36,7 @@ checkmatelib==1.0.18
     # via -r prod.txt
 click==8.1.7
     # via pip-tools
-cryptography==44.0.1
+cryptography==46.0.5
     # via
     #   -r prod.txt
     #   joserfc
@@ -312,9 +312,7 @@ zope-sqlalchemy==3.1
 
 # The following packages are considered to be unsafe in a requirements file:
 pip==25.3
-    # via
-    #   -r prod.txt
-    #   pip-tools
+    # via pip-tools
 setuptools==78.1.1
     # via
     #   -r prod.txt
diff --git a/requirements/lint.txt b/requirements/lint.txt
index 22aaed8f..286a1f71 100644
--- a/requirements/lint.txt
+++ b/requirements/lint.txt
@@ -34,7 +34,7 @@ certifi==2024.7.4
     #   -r tests.txt
     #   requests
     #   sentry-sdk
-cffi==1.16.0
+cffi==2.0.0
     # via
     #   -r functests.txt
     #   -r tests.txt
@@ -57,7 +57,7 @@ coverage[toml]==7.10.7
     # via
     #   -r tests.txt
     #   pytest-cov
-cryptography==44.0.1
+cryptography==46.0.5
     # via
     #   -r functests.txt
     #   -r tests.txt
diff --git a/requirements/prod.txt b/requirements/prod.txt
index 8f8fb0b8..52234b56 100644
--- a/requirements/prod.txt
+++ b/requirements/prod.txt
@@ -16,13 +16,13 @@ certifi==2024.7.4
     # via
     #   requests
     #   sentry-sdk
-cffi==1.16.0
+cffi==2.0.0
     # via cryptography
 charset-normalizer==3.3.2
     # via requests
 checkmatelib==1.0.18
     # via -r prod.in
-cryptography==44.0.1
+cryptography==46.0.5
     # via joserfc
 google-auth==2.26.2
     # via google-auth-oauthlib
@@ -186,8 +186,6 @@ zope-sqlalchemy==3.1
     # via -r prod.in
 
 # The following packages are considered to be unsafe in a requirements file:
-pip==25.3
-    # via -r prod.in
 setuptools==78.1.1
     # via
     #   pyramid
diff --git a/requirements/tests.txt b/requirements/tests.txt
index 3aea25c9..f5128f3a 100644
--- a/requirements/tests.txt
+++ b/requirements/tests.txt
@@ -22,7 +22,7 @@ certifi==2024.7.4
     #   -r prod.txt
     #   requests
     #   sentry-sdk
-cffi==1.16.0
+cffi==2.0.0
     # via
     #   -r prod.txt
     #   cryptography
@@ -36,7 +36,7 @@ click==8.1.7
     # via pip-tools
 coverage[toml]==7.10.7
     # via pytest-cov
-cryptography==44.0.1
+cryptography==46.0.5
     # via
     #   -r prod.txt
     #   joserfc
@@ -314,9 +314,7 @@ zope-sqlalchemy==3.1
 
 # The following packages are considered to be unsafe in a requirements file:
 pip==25.3
-    # via
-    #   -r prod.txt
-    #   pip-tools
+    # via pip-tools
 setuptools==78.1.1
     # via
     #   -r prod.txt
diff --git a/requirements/typecheck.txt b/requirements/typecheck.txt
index 906a9c7a..d454b8fd 100644
--- a/requirements/typecheck.txt
+++ b/requirements/typecheck.txt
@@ -22,7 +22,7 @@ certifi==2024.7.4
     #   -r prod.txt
     #   requests
     #   sentry-sdk
-cffi==1.16.0
+cffi==2.0.0
     # via
     #   -r prod.txt
     #   cryptography
@@ -34,7 +34,7 @@ checkmatelib==1.0.18
     # via -r prod.txt
 click==8.1.7
     # via pip-tools
-cryptography==44.0.1
+cryptography==46.0.5
     # via
     #   -r prod.txt
     #   joserfc
@@ -279,9 +279,7 @@ zope-sqlalchemy==3.1
 
 # The following packages are considered to be unsafe in a requirements file:
 pip==25.3
-    # via
-    #   -r prod.txt
-    #   pip-tools
+    # via pip-tools
 setuptools==78.1.1
     # via
     #   -r prod.txt