diff --git a/lambda/requirements.txt b/lambda/requirements.txt
index 8470fd8..f468231 100644
--- a/lambda/requirements.txt
+++ b/lambda/requirements.txt
@@ -17,13 +17,13 @@ aws-xray-sdk==2.15.0 \
     --hash=sha256:422d62ad7d52e373eebb90b642eb1bb24657afe03b22a8df4a8b2e5108e278a3 \
     --hash=sha256:794381b96e835314345068ae1dd3b9120bd8b4e21295066c37e8814dbb341365
     # via aws-lambda-powertools
-boto3==1.43.2 \
-    --hash=sha256:796e859cfb5e93c55276ce746f8020f691eda6b68a0ec4ce4f6fd07a1cca6859 \
-    --hash=sha256:be951cc22769fbcda73fac523b031ee38db45c3ae2b0d828c76b8f6e8e683073
+boto3==1.43.29 \
+    --hash=sha256:354006c512cdb87ef8214a095f2ade961c8145734475cd7a7e6b39260ff5494a \
+    --hash=sha256:77c27ada27cdbf619a3bbc41fa9e991caef818d3a2988cf92ea722e107d90108
     # via aws-encryption-sdk
-botocore==1.43.24 \
-    --hash=sha256:0c02f2b40e99419d496ece0ea2dcdedb5c45998c16fd1674276c7dbb30767a16 \
-    --hash=sha256:42903b4bfafd8f15a735ed940473f28e4ba21b2ea67a9b9aaa11dfa7fcb19fd5
+botocore==1.43.29 \
+    --hash=sha256:5d62f2a03ed279a50207ca2824e009313df15f082b6bb591a095a4f04c7faef3 \
+    --hash=sha256:dce39d33b707aa162aa3820975f99d7f8f746d46576169fb42ce4f2b3b56b261
     # via
     #   aws-xray-sdk
     #   boto3
diff --git a/pyproject.toml b/pyproject.toml
index 9d8179c..18f5c69 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -28,7 +28,7 @@ Issues = "https://github.com/timpugh/lambda-powertools-reference/issues"
 lambda = [
     "aws-lambda-powertools[all]==3.29.0",
     "aws-xray-sdk==2.15.0",
-    "boto3==1.43.2",
+    "boto3==1.43.29",
 ]
 
 # CDK infrastructure — used by `app.py`, `hello_world/`, and the CDK stack
@@ -67,21 +67,21 @@ lint = [
     "radon==6.0.1",
     "xenon==0.9.3",
     "mypy==1.20.2",
-    "ruff==0.15.12",
+    "ruff==0.15.17",
     "pylint==4.0.5",
     "bandit==1.9.4",
-    "pip-audit==2.10.0",
+    "pip-audit==2.10.1",
     "pre-commit==4.6.0",
-    "boto3-stubs==1.43.5",
+    "boto3-stubs==1.43.29",
     "pydantic==2.13.4",
 ]
 
 # Documentation build — used only by `make docs`. The Zensical static site
 # generator is pre-1.0, so versions are pinned exactly.
 docs = [
-    "zensical==0.0.40",
+    "zensical==0.0.45",
     "mkdocstrings==1.0.4",
-    "mkdocstrings-python==2.0.3",
+    "mkdocstrings-python==2.0.4",
 ]
 
 # =============================================================================