diff --git a/.github/workflows/auto-merge-dependabot.yml b/.github/workflows/auto-merge-dependabot.yml
index 82876722783..dc346e53b3d 100644
--- a/.github/workflows/auto-merge-dependabot.yml
+++ b/.github/workflows/auto-merge-dependabot.yml
@@ -17,7 +17,7 @@ jobs:
     steps:
       - name: Dependabot metadata
         id: metadata
-        uses: dependabot/fetch-metadata@v2.4.0
+        uses: dependabot/fetch-metadata@v3.0.0
         with:
           github-token: "${{ secrets.GITHUB_TOKEN }}"
 
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index e3b7f807ef5..c1ae1ceedf5 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -17,7 +17,7 @@ jobs:
       matrix:
         python-version: ["3.9", "3.10", "3.11", "3.12", "3.13"]
     steps: 
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - name: Set up Python ${{ matrix.python-version }}
         uses: actions/setup-python@v6
         with:
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index d8ffde88a9b..65064323e97 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -45,7 +45,7 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v5
+      uses: actions/checkout@v6
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
diff --git a/.github/workflows/project-auto-add.yml b/.github/workflows/project-auto-add.yml
index 0ce738cb91d..fbd6f475986 100644
--- a/.github/workflows/project-auto-add.yml
+++ b/.github/workflows/project-auto-add.yml
@@ -18,7 +18,7 @@ jobs:
     steps:
       - name: Generate token
         id: generate_token
-        uses: actions/create-github-app-token@v2
+        uses: actions/create-github-app-token@v3
         with:
           app-id: ${{ secrets.GRAPHBOT_APP_ID }}
           private-key: ${{ secrets.GRAPHBOT_APP_PEM }}
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index ca473587402..086867049fc 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -17,7 +17,7 @@ jobs:
     needs: [build]
     steps:
       - name: Checkout code
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - name: Set up Python
         uses: actions/setup-python@v6
         with:
diff --git a/.github/workflows/release-please-gha.yml b/.github/workflows/release-please-gha.yml
index c58ac27d15e..195010cc82e 100644
--- a/.github/workflows/release-please-gha.yml
+++ b/.github/workflows/release-please-gha.yml
@@ -19,11 +19,11 @@ jobs:
   release:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
       - name: Generate GitHub App token
         id: app-token
-        uses: actions/create-github-app-token@v2
+        uses: actions/create-github-app-token@v3
         with:
           app-id: ${{ vars.RELEASE_PLEASE_TOKEN_PROVIDER_APP_ID }}
           private-key: ${{ secrets.RELEASE_PLEASE_TOKEN_PROVIDER_PEM }}
diff --git a/requirements-dev.txt b/requirements-dev.txt
index de10282b4f9..96fdfdb3e75 100644
--- a/requirements-dev.txt
+++ b/requirements-dev.txt
@@ -1,10 +1,10 @@
-aiohttp==3.12.15
+aiohttp==3.13.4
 aiosignal==1.4.0
-anyio==4.10.0
+anyio==4.12.0
 astroid==3.3.11
 async-timeout==5.0.1
-attrs==25.3.0
-azure-core==1.36.0
+attrs==25.4.0
+azure-core==1.38.0
 azure-identity==1.25.1
 build==1.3.0
 bumpver==2025.1131
@@ -12,13 +12,13 @@ certifi==2025.8.3
 cffi==2.0.0
 click==8.1.8
 colorama==0.4.6
-cryptography==46.0.5
-Deprecated==1.2.18
+cryptography==46.0.7
+Deprecated==1.3.1
 dill==0.4.0
 docutils==0.22
 flit==3.12.0
 flit_core==3.12.0
-frozenlist==1.7.0
+frozenlist==1.8.0
 h11==0.16.0
 h2==4.3.0
 hpack==4.1.0
@@ -27,7 +27,7 @@ httpx==0.28.1
 hyperframe==6.1.0
 idna==3.10
 importlib-metadata==6.8.0
-isort==6.0.1
+isort==6.1.0
 lazy-object-proxy==1.12.0
 lexid==2021.1006
 looseversion==1.3.0
@@ -39,7 +39,7 @@ microsoft-kiota-serialization-form==1.9.7
 microsoft-kiota-serialization-json==1.9.7
 microsoft-kiota-serialization-multipart==1.9.7
 microsoft-kiota-serialization-text==1.9.7
-msal==1.33.0
+msal==1.34.0
 msal-extensions==1.3.1
 msgraph-core==1.3.8
 multidict==6.7.0
@@ -53,8 +53,8 @@ pathlib2==2.3.7.post1
 platformdirs==4.4.0
 portalocker==2.10.1
 pycparser==2.23
-PyJWT==2.9.0
-pylint==3.3.8
+PyJWT==2.12.0
+pylint==3.3.9
 pyproject_hooks==1.2.0
 python-dateutil==2.9.0.post0
 requests==2.32.5
@@ -63,14 +63,14 @@ sniffio==1.3.1
 std-uritemplate==2.0.0
 time-machine==2.19.0
 toml==0.10.2
-tomli==2.2.1
+tomli==2.3.0
 tomli_w==1.2.0
 tomlkit==0.13.3
 typing_extensions==4.15.0
 tzdata==2025.2
 uritemplate==4.2.0
-urllib3==2.6.0
-wrapt==1.17.3
+urllib3==2.6.3
+wrapt==2.0.1
 yapf==0.43.0
 yarl==1.20.1
 zipp==3.23.0