diff --git a/.github/workflows/ci-cd.yml b/.github/workflows/ci-cd.yml
index 276a76cb16f..93371676c74 100644
--- a/.github/workflows/ci-cd.yml
+++ b/.github/workflows/ci-cd.yml
@@ -436,7 +436,7 @@ jobs:
       run: |
         make cythonize
     - name: Build wheels
-      uses: pypa/cibuildwheel@v2.23.2
+      uses: pypa/cibuildwheel@v2.23.3
       env:
         CIBW_SKIP: pp* ${{ matrix.musl == 'musllinux' && '*manylinux*' || '*musllinux*' }}
         CIBW_ARCHS_MACOS: x86_64 arm64 universal2
diff --git a/requirements/constraints.txt b/requirements/constraints.txt
index 6561e817cbe..0007402f5fe 100644
--- a/requirements/constraints.txt
+++ b/requirements/constraints.txt
@@ -32,7 +32,7 @@ brotli==1.1.0 ; platform_python_implementation == "CPython"
     # via -r requirements/runtime-deps.in
 build==1.2.2.post1
     # via pip-tools
-certifi==2025.1.31
+certifi==2025.4.26
     # via requests
 cffi==1.17.1
     # via
@@ -294,9 +294,9 @@ zlib-ng==0.5.1
     #   -r requirements/test.in
 
 # The following packages are considered to be unsafe in a requirements file:
-pip==25.0.1
+pip==25.1
     # via pip-tools
-setuptools==79.0.0
+setuptools==80.0.0
     # via
     #   incremental
     #   pip-tools
diff --git a/requirements/dev.txt b/requirements/dev.txt
index c38430fa80d..89e27ef7df9 100644
--- a/requirements/dev.txt
+++ b/requirements/dev.txt
@@ -32,7 +32,7 @@ brotli==1.1.0 ; platform_python_implementation == "CPython"
     # via -r requirements/runtime-deps.in
 build==1.2.2.post1
     # via pip-tools
-certifi==2025.1.31
+certifi==2025.4.26
     # via requests
 cffi==1.17.1
     # via
@@ -285,9 +285,9 @@ zlib-ng==0.5.1
     #   -r requirements/test.in
 
 # The following packages are considered to be unsafe in a requirements file:
-pip==25.0.1
+pip==25.1
     # via pip-tools
-setuptools==79.0.0
+setuptools==80.0.0
     # via
     #   incremental
     #   pip-tools
diff --git a/requirements/doc-spelling.txt b/requirements/doc-spelling.txt
index 041d58dab57..a69f5b41e7d 100644
--- a/requirements/doc-spelling.txt
+++ b/requirements/doc-spelling.txt
@@ -10,7 +10,7 @@ alabaster==1.0.0
     # via sphinx
 babel==2.17.0
     # via sphinx
-certifi==2025.1.31
+certifi==2025.4.26
     # via requests
 charset-normalizer==3.4.1
     # via requests
@@ -76,5 +76,5 @@ urllib3==2.4.0
     # via requests
 
 # The following packages are considered to be unsafe in a requirements file:
-setuptools==79.0.0
+setuptools==80.0.0
     # via incremental
diff --git a/requirements/doc.txt b/requirements/doc.txt
index 0a39991a9f4..a184042dc9f 100644
--- a/requirements/doc.txt
+++ b/requirements/doc.txt
@@ -10,7 +10,7 @@ alabaster==1.0.0
     # via sphinx
 babel==2.17.0
     # via sphinx
-certifi==2025.1.31
+certifi==2025.4.26
     # via requests
 charset-normalizer==3.4.1
     # via requests
@@ -69,5 +69,5 @@ urllib3==2.4.0
     # via requests
 
 # The following packages are considered to be unsafe in a requirements file:
-setuptools==79.0.0
+setuptools==80.0.0
     # via incremental