diff --git a/lambda/requirements.txt b/lambda/requirements.txt
index 31c7850..d335baa 100644
--- a/lambda/requirements.txt
+++ b/lambda/requirements.txt
@@ -6,9 +6,9 @@ attrs==26.1.0 \
     --hash=sha256:c647aa4a12dfbad9333ca4e71fe62ddc36f4e63b2d260a37a8b83d2f043ac309 \
     --hash=sha256:d03ceb89cb322a8fd706d4fb91940737b6642aa36998fe130a9bc96c985eff32
     # via aws-encryption-sdk
-aws-encryption-sdk==4.0.6 \
-    --hash=sha256:35f62f775a8d4a6cb677a4a8927bb19acb3da35308405213f668396ee6298ad4 \
-    --hash=sha256:ec03bfa2df64ef21417bd6ff749bb63e84149586a4f7fbe528ec6b443326ea9e
+aws-encryption-sdk==4.0.7 \
+    --hash=sha256:3fa7d2e799f34e841e31aed3d725054bdcdda7b1578066d0a9b7c65bd192e594 \
+    --hash=sha256:5cf36bd8ecfa35cc87dfaba91910bd999bb211588172c3fcc8273f9cb54cf776
     # via aws-lambda-powertools
 aws-lambda-powertools==3.31.0 \
     --hash=sha256:65f81f1c81e536fb04c20885b7bcd468d5cd232b813c11b6a1634b7d03bd3c8c \
@@ -17,13 +17,13 @@ aws-xray-sdk==2.15.0 \
     --hash=sha256:422d62ad7d52e373eebb90b642eb1bb24657afe03b22a8df4a8b2e5108e278a3 \
     --hash=sha256:794381b96e835314345068ae1dd3b9120bd8b4e21295066c37e8814dbb341365
     # via aws-lambda-powertools
-boto3==1.43.41 \
-    --hash=sha256:0f56811f13677bfb4542daa0cce8532c95d9afd27b4ba7b681af36a0568624ad \
-    --hash=sha256:f48f862d2720ea9203ed2d842d436b8eb2d459ea31654a7ad7c0756fdf36c6b2
+boto3==1.43.92 \
+    --hash=sha256:30a1ff4bb729831c4890e0a0d121f9d43f066de724c5916e358c9f68f94749dd \
+    --hash=sha256:aee16b1ad54caf6e7b8f48f2682d18b03a2feefaf7afaf56fed6204016fa687d
     # via aws-encryption-sdk
-botocore==1.43.41 \
-    --hash=sha256:0cc6e79b30a2a98374f16a31cd9c7a9106a51b60650bd8c34cc8223f58ae6b8d \
-    --hash=sha256:27627d79af0df7dcb7ecf78d8d3d1310da09a5e9460be30bf759f1c2ed095ee8
+botocore==1.43.92 \
+    --hash=sha256:a5efebb7d8fd9e7a47a1ac3138688dae4234fcb2f5355c51f7c7aced63ef6df8 \
+    --hash=sha256:a6f003615a3b6059628146e4a1d13bc132f7bc8f415c469a63d1c616bccee18f
     # via
     #   aws-xray-sdk
     #   boto3
@@ -114,9 +114,9 @@ pycparser==3.0 ; implementation_name != 'PyPy' and platform_python_implementatio
     --hash=sha256:600f49d217304a5902ac3c37e1281c9fe94e4d0489de643a9504c5cdfdfc6b29 \
     --hash=sha256:b727414169a36b7d524c1c3e31839a521725078d7b2ff038656844266160a992
     # via cffi
-pydantic==2.13.4 \
-    --hash=sha256:45a282cde31d808236fd7ea9d919b128653c8b38b393d1c4ab335c62924d9aba \
-    --hash=sha256:c40756b57adaa8b1efeeced5c196f3f3b7c435f90e84ea7f443901bec8099ef6
+pydantic==2.13.5 \
+    --hash=sha256:346a034f080da3755d8e9cb5e00e8b07de1d39e4f6e2c87d8ab7cafa0b269a73 \
+    --hash=sha256:51a9c5f7b2f8e636f04c6cada605d9b6a3bf1348fdf945a3d8869b19bba0ee08
     # via
     #   aws-lambda-powertools
     #   pydantic-settings
@@ -161,13 +161,13 @@ python-dateutil==2.9.0.post0 \
     --hash=sha256:37dd54208da7e1cd875388217d5e00ebd4179249f90fb72437e91a35459a0ad3 \
     --hash=sha256:a8b2bc7bffae282281c8140a97d3aa9c14da0b136dfe83f850eea9a5f7470427
     # via botocore
-python-dotenv==1.2.2 \
-    --hash=sha256:1d8214789a24de455a8b8bd8ae6fe3c6b69a5e3d64aa8a8e5d68e694bbcb285a \
-    --hash=sha256:2c371a91fbd7ba082c2c1dc1f8bf89ca22564a087c2c287cd9b662adde799cf3
+python-dotenv==1.2.3 \
+    --hash=sha256:904552145e8bfed22162c09dab1c2b9b54fefa7b23ba780f4f26ca0316b0f0d9 \
+    --hash=sha256:a20a594dabeaa385725aa239d5244871c143ecb356add8a20fcf23773a6c3a35
     # via pydantic-settings
-s3transfer==0.19.0 \
-    --hash=sha256:777cc2415536f1debadb5c2ef7779275d0fc0fe0e042411cdd6caebeb2685262 \
-    --hash=sha256:ce436931687addc4c1712d52d40b32f53e88315723f107ffa20ba82b05a0f685
+s3transfer==0.19.2 \
+    --hash=sha256:ba0309fd86be3c27dbf78cdd813c13c5e1df16e5874b99d2535ebbdfb9892993 \
+    --hash=sha256:d8168eccca828cbb2cd573675333f3bddd254313a9c42494b84c76b539e8ba25
     # via boto3
 six==1.17.0 \
     --hash=sha256:4721f391ed90541fddacab5acf947aa0d3dc7d27b2e1e8eda2be8970586c3274 \
@@ -181,9 +181,9 @@ typing-extensions==4.16.0 \
     #   pydantic
     #   pydantic-core
     #   typing-inspection
-typing-inspection==0.4.2 \
-    --hash=sha256:4ed1cacbdc298c220f1bd249ed5287caa16f34d44ef4e9c3d0cbad5b521545e7 \
-    --hash=sha256:ba561c48a67c5958007083d386c3295464928b01faa735ab8547c5692e87f464
+typing-inspection==0.4.4 \
+    --hash=sha256:547274fa6b0a561ccf549cc9524b999a578e737d015d8709d021f9d0d13bea47 \
+    --hash=sha256:65b8397ba37ccbce054456aaccddfc91e6e3083c92824df348d96ca832f3f147
     # via
     #   pydantic
     #   pydantic-settings
diff --git a/pyproject.toml b/pyproject.toml
index 2934823..08d04f7 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -31,7 +31,7 @@ Issues = "https://github.com/timpugh/lambda-powertools-reference/issues"
 lambda = [
     "aws-lambda-powertools[all]==3.31.0",
     "aws-xray-sdk==2.15.0",
-    "boto3==1.43.41",
+    "boto3==1.43.92",
 ]
 
 # CDK infrastructure — used by `app.py`, `infrastructure/`, and the CDK stack
@@ -42,7 +42,7 @@ cdk = [
     "constructs==10.6.0",
     "aws-cdk-aws-lambda-python-alpha==2.261.0a0",
     "cdk-monitoring-constructs==10.1.0",
-    "cdk-nag==3.0.1",
+    "cdk-nag==3.0.2",
 ]
 
 # Test runner — environment-agnostic; pairs with either `lambda` (unit tests,
@@ -71,20 +71,20 @@ lint = [
     "xenon==0.9.3",
     "mypy==2.1.0",
     "ruff==0.15.20",
-    "pylint==4.0.6",
+    "pylint==4.0.8",
     "bandit==1.9.4",
     "pip-audit==2.10.1",
-    "pre-commit==4.6.0",
-    "boto3-stubs==1.43.41",
-    "pydantic==2.13.4",
+    "pre-commit==4.6.2",
+    "boto3-stubs==1.43.92",
+    "pydantic==2.13.5",
 ]
 
 # Documentation build — used only by `make docs`. The Zensical static site
 # generator is pre-1.0, so versions are pinned exactly.
 docs = [
-    "zensical==0.0.47",
-    "mkdocstrings==1.0.4",
-    "mkdocstrings-python==2.0.5",
+    "zensical==0.0.60",
+    "mkdocstrings==1.0.6",
+    "mkdocstrings-python==2.0.8",
 ]
 
 # =============================================================================