diff --git a/lambda/requirements.txt b/lambda/requirements.txt
index 31c7850..9e1f647 100644
--- a/lambda/requirements.txt
+++ b/lambda/requirements.txt
@@ -17,13 +17,13 @@ aws-xray-sdk==2.15.0 \
     --hash=sha256:422d62ad7d52e373eebb90b642eb1bb24657afe03b22a8df4a8b2e5108e278a3 \
     --hash=sha256:794381b96e835314345068ae1dd3b9120bd8b4e21295066c37e8814dbb341365
     # via aws-lambda-powertools
-boto3==1.43.41 \
-    --hash=sha256:0f56811f13677bfb4542daa0cce8532c95d9afd27b4ba7b681af36a0568624ad \
-    --hash=sha256:f48f862d2720ea9203ed2d842d436b8eb2d459ea31654a7ad7c0756fdf36c6b2
+boto3==1.43.71 \
+    --hash=sha256:3bb46661dc33121e56e3706753069d18f8dbcb644599cf098206546338602e16 \
+    --hash=sha256:e3eddb6346ee23c895dd98e5c2cfc72cb5e5ed111aa6d4331f9e903a3e3bf4ee
     # via aws-encryption-sdk
-botocore==1.43.41 \
-    --hash=sha256:0cc6e79b30a2a98374f16a31cd9c7a9106a51b60650bd8c34cc8223f58ae6b8d \
-    --hash=sha256:27627d79af0df7dcb7ecf78d8d3d1310da09a5e9460be30bf759f1c2ed095ee8
+botocore==1.43.71 \
+    --hash=sha256:2cde7a55aaac86a2e9a3bcd2ce3fad1a31a4711749e10f350af231e55ccef7ed \
+    --hash=sha256:7bc3d5ddaca6f68e2eef707714264789048a6f496d375d976c560674f0cd1d1b
     # via
     #   aws-xray-sdk
     #   boto3
@@ -165,9 +165,9 @@ python-dotenv==1.2.2 \
     --hash=sha256:1d8214789a24de455a8b8bd8ae6fe3c6b69a5e3d64aa8a8e5d68e694bbcb285a \
     --hash=sha256:2c371a91fbd7ba082c2c1dc1f8bf89ca22564a087c2c287cd9b662adde799cf3
     # via pydantic-settings
-s3transfer==0.19.0 \
-    --hash=sha256:777cc2415536f1debadb5c2ef7779275d0fc0fe0e042411cdd6caebeb2685262 \
-    --hash=sha256:ce436931687addc4c1712d52d40b32f53e88315723f107ffa20ba82b05a0f685
+s3transfer==0.19.2 \
+    --hash=sha256:ba0309fd86be3c27dbf78cdd813c13c5e1df16e5874b99d2535ebbdfb9892993 \
+    --hash=sha256:d8168eccca828cbb2cd573675333f3bddd254313a9c42494b84c76b539e8ba25
     # via boto3
 six==1.17.0 \
     --hash=sha256:4721f391ed90541fddacab5acf947aa0d3dc7d27b2e1e8eda2be8970586c3274 \
@@ -181,9 +181,9 @@ typing-extensions==4.16.0 \
     #   pydantic
     #   pydantic-core
     #   typing-inspection
-typing-inspection==0.4.2 \
-    --hash=sha256:4ed1cacbdc298c220f1bd249ed5287caa16f34d44ef4e9c3d0cbad5b521545e7 \
-    --hash=sha256:ba561c48a67c5958007083d386c3295464928b01faa735ab8547c5692e87f464
+typing-inspection==0.4.4 \
+    --hash=sha256:547274fa6b0a561ccf549cc9524b999a578e737d015d8709d021f9d0d13bea47 \
+    --hash=sha256:65b8397ba37ccbce054456aaccddfc91e6e3083c92824df348d96ca832f3f147
     # via
     #   pydantic
     #   pydantic-settings
diff --git a/pyproject.toml b/pyproject.toml
index 2934823..a13efe7 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -31,7 +31,7 @@ Issues = "https://github.com/timpugh/lambda-powertools-reference/issues"
 lambda = [
     "aws-lambda-powertools[all]==3.31.0",
     "aws-xray-sdk==2.15.0",
-    "boto3==1.43.41",
+    "boto3==1.43.71",
 ]
 
 # CDK infrastructure — used by `app.py`, `infrastructure/`, and the CDK stack
@@ -42,7 +42,7 @@ cdk = [
     "constructs==10.6.0",
     "aws-cdk-aws-lambda-python-alpha==2.261.0a0",
     "cdk-monitoring-constructs==10.1.0",
-    "cdk-nag==3.0.1",
+    "cdk-nag==3.0.2",
 ]
 
 # Test runner — environment-agnostic; pairs with either `lambda` (unit tests,
@@ -71,19 +71,19 @@ lint = [
     "xenon==0.9.3",
     "mypy==2.1.0",
     "ruff==0.15.20",
-    "pylint==4.0.6",
+    "pylint==4.0.7",
     "bandit==1.9.4",
     "pip-audit==2.10.1",
-    "pre-commit==4.6.0",
-    "boto3-stubs==1.43.41",
+    "pre-commit==4.6.2",
+    "boto3-stubs==1.43.71",
     "pydantic==2.13.4",
 ]
 
 # Documentation build — used only by `make docs`. The Zensical static site
 # generator is pre-1.0, so versions are pinned exactly.
 docs = [
-    "zensical==0.0.47",
-    "mkdocstrings==1.0.4",
+    "zensical==0.0.54",
+    "mkdocstrings==1.0.6",
     "mkdocstrings-python==2.0.5",
 ]