diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
index 86cf3651..d811de9f 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -25,7 +25,7 @@ jobs:
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@9e0d7b8d25671d64c341c19c0152d693099fb5ba # v4.35.5
+      uses: github/codeql-action/init@99df26d4f13ea111d4ec1a7dddef6063f76b97e9 # v4.37.0
       with:
         languages: ${{ matrix.language }}
 
diff --git a/requirements/base.txt b/requirements/base.txt
index 756d2180..cd07c760 100644
--- a/requirements/base.txt
+++ b/requirements/base.txt
@@ -6,7 +6,7 @@
 #
 annotated-types==0.7.0
     # via pydantic
-asgiref==3.11.1
+asgiref==3.12.1
     # via
     #   django
     #   django-cors-headers
diff --git a/requirements/ci.txt b/requirements/ci.txt
index 1e94b7aa..35be3344 100644
--- a/requirements/ci.txt
+++ b/requirements/ci.txt
@@ -10,7 +10,7 @@ colorama==0.4.6
     # via tox
 distlib==0.4.3
     # via virtualenv
-filelock==3.29.7
+filelock==3.31.0
     # via
     #   python-discovery
     #   tox
@@ -19,7 +19,7 @@ packaging==26.2
     # via
     #   pyproject-api
     #   tox
-platformdirs==4.10.0
+platformdirs==4.10.1
     # via
     #   python-discovery
     #   tox
@@ -34,7 +34,7 @@ python-discovery==1.4.4
     #   virtualenv
 tomli-w==1.2.0
     # via tox
-tox==4.56.4
+tox==4.57.0
     # via -r requirements/ci.in
 virtualenv==21.6.1
     # via tox
diff --git a/requirements/common_constraints.txt b/requirements/common_constraints.txt
index c84d6c06..734b7a6e 100644
--- a/requirements/common_constraints.txt
+++ b/requirements/common_constraints.txt
@@ -21,5 +21,5 @@ elasticsearch<7.14.0
 # 2026-07-06: Constrain social-auth-* packages to the latest version compatible with
 # edx-drf-extensions<=10.6.0. (Newer versions require a POST instead of a GET.)
 # Tracking issue: https://github.com/openedx/edx-drf-extensions/issues/561
-social-auth-app-django>=5.9.0,<6.0.0
-social-auth-core>=4.9.1,<5.0.0
+social-auth-app-django<6.0.0
+social-auth-core<5.0.0
diff --git a/requirements/pip-tools.txt b/requirements/pip-tools.txt
index 1c1849cc..20aa67f1 100644
--- a/requirements/pip-tools.txt
+++ b/requirements/pip-tools.txt
@@ -4,7 +4,7 @@
 #
 #    make upgrade
 #
-build==1.5.1
+build==1.5.0
     # via pip-tools
 click==8.4.2
     # via pip-tools
@@ -12,7 +12,7 @@ packaging==26.2
     # via
     #   build
     #   wheel
-pip-tools==7.5.3
+pip-tools==7.6.0
     # via -r requirements/pip-tools.in
 pyproject-hooks==1.2.0
     # via
diff --git a/requirements/quality.txt b/requirements/quality.txt
index eec8ca0d..b6107db6 100644
--- a/requirements/quality.txt
+++ b/requirements/quality.txt
@@ -9,7 +9,7 @@ annotated-types==0.7.0
     #   -r requirements/base.txt
     #   -r requirements/test.txt
     #   pydantic
-asgiref==3.11.1
+asgiref==3.12.1
     # via
     #   -r requirements/base.txt
     #   -r requirements/test.txt
@@ -75,7 +75,7 @@ colorama==0.4.6
     # via
     #   -r requirements/test.txt
     #   tox
-coverage[toml]==7.15.1
+coverage[toml]==7.15.2
     # via
     #   -r requirements/test.txt
     #   pytest-cov
@@ -197,11 +197,11 @@ elasticsearch-dsl==7.4.1
     #   django-elasticsearch-dsl-drf
 factory-boy==3.3.3
     # via -r requirements/test.txt
-faker==40.28.1
+faker==40.31.0
     # via
     #   -r requirements/test.txt
     #   factory-boy
-filelock==3.29.7
+filelock==3.31.0
     # via
     #   -r requirements/test.txt
     #   python-discovery
@@ -282,7 +282,7 @@ path-py==12.5.0
     #   -r requirements/test.txt
 pep8==1.7.1
     # via -r requirements/test.txt
-platformdirs==4.10.0
+platformdirs==4.10.1
     # via
     #   -r requirements/test.txt
     #   pylint
@@ -442,12 +442,12 @@ tomli-w==1.2.0
     # via
     #   -r requirements/test.txt
     #   tox
-tomlkit==0.15.0
+tomlkit==0.15.1
     # via
     #   -r requirements/test.txt
     #   edx-lint
     #   pylint
-tox==4.56.4
+tox==4.57.0
     # via -r requirements/test.txt
 typing-extensions==4.16.0
     # via
diff --git a/requirements/test.txt b/requirements/test.txt
index d23bb821..dd01feb0 100644
--- a/requirements/test.txt
+++ b/requirements/test.txt
@@ -8,7 +8,7 @@ annotated-types==0.7.0
     # via
     #   -r requirements/base.txt
     #   pydantic
-asgiref==3.11.1
+asgiref==3.12.1
     # via
     #   -r requirements/base.txt
     #   django
@@ -53,7 +53,7 @@ code-annotations==3.0.0
     # via -r requirements/test.in
 colorama==0.4.6
     # via tox
-coverage[toml]==7.15.1
+coverage[toml]==7.15.2
     # via
     #   -r requirements/test.in
     #   pytest-cov
@@ -145,9 +145,9 @@ elasticsearch-dsl==7.4.1
     #   django-elasticsearch-dsl-drf
 factory-boy==3.3.3
     # via -r requirements/test.in
-faker==40.28.1
+faker==40.31.0
     # via factory-boy
-filelock==3.29.7
+filelock==3.31.0
     # via
     #   python-discovery
     #   tox
@@ -204,7 +204,7 @@ path-py==12.5.0
     # via -r requirements/base.txt
 pep8==1.7.1
     # via -r requirements/test.in
-platformdirs==4.10.0
+platformdirs==4.10.1
     # via
     #   pylint
     #   python-discovery
@@ -319,9 +319,9 @@ text-unidecode==1.3
     # via python-slugify
 tomli-w==1.2.0
     # via tox
-tomlkit==0.15.0
+tomlkit==0.15.1
     # via pylint
-tox==4.56.4
+tox==4.57.0
     # via -r requirements/test.in
 typing-extensions==4.16.0
     # via