diff --git a/pyproject.toml b/pyproject.toml
index 6aa4b4af2..4e9f32677 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -129,7 +129,7 @@ dependencies = [
     "django-object-actions>=4.0.0",
     "dnspython>=2.5",
     "idna>=3.4",
-    "josepy>=1.13.0",
+    "josepy>=1.13.0,<2.0",
     "packaging",
     "pydantic>=2.6",
     "requests",
@@ -413,10 +413,14 @@ filterwarnings = [
     # acme==2.11.0; https://github.com/certbot/certbot/issues/8492
     #               https://github.com/certbot/certbot/issues/9828
     # josepy==1.14.0;
-    #   Both acme and josepy use pyOpenSSL extensively and there seem to be no plans to fix it.
+    #   Both acme and josepy use pyOpenSSL extensively.
     "ignore:X509Extension support in pyOpenSSL is deprecated",
     "ignore:CSR support in pyOpenSSL is deprecated.",
 
+    # josepy==1.15.0 emits this warning about a breaking change in 2.0. Can be removed once support for <2.0
+    # is dropped.
+    "ignore:The next major version of josepy will remove josepy.util.ComparableX509",
+
     # django-ninja==1.3.0; https://github.com/vitalik/django-ninja/issues/1093
     #   A left-over from the migration to Pydantic 2.0.
     "ignore:^Support for class-based `config` is deprecated, use ConfigDict instead.",
diff --git a/requirements-dev.txt b/requirements-dev.txt
index 02575efc8..48e8371c4 100644
--- a/requirements-dev.txt
+++ b/requirements-dev.txt
@@ -8,7 +8,7 @@ docker==7.1.0
 pip>=23
 
 tox>=4.18.0
-tox-uv==1.19.0
+tox-uv==1.20.1
 
 # pytest-xdist allows running tests in parallel ("pytest -n 3")
 pytest-xdist==3.6.1
diff --git a/requirements/requirements-dev-common.txt b/requirements/requirements-dev-common.txt
index dab3d20a5..97d3af586 100644
--- a/requirements/requirements-dev-common.txt
+++ b/requirements/requirements-dev-common.txt
@@ -8,7 +8,7 @@ django-test-migrations==1.4.0
 pytest==8.3.4
 pytest-cov==6.0.0
 pytest-django==4.9.0
-selenium==4.27.1
+selenium==4.28.1
 semantic-version==2.10.0
 tabulate==0.9.0
 termcolor==2.5.0
diff --git a/requirements/requirements-dist.txt b/requirements/requirements-dist.txt
index 9c9322941..f766b4aeb 100644
--- a/requirements/requirements-dist.txt
+++ b/requirements/requirements-dist.txt
@@ -2,7 +2,7 @@ build==1.2.2.post1
 # readme-renderer~=44.0 depends on a newer docutils version then supported by sphinx==7.2.6 (readme-renderer
 # is a dependency of twine).
 readme-renderer<44
-twine==6.0.1
+twine==6.1.0
 wheel==0.45.1
 # See pyproject.toml for reasoning for required minimum version
 setuptools>=68.1
diff --git a/requirements/requirements-lint.txt b/requirements/requirements-lint.txt
index 762d07da6..4bdd68d96 100644
--- a/requirements/requirements-lint.txt
+++ b/requirements/requirements-lint.txt
@@ -1,8 +1,8 @@
 -r requirements-dev-common.txt
 # Astroid 3.3.7 does not work, see: https://github.com/pylint-dev/astroid/issues/2662
 astroid>=3.3.6,!=3.3.7
-pre-commit==4.0.1
+pre-commit==4.1.0
 pylint-django==2.6.1
 pylint==3.3.3
-ruff==0.9.2
+ruff==0.9.3
 setuptools>=65
\ No newline at end of file
diff --git a/requirements/requirements-mypy.txt b/requirements/requirements-mypy.txt
index 4616b49b0..96563f058 100644
--- a/requirements/requirements-mypy.txt
+++ b/requirements/requirements-mypy.txt
@@ -7,7 +7,7 @@ types-freezegun==1.1.10
 types-jinja2==2.11.9
 types-mysqlclient==2.2.0.20241221
 types-pytz==2024.2.0.20241221
-types-psycopg2==2.9.21.20241019
+types-psycopg2==2.9.21.20250121
 types-pyOpenSSL==24.1.0.20240722
 types-pyRFC3339==2.0.1.20241107
 types-redis==4.6.0.20241004