diff --git a/batch/pinned-requirements.txt b/batch/pinned-requirements.txt
index 68829fd3d2c..11a6bc56971 100644
--- a/batch/pinned-requirements.txt
+++ b/batch/pinned-requirements.txt
@@ -34,7 +34,7 @@ attrs==23.1.0
     #   -c hail/batch/../hail/python/pinned-requirements.txt
     #   -c hail/batch/../web_common/pinned-requirements.txt
     #   aiohttp
-charset-normalizer==3.2.0
+charset-normalizer==3.3.0
     # via
     #   -c hail/batch/../gear/pinned-requirements.txt
     #   -c hail/batch/../hail/python/dev/pinned-requirements.txt
@@ -69,7 +69,7 @@ numpy==1.26.0
     #   -c hail/batch/../hail/python/dev/pinned-requirements.txt
     #   -c hail/batch/../hail/python/pinned-requirements.txt
     #   pandas
-packaging==23.1
+packaging==23.2
     # via
     #   -c hail/batch/../hail/python/dev/pinned-requirements.txt
     #   -c hail/batch/../hail/python/pinned-requirements.txt
diff --git a/ci/pinned-requirements.txt b/ci/pinned-requirements.txt
index 74bf754507e..3b7436d2813 100644
--- a/ci/pinned-requirements.txt
+++ b/ci/pinned-requirements.txt
@@ -10,12 +10,12 @@ certifi==2023.7.22
     #   -c hail/ci/../hail/python/dev/pinned-requirements.txt
     #   -c hail/ci/../hail/python/pinned-requirements.txt
     #   requests
-cffi==1.15.1
+cffi==1.16.0
     # via
     #   -c hail/ci/../hail/python/dev/pinned-requirements.txt
     #   -c hail/ci/../hail/python/pinned-requirements.txt
     #   cryptography
-charset-normalizer==3.2.0
+charset-normalizer==3.3.0
     # via
     #   -c hail/ci/../gear/pinned-requirements.txt
     #   -c hail/ci/../hail/python/dev/pinned-requirements.txt
@@ -71,7 +71,7 @@ uritemplate==4.1.1
     # via
     #   -c hail/ci/../gear/pinned-requirements.txt
     #   gidgethub
-urllib3==1.26.16
+urllib3==1.26.17
     # via
     #   -c hail/ci/../gear/pinned-requirements.txt
     #   -c hail/ci/../hail/python/dev/pinned-requirements.txt
diff --git a/gear/pinned-requirements.txt b/gear/pinned-requirements.txt
index 21ed165739a..6e503735561 100644
--- a/gear/pinned-requirements.txt
+++ b/gear/pinned-requirements.txt
@@ -50,7 +50,7 @@ certifi==2023.7.22
     #   -c hail/gear/../hail/python/pinned-requirements.txt
     #   kubernetes-asyncio
     #   requests
-charset-normalizer==3.2.0
+charset-normalizer==3.3.0
     # via
     #   -c hail/gear/../hail/python/dev/pinned-requirements.txt
     #   -c hail/gear/../hail/python/hailtop/pinned-requirements.txt
@@ -71,9 +71,9 @@ frozenlist==1.4.0
     #   aiosignal
 google-api-core==2.12.0
     # via google-api-python-client
-google-api-python-client==2.101.0
+google-api-python-client==2.102.0
     # via google-cloud-profiler
-google-auth==2.23.0
+google-auth==2.23.2
     # via
     #   -c hail/gear/../hail/python/hailtop/pinned-requirements.txt
     #   -c hail/gear/../hail/python/pinned-requirements.txt
@@ -213,15 +213,14 @@ typing-extensions==4.8.0
     #   janus
 uritemplate==4.1.1
     # via google-api-python-client
-urllib3==1.26.16
+urllib3==1.26.17
     # via
     #   -c hail/gear/../hail/python/dev/pinned-requirements.txt
     #   -c hail/gear/../hail/python/hailtop/pinned-requirements.txt
     #   -c hail/gear/../hail/python/pinned-requirements.txt
-    #   google-auth
     #   kubernetes-asyncio
     #   requests
-wcwidth==0.2.6
+wcwidth==0.2.8
     # via
     #   -c hail/gear/../hail/python/dev/pinned-requirements.txt
     #   prompt-toolkit
diff --git a/hail/python/dev/pinned-requirements.txt b/hail/python/dev/pinned-requirements.txt
index 3e2939b288f..d2ed4d8fe71 100644
--- a/hail/python/dev/pinned-requirements.txt
+++ b/hail/python/dev/pinned-requirements.txt
@@ -12,7 +12,7 @@ argon2-cffi==23.1.0
     # via jupyter-server
 argon2-cffi-bindings==21.2.0
     # via argon2-cffi
-arrow==1.2.3
+arrow==1.3.0
     # via isoduration
 astroid==2.15.8
     # via pylint
@@ -26,7 +26,7 @@ attrs==23.1.0
     #   curlylint
     #   jsonschema
     #   referencing
-babel==2.12.1
+babel==2.13.0
     # via
     #   jupyterlab-server
     #   sphinx
@@ -42,13 +42,13 @@ certifi==2023.7.22
     # via
     #   -c hail/hail/python/dev/../pinned-requirements.txt
     #   requests
-cffi==1.15.1
+cffi==1.16.0
     # via
     #   -c hail/hail/python/dev/../pinned-requirements.txt
     #   argon2-cffi-bindings
 cfgv==3.4.0
     # via pre-commit
-charset-normalizer==3.2.0
+charset-normalizer==3.3.0
     # via
     #   -c hail/hail/python/dev/../pinned-requirements.txt
     #   requests
@@ -68,7 +68,7 @@ contourpy==1.1.1
     #   matplotlib
 curlylint==0.13.1
     # via -r hail/hail/python/dev/requirements.txt
-cycler==0.11.0
+cycler==0.12.0
     # via matplotlib
 debugpy==1.8.0
     # via ipykernel
@@ -96,19 +96,19 @@ exceptiongroup==1.1.3
     #   pytest
 execnet==2.0.2
     # via pytest-xdist
-executing==1.2.0
+executing==2.0.0
     # via stack-data
-fastjsonschema==2.18.0
+fastjsonschema==2.18.1
     # via nbformat
 filelock==3.12.4
     # via virtualenv
-fonttools==4.42.1
+fonttools==4.43.0
     # via matplotlib
 fqdn==1.5.1
     # via jsonschema
 fswatch==0.1.1
     # via -r hail/hail/python/dev/requirements.txt
-identify==2.5.29
+identify==2.5.30
     # via pre-commit
 idna==3.4
     # via
@@ -136,7 +136,7 @@ ipykernel==6.25.2
     #   jupyter-console
     #   jupyterlab
     #   qtconsole
-ipython==8.15.0
+ipython==8.16.1
     # via
     #   ipykernel
     #   ipywidgets
@@ -149,7 +149,7 @@ isoduration==20.11.0
     # via jsonschema
 isort==5.12.0
     # via pylint
-jedi==0.19.0
+jedi==0.19.1
     # via ipython
 jinja2==3.1.2
     # via
@@ -182,7 +182,7 @@ jupyter-client==8.3.1
     #   qtconsole
 jupyter-console==6.6.3
     # via jupyter
-jupyter-core==5.3.1
+jupyter-core==5.3.2
     # via
     #   ipykernel
     #   jupyter-client
@@ -233,13 +233,13 @@ matplotlib-inline==0.1.6
     #   ipython
 mccabe==0.7.0
     # via pylint
-mistune==3.0.1
+mistune==3.0.2
     # via nbconvert
 mypy-extensions==1.0.0
     # via black
 nbclient==0.8.0
     # via nbconvert
-nbconvert==7.8.0
+nbconvert==7.9.2
     # via
     #   jupyter
     #   jupyter-server
@@ -273,7 +273,7 @@ numpy==1.26.0
     #   matplotlib
 overrides==7.4.0
     # via jupyter-server
-packaging==23.1
+packaging==23.2
     # via
     #   -c hail/hail/python/dev/../pinned-requirements.txt
     #   ipykernel
@@ -303,8 +303,9 @@ pickleshare==0.7.5
 pillow==10.0.1
     # via
     #   -c hail/hail/python/dev/../pinned-requirements.txt
+    #   -r hail/hail/python/dev/requirements.txt
     #   matplotlib
-platformdirs==3.10.0
+platformdirs==3.11.0
     # via
     #   black
     #   jupyter-core
@@ -342,11 +343,11 @@ pygments==2.16.1
     #   nbconvert
     #   qtconsole
     #   sphinx
-pylint==2.17.6
+pylint==2.17.7
     # via -r hail/hail/python/dev/requirements.txt
 pyparsing==3.1.1
     # via matplotlib
-pyright==1.1.327
+pyright==1.1.329
     # via -r hail/hail/python/dev/requirements.txt
 pytest==7.4.2
     # via
@@ -377,6 +378,7 @@ pytest-xdist==2.5.0
 python-dateutil==2.8.2
     # via
     #   -c hail/hail/python/dev/../pinned-requirements.txt
+    #   arrow
     #   jupyter-client
     #   matplotlib
 python-json-logger==2.0.7
@@ -417,11 +419,11 @@ rfc3986-validator==0.1.1
     # via
     #   jsonschema
     #   jupyter-events
-rpds-py==0.10.3
+rpds-py==0.10.4
     # via
     #   jsonschema
     #   referencing
-ruff==0.0.291
+ruff==0.0.292
     # via -r hail/hail/python/dev/requirements.txt
 send2trash==1.8.2
     # via jupyter-server
@@ -471,7 +473,7 @@ sphinxcontrib-qthelp==1.0.6
     # via sphinx
 sphinxcontrib-serializinghtml==1.1.9
     # via sphinx
-stack-data==0.6.2
+stack-data==0.6.3
     # via ipython
 terminado==0.17.1
     # via
@@ -498,7 +500,7 @@ tornado==6.3.3
     #   jupyterlab
     #   notebook
     #   terminado
-traitlets==5.10.1
+traitlets==5.11.2
     # via
     #   comm
     #   ipykernel
@@ -525,10 +527,12 @@ types-deprecated==1.2.9.3
 types-pymysql==1.1.0.1
     # via -r hail/hail/python/dev/requirements.txt
 types-python-dateutil==2.8.19.14
-    # via -r hail/hail/python/dev/requirements.txt
+    # via
+    #   -r hail/hail/python/dev/requirements.txt
+    #   arrow
 types-pyyaml==6.0.12.12
     # via -r hail/hail/python/dev/requirements.txt
-types-requests==2.31.0.5
+types-requests==2.31.0.6
     # via -r hail/hail/python/dev/requirements.txt
 types-setuptools==68.2.0.0
     # via -r hail/hail/python/dev/requirements.txt
@@ -550,13 +554,13 @@ typing-extensions==4.8.0
     #   pylint
 uri-template==1.3.0
     # via jsonschema
-urllib3==1.26.16
+urllib3==1.26.17
     # via
     #   -c hail/hail/python/dev/../pinned-requirements.txt
     #   requests
 virtualenv==20.24.5
     # via pre-commit
-wcwidth==0.2.6
+wcwidth==0.2.8
     # via prompt-toolkit
 webcolors==1.13
     # via jsonschema
diff --git a/hail/python/dev/requirements.txt b/hail/python/dev/requirements.txt
index b9c0ad39a39..568f555f856 100644
--- a/hail/python/dev/requirements.txt
+++ b/hail/python/dev/requirements.txt
@@ -30,7 +30,8 @@ types-PyYAML
 types-chardet
 types-decorator
 types-python-dateutil
-types-requests
+# https://github.com/python/typeshed/blob/main/stubs/requests/METADATA.toml#L5-L10
+types-requests<2.31.0.7
 types-setuptools
 types-six
 types-tabulate
diff --git a/hail/python/hailtop/pinned-requirements.txt b/hail/python/hailtop/pinned-requirements.txt
index 4da6817fbdc..014c25b01ff 100644
--- a/hail/python/hailtop/pinned-requirements.txt
+++ b/hail/python/hailtop/pinned-requirements.txt
@@ -30,9 +30,9 @@ azure-mgmt-storage==20.1.0
     # via -r hail/hail/python/hailtop/requirements.txt
 azure-storage-blob==12.18.2
     # via -r hail/hail/python/hailtop/requirements.txt
-boto3==1.28.54
+boto3==1.28.61
     # via -r hail/hail/python/hailtop/requirements.txt
-botocore==1.31.54
+botocore==1.31.61
     # via
     #   -r hail/hail/python/hailtop/requirements.txt
     #   boto3
@@ -43,11 +43,11 @@ certifi==2023.7.22
     # via
     #   msrest
     #   requests
-cffi==1.15.1
+cffi==1.16.0
     # via
     #   cryptography
     #   pycares
-charset-normalizer==3.2.0
+charset-normalizer==3.3.0
     # via
     #   aiohttp
     #   requests
@@ -68,7 +68,7 @@ frozenlist==1.4.0
     #   -r hail/hail/python/hailtop/requirements.txt
     #   aiohttp
     #   aiosignal
-google-auth==2.23.0
+google-auth==2.23.2
     # via
     #   -r hail/hail/python/hailtop/requirements.txt
     #   google-auth-oauthlib
@@ -92,7 +92,7 @@ jmespath==1.0.1
     #   botocore
 jproperties==2.1.1
     # via -r hail/hail/python/hailtop/requirements.txt
-msal==1.24.0
+msal==1.24.1
     # via
     #   azure-identity
     #   msal-extensions
@@ -148,7 +148,7 @@ rich==12.6.0
     # via -r hail/hail/python/hailtop/requirements.txt
 rsa==4.9
     # via google-auth
-s3transfer==0.6.2
+s3transfer==0.7.0
     # via boto3
 six==1.16.0
     # via
@@ -168,10 +168,9 @@ typing-extensions==4.8.0
     #   azure-storage-blob
     #   janus
     #   typer
-urllib3==1.26.16
+urllib3==1.26.17
     # via
     #   botocore
-    #   google-auth
     #   requests
 uvloop==0.17.0 ; sys_platform != "win32"
     # via -r hail/hail/python/hailtop/requirements.txt
diff --git a/hail/python/pinned-requirements.txt b/hail/python/pinned-requirements.txt
index 9b9928e0883..f09ac68fd77 100644
--- a/hail/python/pinned-requirements.txt
+++ b/hail/python/pinned-requirements.txt
@@ -57,11 +57,11 @@ azure-storage-blob==12.18.2
     #   -r hail/hail/python/hailtop/requirements.txt
 bokeh==3.2.2
     # via -r hail/hail/python/requirements.txt
-boto3==1.28.54
+boto3==1.28.61
     # via
     #   -c hail/hail/python/hailtop/pinned-requirements.txt
     #   -r hail/hail/python/hailtop/requirements.txt
-botocore==1.31.54
+botocore==1.31.61
     # via
     #   -c hail/hail/python/hailtop/pinned-requirements.txt
     #   -r hail/hail/python/hailtop/requirements.txt
@@ -76,12 +76,12 @@ certifi==2023.7.22
     #   -c hail/hail/python/hailtop/pinned-requirements.txt
     #   msrest
     #   requests
-cffi==1.15.1
+cffi==1.16.0
     # via
     #   -c hail/hail/python/hailtop/pinned-requirements.txt
     #   cryptography
     #   pycares
-charset-normalizer==3.2.0
+charset-normalizer==3.3.0
     # via
     #   -c hail/hail/python/hailtop/pinned-requirements.txt
     #   aiohttp
@@ -118,7 +118,7 @@ frozenlist==1.4.0
     #   -r hail/hail/python/requirements.txt
     #   aiohttp
     #   aiosignal
-google-auth==2.23.0
+google-auth==2.23.2
     # via
     #   -c hail/hail/python/hailtop/pinned-requirements.txt
     #   -r hail/hail/python/hailtop/requirements.txt
@@ -158,7 +158,7 @@ jproperties==2.1.1
     #   -r hail/hail/python/hailtop/requirements.txt
 markupsafe==2.1.3
     # via jinja2
-msal==1.24.0
+msal==1.24.1
     # via
     #   -c hail/hail/python/hailtop/pinned-requirements.txt
     #   azure-identity
@@ -195,7 +195,7 @@ orjson==3.9.7
     # via
     #   -c hail/hail/python/hailtop/pinned-requirements.txt
     #   -r hail/hail/python/hailtop/requirements.txt
-packaging==23.1
+packaging==23.2
     # via
     #   bokeh
     #   plotly
@@ -263,7 +263,7 @@ pyyaml==6.0.1
     #   -c hail/hail/python/hailtop/pinned-requirements.txt
     #   -r hail/hail/python/hailtop/requirements.txt
     #   bokeh
-regex==2023.8.8
+regex==2023.10.3
     # via parsimonious
 requests==2.31.0
     # via
@@ -286,11 +286,11 @@ rsa==4.9
     # via
     #   -c hail/hail/python/hailtop/pinned-requirements.txt
     #   google-auth
-s3transfer==0.6.2
+s3transfer==0.7.0
     # via
     #   -c hail/hail/python/hailtop/pinned-requirements.txt
     #   boto3
-scipy==1.11.2
+scipy==1.11.3
     # via -r hail/hail/python/requirements.txt
 six==1.16.0
     # via
@@ -324,11 +324,10 @@ typing-extensions==4.8.0
     #   typer
 tzdata==2023.3
     # via pandas
-urllib3==1.26.16
+urllib3==1.26.17
     # via
     #   -c hail/hail/python/hailtop/pinned-requirements.txt
     #   botocore
-    #   google-auth
     #   requests
 uvloop==0.17.0 ; sys_platform != "win32"
     # via
@@ -336,7 +335,7 @@ uvloop==0.17.0 ; sys_platform != "win32"
     #   -r hail/hail/python/hailtop/requirements.txt
 wrapt==1.15.0
     # via deprecated
-xyzservices==2023.7.0
+xyzservices==2023.10.0
     # via bokeh
 yarl==1.9.2
     # via
diff --git a/web_common/pinned-requirements.txt b/web_common/pinned-requirements.txt
index c09fd93d02c..95272285f70 100644
--- a/web_common/pinned-requirements.txt
+++ b/web_common/pinned-requirements.txt
@@ -27,7 +27,7 @@ attrs==23.1.0
     #   -c hail/web_common/../hail/python/dev/pinned-requirements.txt
     #   -c hail/web_common/../hail/python/pinned-requirements.txt
     #   aiohttp
-charset-normalizer==3.2.0
+charset-normalizer==3.3.0
     # via
     #   -c hail/web_common/../gear/pinned-requirements.txt
     #   -c hail/web_common/../hail/python/dev/pinned-requirements.txt