diff --git a/action-constraints.txt b/action-constraints.txt
index 1cf56c8..4057d3f 100644
--- a/action-constraints.txt
+++ b/action-constraints.txt
@@ -18,9 +18,9 @@ azure-keyvault-keys==4.9.0
     # via securesystemslib
 betterproto==2.0.0b6
     # via sigstore-protobuf-specs
-boto3==1.35.10
+boto3==1.35.14
     # via securesystemslib
-botocore==1.35.10
+botocore==1.35.14
     # via
     #   boto3
     #   s3transfer
@@ -29,7 +29,7 @@ cachetools==5.5.0
     # via google-auth
 certifi==2024.8.30
     # via requests
-cffi==1.17.0
+cffi==1.17.1
     # via
     #   cryptography
     #   pynacl
@@ -37,7 +37,7 @@ charset-normalizer==3.3.2
     # via requests
 click==8.1.7
     # via tuf-on-ci (repo/pyproject.toml)
-cryptography==43.0.0
+cryptography==43.0.1
     # via
     #   azure-identity
     #   azure-keyvault-keys
@@ -97,7 +97,7 @@ markdown-it-py==3.0.0
     # via rich
 mdurl==0.1.2
     # via markdown-it-py
-msal==1.30.0
+msal==1.31.0
     # via
     #   azure-identity
     #   msal-extensions
@@ -127,12 +127,12 @@ pyasn1-modules==0.4.0
     # via google-auth
 pycparser==2.22
     # via cffi
-pydantic==2.8.2
+pydantic==2.9.1
     # via
     #   id
     #   sigstore
     #   sigstore-rekor-types
-pydantic-core==2.20.1
+pydantic-core==2.23.3
     # via pydantic
 pygments==2.18.0
     # via rich