📦📌 Bump the pinned dependency tree

requirements/runtime-prerequisites.txt

@@ -6,5 +6,5 @@
 #
 
 # The following packages are considered to be unsafe in a requirements file:
-pip==24.3.1
+pip==25.2
     # via -r runtime-prerequisites.in

requirements/runtime.in

@@ -13,8 +13,8 @@ id ~= 1.0
 requests
 
 # NOTE: Used to generate attestations.
-pypi-attestations ~= 0.0.26
-sigstore ~= 3.5.1
+pypi-attestations ~= 0.0.27
+sigstore ~= 3.6.5
 
 # NOTE: Used to detect the PyPI package name from the distribution files
 packaging

requirements/runtime.txt

@@ -8,27 +8,28 @@ annotated-types==0.7.0
     # via pydantic
 betterproto==2.0.0b6
     # via sigstore-protobuf-specs
-certifi==2024.12.14
+certifi==2025.8.3
     # via requests
 cffi==1.17.1
     # via cryptography
-charset-normalizer==3.4.1
+charset-normalizer==3.4.3
     # via requests
-cryptography==43.0.3
+cryptography==45.0.7
     # via
     #   pyopenssl
     #   pypi-attestations
+    #   rfc3161-client
     #   secretstorage
     #   sigstore
 dnspython==2.7.0
     # via email-validator
-docutils==0.21.2
+docutils==0.22
     # via readme-renderer
-email-validator==2.2.0
+email-validator==2.3.0
     # via pydantic
-grpclib==0.4.7
+grpclib==0.4.8
     # via betterproto
-h2==4.1.0
+h2==4.3.0
     # via grpclib
 hpack==4.1.0
     # via h2
@@ -47,7 +48,7 @@ jaraco-classes==3.4.0
     # via keyring
 jaraco-context==6.0.1
     # via keyring
-jaraco-functools==4.1.0
+jaraco-functools==4.3.0
     # via keyring
 jeepney==0.9.0
     # via
@@ -55,25 +56,25 @@ jeepney==0.9.0
     #   secretstorage
 keyring==25.6.0
     # via twine
-markdown-it-py==3.0.0
+markdown-it-py==4.0.0
     # via rich
 mdurl==0.1.2
     # via markdown-it-py
-more-itertools==10.6.0
+more-itertools==10.8.0
     # via
     #   jaraco-classes
     #   jaraco-functools
-multidict==6.1.0
+multidict==6.6.4
     # via grpclib
-nh3==0.2.20
+nh3==0.3.0
     # via readme-renderer
-packaging==24.2
+packaging==25.0
     # via
     #   -c runtime-constraints.in
     #   -r runtime.in
     #   pypi-attestations
     #   twine
-platformdirs==4.3.6
+platformdirs==4.4.0
     # via sigstore
 pyasn1==0.6.1
     # via
@@ -81,53 +82,54 @@ pyasn1==0.6.1
     #   sigstore
 pycparser==2.22
     # via cffi
-pydantic==2.10.6
+pydantic==2.11.7
     # via
     #   pypi-attestations
     #   sigstore
     #   sigstore-rekor-types
-pydantic-core==2.27.2
+pydantic-core==2.33.2
     # via pydantic
-pygments==2.19.1
+pygments==2.19.2
     # via
     #   readme-renderer
     #   rich
 pyjwt==2.10.1
     # via sigstore
-pyopenssl==25.0.0
+pyopenssl==25.1.0
     # via sigstore
-pypi-attestations==0.0.26
+pypi-attestations==0.0.27
     # via -r runtime.in
 python-dateutil==2.9.0.post0
     # via betterproto
 readme-renderer==44.0
     # via twine
-requests==2.32.3
+requests==2.32.5
     # via
     #   -r runtime.in
     #   id
     #   pypi-attestations
     #   requests-toolbelt
     #   sigstore
-    #   tuf
     #   twine
 requests-toolbelt==1.0.0
     # via twine
+rfc3161-client==1.0.4
+    # via sigstore
 rfc3986==2.0.0
     # via
     #   pypi-attestations
     #   twine
 rfc8785==0.1.4
     # via sigstore
-rich==13.9.4
+rich==14.1.0
     # via
     #   sigstore
     #   twine
 secretstorage==3.3.3
     # via keyring
-securesystemslib==1.2.0
+securesystemslib==1.3.0
     # via tuf
-sigstore==3.5.3
+sigstore==3.6.5
     # via
     #   -r runtime.in
     #   pypi-attestations
@@ -135,19 +137,23 @@ sigstore-protobuf-specs==0.3.2
     # via
     #   pypi-attestations
     #   sigstore
-sigstore-rekor-types==0.0.13
+sigstore-rekor-types==0.0.18
     # via sigstore
 six==1.17.0
     # via python-dateutil
-tuf==5.1.0
+tuf==6.0.0
     # via sigstore
 twine==6.1.0
     # via -r runtime.in
-typing-extensions==4.12.2
+typing-extensions==4.15.0
     # via
     #   pydantic
     #   pydantic-core
-urllib3==2.3.0
+    #   typing-inspection
+typing-inspection==0.4.1
+    # via pydantic
+urllib3==2.5.0
     # via
     #   requests
+    #   tuf
     #   twine