diff --git a/requirements.txt b/requirements.txt
index f2c82d1c..b048ad11 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -1,23 +1,23 @@
 # deps, generated via pipdeptree --exclude setuptools,wheel,pipdeptree,pip -f | tr '[:upper:]' '[:lower:]'
 
 alembic==1.13.1
-  mako==1.3.6
+  mako==1.3.10
     markupsafe==3.0.2
   sqlalchemy==1.4.52
     greenlet==3.1.1
-  typing_extensions==4.12.2
+  typing_extensions==4.13.2
 async-timeout==4.0.3
 babel==2.12.1
 beaker==1.13.0
 celery==5.4.0
   billiard==4.2.1
-  click==8.1.7
+  click==8.1.8
   click-didyoumean==0.3.1
-    click==8.1.7
+    click==8.1.8
   click-plugins==1.1.1
-    click==8.1.7
+    click==8.1.8
   click-repl==0.3.0
-    click==8.1.7
+    click==8.1.8
     prompt_toolkit==3.0.48
       wcwidth==0.2.13
   kombu==5.4.2
@@ -26,7 +26,7 @@ celery==5.4.0
     tzdata==2024.2
     vine==5.1.0
   python-dateutil==2.9.0.post0
-    six==1.16.0
+    six==1.17.0
   tzdata==2024.2
   vine==5.1.0
 channelstream==0.7.1
@@ -64,10 +64,10 @@ channelstream==0.7.1
       zope.interface==7.2.0
     zope.deprecation==5.1.0
   python-dateutil==2.9.0.post0
-    six==1.16.0
+    six==1.17.0
   requests==2.32.3
-    certifi==2024.8.30
-    charset-normalizer==3.4.0
+    certifi==2025.1.31
+    charset-normalizer==3.4.1
     idna==3.10
     urllib3==1.26.20
   ws4py==0.5.1
@@ -86,7 +86,7 @@ dogpile.cache==1.3.4
   stevedore==5.1.0
     pbr==5.11.1
 formencode==2.1.0
-  six==1.16.0
+  six==1.17.0
 fsspec==2024.12.0
 gunicorn==23.0.0
   packaging==24.1
@@ -107,11 +107,11 @@ ipython==8.26.0
   pygments==2.18.0
   stack-data==0.6.3
     asttokens==2.4.1
-      six==1.16.0
+      six==1.17.0
     executing==2.0.1
     pure_eval==0.2.3
   traitlets==5.14.3
-  typing_extensions==4.12.2
+  typing_extensions==4.13.2
 markdown==3.4.3
 msgpack==1.1.0
 mysqlclient==2.1.1
@@ -119,7 +119,7 @@ nbconvert==7.7.3
   beautifulsoup4==4.12.3
     soupsieve==2.5
   bleach==6.1.0
-    six==1.16.0
+    six==1.17.0
     webencodings==0.5.1
   defusedxml==0.7.1
   jinja2==3.1.6
@@ -136,7 +136,7 @@ nbconvert==7.7.3
         platformdirs==3.10.0
         traitlets==5.14.3
       python-dateutil==2.9.0.post0
-        six==1.16.0
+        six==1.17.0
       pyzmq==26.2.0
       tornado==6.4.2
       traitlets==5.14.3
@@ -175,8 +175,8 @@ premailer==3.10.0
   cssutils==2.6.0
   lxml==5.3.0
   requests==2.32.3
-    certifi==2024.8.30
-    charset-normalizer==3.4.0
+    certifi==2025.1.31
+    charset-normalizer==3.4.1
     idna==3.10
     urllib3==1.26.20
 psutil==5.9.8
@@ -209,7 +209,7 @@ pyramid-mailer==0.15.1
   transaction==5.0.0
     zope.interface==7.2.0
 pyramid-mako==1.1.0
-  mako==1.3.6
+  mako==1.3.10
     markupsafe==3.0.2
   pyramid==2.0.2
     hupper==1.12
@@ -230,7 +230,7 @@ python-memcached==1.62
 python-pam==2.0.2
 python3-saml==1.16.0
   isodate==0.6.1
-    six==1.16.0
+    six==1.17.0
   lxml==5.3.0
   xmlsec==1.3.14
     lxml==5.3.0
@@ -240,7 +240,7 @@ redis==5.2.0
 regex==2022.10.31
 routes==2.5.1
   repoze.lru==0.7
-  six==1.16.0
+  six==1.17.0
 s3fs==2024.12.0
   aiobotocore==2.17.0
     aiohttp==3.11.11
@@ -259,12 +259,12 @@ s3fs==2024.12.0
     botocore==1.35.93
       jmespath==1.0.1
       python-dateutil==2.9.0.post0
-        six==1.16.0
+        six==1.17.0
       urllib3==1.26.20
     jmespath==1.0.1
     multidict==6.1.0
     python-dateutil==2.9.0.post0
-      six==1.16.0
+      six==1.17.0
     urllib3==1.26.20
     wrapt==1.17.0
   aiohttp==3.11.11
@@ -286,10 +286,10 @@ sshpubkeys==3.3.1
     cffi==1.17.1
       pycparser==2.22
   ecdsa==0.19.0
-    six==1.16.0
+    six==1.17.0
 sqlalchemy==1.4.52
   greenlet==3.1.1
-  typing_extensions==4.12.2
+  typing_extensions==4.13.2
 supervisor==4.2.5
 tzlocal==4.3
   pytz-deprecation-shim==0.1.0.post0
@@ -300,7 +300,7 @@ urlobject==2.4.3
 waitress==3.0.2
 webhelpers2==2.1
   markupsafe==3.0.2
-  six==1.16.0
+  six==1.17.0
 whoosh==2.7.4
 zope.cachedescriptors==5.1.0
 qrcode==7.4.2
diff --git a/requirements_rc_tools.txt b/requirements_rc_tools.txt
index 088bd984..23d46fb5 100644
--- a/requirements_rc_tools.txt
+++ b/requirements_rc_tools.txt
@@ -1,3 +1,3 @@
 ## rhodecode-tools, special case, use file://PATH.tar.gz#egg=rhodecode-tools==X.Y.Z, to test local version
-rhodecode-tools @ https://code.rhodecode.com/_file_store/download/0-51fb13c9-6175-480c-b9dc-630c7601d47c.1.0.tar.gz#egg=rhodecode-tools
-rhodecode-tools==4.1.0
+rhodecode-tools @ https://code.rhodecode.com/_file_store/download/0-c84a5d20-64c3-4ef8-9c83-37e2b2dbddd9.2.0.tar.gz#egg=rhodecode-tools
+rhodecode-tools==4.2.0
diff --git a/requirements_test.txt b/requirements_test.txt
index 99786ec0..190ec9ec 100644
--- a/requirements_test.txt
+++ b/requirements_test.txt
@@ -23,7 +23,7 @@ pytest-profiling==1.7.0
     iniconfig==2.0.0
     packaging==24.1
     pluggy==1.5.0
-  six==1.16.0
+  six==1.17.0
 pytest-rerunfailures==14.0
   packaging==24.1
   pytest==8.3.3