diff --git a/poetry.lock b/poetry.lock
index 281bcdc..222c8c0 100644
--- a/poetry.lock
+++ b/poetry.lock
@@ -8550,4 +8550,4 @@ testing = ["coverage[toml]", "zope.event", "zope.testing"]
 [metadata]
 lock-version = "2.1"
 python-versions = ">=3.12,<3.13"
-content-hash = "b76f3f97ff30f52dcdef9c46b79151dd94b3cc1c4f44a3a45a5b61f752289e68"
+content-hash = "526ee9352dcdb9f0bf9746b37d35c8b055226e1358449cf432407baf45b54d24"
diff --git a/pyproject.toml b/pyproject.toml
index 92f76f2..5133c7c 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -52,6 +52,12 @@ dependencies = [
     "aiohttp (>=3.14.4,<4.0.0)",
     # explicitly define secure version for transitive dependency pillow (April 2026 environment)
     "pillow (>=13.0.0,<14.0.0)",
+    # explicitly define secure version for transitive dependency brotli
+    "brotli (>=1.2.1,<2.0.0)",
+    # explicitly define secure version for transitive dependency graphql-core
+    "graphql-core (>=3.2.12,<4.0.0)",
+    # explicitly define secure version for transitive dependency certifi (April 2026 environment)
+    "certifi (>=2026.10.19,<2027.0.0)",
 ]
 
 [project.scripts]
diff --git a/python_env.yaml b/python_env.yaml
index 7a37e3c..5c8b3d5 100644
--- a/python_env.yaml
+++ b/python_env.yaml
@@ -24,10 +24,10 @@
         "billiard==4.2.4",
         "blinker==1.9.0",
         "botocore==1.43.56",
-        "brotli==1.2.0",
+        "brotli==1.2.1",
         "cachetools==7.1.6",
         "celery==5.6.3",
-        "certifi==2026.7.22",
+        "certifi==2026.10.23",
         "cffi==2.1.0",
         "charset-normalizer==3.4.9",
         "click-didyoumean==0.3.1",
@@ -73,12 +73,12 @@
         "gevent==26.7.0",
         "geventhttpclient==2.3.9",
         "gitdb==4.0.12",
-        "gitpython==3.2.0",
+        "gitpython==3.2.1",
         "google-auth==2.56.2",
         "googleapis-common-protos==1.75.0",
         "grandalf==0.8",
         "graphene==3.4.3",
-        "graphql-core==3.2.11",
+        "graphql-core==3.2.13",
         "graphql-relay==3.2.0",
         "greenlet==3.3.2",
         "grpcio==1.83.0",
diff --git a/requirements.txt b/requirements.txt
index 8efc7cb..3bf9ab2 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -21,10 +21,10 @@ attrs==26.1.0 ; python_version == "3.12"
 billiard==4.2.4 ; python_version == "3.12"
 blinker==1.9.0 ; python_version == "3.12"
 botocore==1.43.56 ; python_version == "3.12"
-brotli==1.2.0 ; python_version == "3.12"
+brotli==1.2.1 ; python_version == "3.12"
 cachetools==7.1.6 ; python_version == "3.12"
 celery==5.6.3 ; python_version == "3.12"
-certifi==2026.7.22 ; python_version == "3.12"
+certifi==2026.10.23 ; python_version == "3.12"
 cffi==2.1.0 ; python_version == "3.12"
 charset-normalizer==3.4.9 ; python_version == "3.12"
 click-didyoumean==0.3.1 ; python_version == "3.12"
@@ -70,12 +70,12 @@ funcy==2.0 ; python_version == "3.12"
 gevent==26.7.0 ; python_version == "3.12"
 geventhttpclient==2.3.9 ; python_version == "3.12"
 gitdb==4.0.12 ; python_version == "3.12"
-gitpython==3.2.0 ; python_version == "3.12"
+gitpython==3.2.1 ; python_version == "3.12"
 google-auth==2.56.2 ; python_version == "3.12"
 googleapis-common-protos==1.75.0 ; python_version == "3.12"
 grandalf==0.8 ; python_version == "3.12"
 graphene==3.4.3 ; python_version == "3.12"
-graphql-core==3.2.11 ; python_version == "3.12"
+graphql-core==3.2.13 ; python_version == "3.12"
 graphql-relay==3.2.0 ; python_version == "3.12"
 greenlet==3.3.2 ; python_version == "3.12"
 grpcio==1.83.0 ; python_version == "3.12"