diff --git a/requirements.txt b/requirements.txt
index eb6eaf43..3681d0ed 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -18,7 +18,7 @@ cloudpickle==3.0.0
 colorama==0.4.6
 coolname==2.2.0
 croniter==2.0.3
-cryptography==42.0.5
+cryptography==42.0.6
 dateparser==1.2.0
 db-dtypes==1.2.0
 dnspython==2.6.1
@@ -50,7 +50,7 @@ hpack==4.0.0
 httpcore==1.0.4
 httpx==0.27.0
 hyperframe==6.0.1
-idna==3.6
+idna==3.7
 importlib-metadata==7.0.1
 importlib_resources==6.1.3
 itsdangerous==2.1.2
@@ -131,3 +131,4 @@ validators==0.22.0
 websocket-client==1.7.0
 websockets==12.0
 zipp==3.17.0
+setuptools>=65.5.1 # not directly required, pinned by Snyk to avoid a vulnerability