diff --git a/.github/workflows/cicd.yml b/.github/workflows/cicd.yml
index 377083bdf7..2904c80ea6 100644
--- a/.github/workflows/cicd.yml
+++ b/.github/workflows/cicd.yml
@@ -12,7 +12,7 @@ jobs:
     runs-on: ubuntu-latest
     environment: cicd
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
         with:
           persist-credentials: false
           fetch-depth: 0
diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
index a548c6ea0c..26cb77d74f 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -37,11 +37,11 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v4
+      uses: actions/checkout@v7
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@v4
+      uses: github/codeql-action/init@v4.37.3
       with:
         languages: ${{ matrix.language }}
         # If you wish to specify custom queries, you can do so here or in a config file.
@@ -52,7 +52,7 @@ jobs:
     # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
     # If this step fails, then you should remove it and run the build manually (see below)
     - name: Autobuild
-      uses: github/codeql-action/autobuild@v4
+      uses: github/codeql-action/autobuild@v4.37.3
 
     # ℹ️ Command-line programs to run using the OS shell.
     # 📚 https://git.io/JvXDl
@@ -66,4 +66,4 @@ jobs:
     #   make release
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@v4
+      uses: github/codeql-action/analyze@v4.37.3
diff --git a/.github/workflows/dclint.yml b/.github/workflows/dclint.yml
index 7804af7cf0..0d3333e3a2 100644
--- a/.github/workflows/dclint.yml
+++ b/.github/workflows/dclint.yml
@@ -11,5 +11,5 @@ jobs:
   dclint:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - uses: docker-compose-linter/dclint-github-action/docker-action@v1.6.0
diff --git a/.github/workflows/language-data.yml b/.github/workflows/language-data.yml
index 5ccad58183..f5956f583b 100644
--- a/.github/workflows/language-data.yml
+++ b/.github/workflows/language-data.yml
@@ -10,7 +10,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
 
       - name: Download
         run: curl -o locale/language-data.json https://raw.githubusercontent.com/wikimedia/language-data/refs/heads/master/data/language-data.json
@@ -19,7 +19,7 @@ jobs:
         run: jq -ce . locale/language-data.json > /dev/null
 
       - name: Pull Request
-        uses: peter-evans/create-pull-request@v7
+        uses: peter-evans/create-pull-request@v8
         with:
           add-paths: locale/language-data.json
           commit-message: Update language-data.json
diff --git a/requirements/base.txt b/requirements/base.txt
index 4990b7435e..da866406ef 100644
--- a/requirements/base.txt
+++ b/requirements/base.txt
@@ -1,8 +1,8 @@
-black==24.3.0
-bleach==6.2.0
+black==25.1.0
+bleach==6.4.0
 click==8.0.4 # This version of click has to be set because 8.1 breaks black formatting
 defusedxml==0.7.1
-django==5.2.15
+django==5.2.16
 django-annoying==0.10.7
 django-autocomplete-light==3.11.0
 django-contrib-comments==2.2.0
@@ -21,7 +21,7 @@ factory_boy>=2.10.0,<4.0
 jsonschema==3.2.0
 mwoauth==0.4.0
 git+https://github.com/WikipediaLibrary/python-mwoauth.git@Jsn.sherman/T332349
-pillow==12.2.0
+pillow==12.3.0
 python-dateutil==2.9.0.post0
 sentry-sdk==2.24.1
-whitenoise==6.8.2
+whitenoise==6.12.0