diff --git a/otel-requirements.txt b/otel-requirements.txt
index a2bcb35bd..3dd2a68e9 100644
--- a/otel-requirements.txt
+++ b/otel-requirements.txt
@@ -29,7 +29,7 @@ grpcio==1.57.0
     # via opentelemetry-exporter-otlp-proto-grpc
 hatchling==1.18.0
     # via -r otel-requirements.in
-idna==3.4
+idna==3.7
     # via requests
 importlib-metadata==6.8.0
     # via opentelemetry-api
@@ -85,7 +85,7 @@ protobuf==4.24.2
     # via
     #   googleapis-common-protos
     #   opentelemetry-proto
-pydantic==1.10.12
+pydantic==1.10.13
     # via otel-extensions
 requests==2.32.3
     # via opentelemetry-exporter-otlp-proto-http
@@ -105,7 +105,7 @@ wrapt==1.15.0
     # via
     #   deprecated
     #   opentelemetry-instrumentation
-zipp==3.16.2
+zipp==3.19.1
     # via importlib-metadata
 
 # The following packages are considered to be unsafe in a requirements file:
diff --git a/requirements-devel.txt b/requirements-devel.txt
index 798ebeec0..b6cbc0d5c 100644
--- a/requirements-devel.txt
+++ b/requirements-devel.txt
@@ -68,7 +68,7 @@ gssapi==1.7.2
     #   requests-gssapi
 hatchling==1.18.0
     # via -r otel-requirements.in
-idna==3.3
+idna==3.7
     # via requests
 importlib-metadata==6.8.0
     # via opentelemetry-api
@@ -132,7 +132,7 @@ packaging==23.1
     # via
     #   hatchling
     #   pytest
-paramiko==2.10.3
+paramiko==3.4.1
     # via -r requirements.in
 pathspec==0.11.2
     # via hatchling
@@ -156,7 +156,7 @@ pycodestyle==2.8.0
     # via flake8
 pycparser==2.20
     # via cffi
-pydantic==1.10.12
+pydantic==1.10.13
     # via otel-extensions
 pyflakes==2.4.0
     # via
@@ -228,7 +228,6 @@ six==1.16.0
     #   dockerfile-parse
     #   koji
     #   osbs-client
-    #   paramiko
     #   python-dateutil
     #   requests-mock
     #   responses
@@ -253,7 +252,7 @@ wrapt==1.15.0
     # via
     #   deprecated
     #   opentelemetry-instrumentation
-zipp==3.16.2
+zipp==3.19.1
     # via importlib-metadata
 
 # The following packages are considered to be unsafe in a requirements file:
diff --git a/requirements.in b/requirements.in
index 281d3d8f6..ae3d8a078 100644
--- a/requirements.in
+++ b/requirements.in
@@ -3,7 +3,7 @@ backoff
 dockerfile-parse>=0.0.13
 flatpak-module-tools>=0.14
 jsonschema
-paramiko>=2.10.1
+paramiko>=3.4.0
 PyYAML
 ruamel.yaml
 git+https://github.com/containerbuildsystem/osbs-client@d0e1e394fe044fae6ade98d640c51a75fa69b9af#egg=osbs-client
diff --git a/requirements.txt b/requirements.txt
index 27ee1c69d..85cb40c1c 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -59,7 +59,7 @@ gssapi==1.7.2
     #   requests-gssapi
 hatchling==1.18.0
     # via -r otel-requirements.in
-idna==3.3
+idna==3.7
     # via requests
 importlib-metadata==6.8.0
     # via opentelemetry-api
@@ -117,7 +117,7 @@ otel-extensions==0.2.5
     # via -r otel-requirements.in
 packaging==23.1
     # via hatchling
-paramiko==2.10.3
+paramiko==3.4.1
     # via -r requirements.in
 pathspec==0.11.2
     # via hatchling
@@ -131,7 +131,7 @@ pycairo==1.20.1
     # via pygobject
 pycparser==2.20
     # via cffi
-pydantic==1.10.12
+pydantic==1.10.13
     # via otel-extensions
 pygobject==3.42.0
     # via -r requirements.in
@@ -173,7 +173,6 @@ six==1.16.0
     #   dockerfile-parse
     #   koji
     #   osbs-client
-    #   paramiko
     #   python-dateutil
 tomli==2.0.1
     # via hatchling
@@ -192,7 +191,7 @@ wrapt==1.15.0
     # via
     #   deprecated
     #   opentelemetry-instrumentation
-zipp==3.16.2
+zipp==3.19.1
     # via importlib-metadata
 
 # The following packages are considered to be unsafe in a requirements file:
diff --git a/tests/requirements.txt b/tests/requirements.txt
index 6c4b3abb8..cea73fff7 100644
--- a/tests/requirements.txt
+++ b/tests/requirements.txt
@@ -76,7 +76,7 @@ flexmock==0.11.1 \
     --hash=sha256:1c51371767f968e1d2f505138de72b07704ecebc9b34e0b52ffdeeb510685c3f \
     --hash=sha256:8cdd911f48d0696efd41231dbbd63fb1eb8290b34b0bb691019739d6cd94eadd
     # via -r requirements.in
-idna==3.3 \
+idna==3.7 \
     --hash=sha256:84d9dd047ffa80596e0f246e2eab0b391788b0503584e8945f2368256d2735ff \
     --hash=sha256:9d643ff0a55b762d5cdb124b8eaa99c66322e2157b69160bc32796e824360e6d
     # via requests