diff --git a/requirements/base.txt b/requirements/base.txt
index 13c27759..2ca7592b 100644
--- a/requirements/base.txt
+++ b/requirements/base.txt
@@ -16,9 +16,9 @@ backports-zoneinfo==0.2.1 ; python_version < "3.9"
     #   django
 binaryornot==0.4.4
     # via cookiecutter
-boto3==1.34.84
+boto3==1.34.88
     # via fs-s3fs
-botocore==1.34.84
+botocore==1.34.88
     # via
     #   boto3
     #   s3transfer
@@ -56,9 +56,8 @@ jmespath==1.0.1
     #   botocore
 lazy==1.6
     # via xblock
-lxml==4.9.4
+lxml==5.2.1
     # via
-    #   -c requirements/constraints.txt
     #   -r requirements/base.in
     #   xblock
 mako==1.3.3
@@ -130,7 +129,7 @@ webob==1.8.7
     # via
     #   -r requirements/base.in
     #   xblock
-xblock[django]==3.1.0
+xblock[django]==4.0.0
     # via -r requirements/base.in
 
 # The following packages are considered to be unsafe in a requirements file:
diff --git a/requirements/ci.txt b/requirements/ci.txt
index 641296fb..6f05147f 100644
--- a/requirements/ci.txt
+++ b/requirements/ci.txt
@@ -24,7 +24,7 @@ platformdirs==4.2.0
     # via
     #   tox
     #   virtualenv
-pluggy==1.4.0
+pluggy==1.5.0
     # via tox
 pyproject-api==1.6.1
     # via tox
@@ -34,5 +34,5 @@ tomli==2.0.1
     #   tox
 tox==4.14.2
     # via -r requirements/ci.in
-virtualenv==20.25.1
+virtualenv==20.25.3
     # via tox
diff --git a/requirements/dev.txt b/requirements/dev.txt
index e58745e3..2077d245 100644
--- a/requirements/dev.txt
+++ b/requirements/dev.txt
@@ -38,12 +38,12 @@ binaryornot==0.4.4
     #   -r requirements/base.txt
     #   -r requirements/test.txt
     #   cookiecutter
-boto3==1.34.84
+boto3==1.34.88
     # via
     #   -r requirements/base.txt
     #   -r requirements/test.txt
     #   fs-s3fs
-botocore==1.34.84
+botocore==1.34.88
     # via
     #   -r requirements/base.txt
     #   -r requirements/test.txt
@@ -112,7 +112,7 @@ django==4.2.11
     #   openedx-django-pyfs
 edx-lint==5.3.6
     # via -r requirements/quality.in
-exceptiongroup==1.2.0
+exceptiongroup==1.2.1
     # via
     #   -r requirements/test.txt
     #   pytest
@@ -164,9 +164,8 @@ lazy==1.6
     #   -r requirements/test.txt
     #   acid-xblock
     #   xblock
-lxml==4.9.4
+lxml==5.2.1
     # via
-    #   -c requirements/constraints.txt
     #   -r requirements/base.txt
     #   -r requirements/test.txt
     #   xblock
@@ -219,7 +218,7 @@ platformdirs==4.2.0
     #   pylint
     #   tox
     #   virtualenv
-pluggy==1.4.0
+pluggy==1.5.0
     # via
     #   -r requirements/test.txt
     #   pytest
@@ -373,7 +372,7 @@ urllib3==1.26.18
     #   -r requirements/test.txt
     #   botocore
     #   requests
-virtualenv==20.25.1
+virtualenv==20.25.3
     # via
     #   -r requirements/test.txt
     #   tox
@@ -387,7 +386,7 @@ webob==1.8.7
     #   -r requirements/base.txt
     #   -r requirements/test.txt
     #   xblock
-xblock[django]==3.1.0
+xblock[django]==4.0.0
     # via
     #   -r requirements/base.txt
     #   -r requirements/test.txt
diff --git a/requirements/quality.txt b/requirements/quality.txt
index f8a94987..b76227ae 100644
--- a/requirements/quality.txt
+++ b/requirements/quality.txt
@@ -31,11 +31,11 @@ binaryornot==0.4.4
     # via
     #   -r requirements/test.txt
     #   cookiecutter
-boto3==1.34.84
+boto3==1.34.88
     # via
     #   -r requirements/test.txt
     #   fs-s3fs
-botocore==1.34.84
+botocore==1.34.88
     # via
     #   -r requirements/test.txt
     #   boto3
@@ -93,7 +93,7 @@ django==4.2.11
     #   openedx-django-pyfs
 edx-lint==5.3.6
     # via -r requirements/quality.in
-exceptiongroup==1.2.0
+exceptiongroup==1.2.1
     # via
     #   -r requirements/test.txt
     #   pytest
@@ -139,9 +139,8 @@ lazy==1.6
     #   -r requirements/test.txt
     #   acid-xblock
     #   xblock
-lxml==4.9.4
+lxml==5.2.1
     # via
-    #   -c requirements/constraints.txt
     #   -r requirements/test.txt
     #   xblock
 mako==1.3.3
@@ -186,7 +185,7 @@ platformdirs==4.2.0
     #   pylint
     #   tox
     #   virtualenv
-pluggy==1.4.0
+pluggy==1.5.0
     # via
     #   -r requirements/test.txt
     #   pytest
@@ -315,7 +314,7 @@ urllib3==1.26.18
     #   -r requirements/test.txt
     #   botocore
     #   requests
-virtualenv==20.25.1
+virtualenv==20.25.3
     # via
     #   -r requirements/test.txt
     #   tox
@@ -327,7 +326,7 @@ webob==1.8.7
     # via
     #   -r requirements/test.txt
     #   xblock
-xblock[django]==3.1.0
+xblock[django]==4.0.0
     # via
     #   -r requirements/test.txt
     #   acid-xblock
diff --git a/requirements/test.txt b/requirements/test.txt
index 69a6072a..ae2b9c69 100644
--- a/requirements/test.txt
+++ b/requirements/test.txt
@@ -27,11 +27,11 @@ binaryornot==0.4.4
     # via
     #   -r requirements/base.txt
     #   cookiecutter
-boto3==1.34.84
+boto3==1.34.88
     # via
     #   -r requirements/base.txt
     #   fs-s3fs
-botocore==1.34.84
+botocore==1.34.88
     # via
     #   -r requirements/base.txt
     #   boto3
@@ -71,7 +71,7 @@ distlib==0.3.8
     #   -c requirements/common_constraints.txt
     #   -r requirements/base.txt
     #   openedx-django-pyfs
-exceptiongroup==1.2.0
+exceptiongroup==1.2.1
     # via pytest
 filelock==3.13.4
     # via
@@ -107,9 +107,8 @@ lazy==1.6
     #   -r requirements/base.txt
     #   acid-xblock
     #   xblock
-lxml==4.9.4
+lxml==5.2.1
     # via
-    #   -c requirements/constraints.txt
     #   -r requirements/base.txt
     #   xblock
 mako==1.3.3
@@ -147,7 +146,7 @@ platformdirs==4.2.0
     # via
     #   tox
     #   virtualenv
-pluggy==1.4.0
+pluggy==1.5.0
     # via
     #   pytest
     #   tox
@@ -241,7 +240,7 @@ urllib3==1.26.18
     #   -r requirements/base.txt
     #   botocore
     #   requests
-virtualenv==20.25.1
+virtualenv==20.25.3
     # via tox
 web-fragments==2.2.0
     # via
@@ -251,7 +250,7 @@ webob==1.8.7
     # via
     #   -r requirements/base.txt
     #   xblock
-xblock[django]==3.1.0
+xblock[django]==4.0.0
     # via
     #   -r requirements/base.txt
     #   acid-xblock