diff --git a/crdt-sync/requirements.txt b/crdt-sync/requirements.txt
index 3ae4497..927ab6f 100644
--- a/crdt-sync/requirements.txt
+++ b/crdt-sync/requirements.txt
@@ -2,11 +2,11 @@
 # floor is satisfied by anything newer, so it tells a checker nothing
 # about whether this repo is actually current.
 bandit[toml]==1.9.4
-mypy==2.3.1
+mypy==2.4.0
 pre-commit==4.6.2
-pylint==4.0.9
+pylint==4.1.2
 pytest==9.1.1
 pytest-cov==7.1.0
 requests==2.34.2
-ruff==0.16.9
+ruff==0.16.10
 types-requests==2.33.0.20260906
diff --git a/crdt_sync_flutter/pubspec.yaml b/crdt_sync_flutter/pubspec.yaml
index 61fbe13..b83d05d 100644
--- a/crdt_sync_flutter/pubspec.yaml
+++ b/crdt_sync_flutter/pubspec.yaml
@@ -30,7 +30,7 @@ dependencies:
   http: 1.6.0
   shared_preferences: 2.5.5
   # Opens the system browser for the desktop loopback sign-in.
-  url_launcher: 6.3.2
+  url_launcher: 6.3.3
   uuid: 4.6.0
 
 dev_dependencies:
diff --git a/github_device_auth/pubspec.lock b/github_device_auth/pubspec.lock
index 46ee6b9..a700656 100644
--- a/github_device_auth/pubspec.lock
+++ b/github_device_auth/pubspec.lock
@@ -209,10 +209,10 @@ packages:
     dependency: "direct main"
     description:
       name: url_launcher
-      sha256: f6a7e5c4835bb4e3026a04793a4199ca2d14c739ec378fdfe23fc8075d0439f8
+      sha256: e8cc955c97e06df9879140a1fe301f3d493f01b7c62dec7f46834be31d7e9fda
       url: "https://pub.dev"
     source: hosted
-    version: "6.3.2"
+    version: "6.3.3"
   url_launcher_android:
     dependency: transitive
     description:
diff --git a/github_device_auth/pubspec.yaml b/github_device_auth/pubspec.yaml
index c5c379f..ed6beb3 100644
--- a/github_device_auth/pubspec.yaml
+++ b/github_device_auth/pubspec.yaml
@@ -13,7 +13,7 @@ dependencies:
   flutter:
     sdk: flutter
   http: 1.6.0
-  url_launcher: 6.3.2
+  url_launcher: 6.3.3
 
 dev_dependencies:
   flutter_test: