diff --git a/.github/workflows/ci-cd.yml b/.github/workflows/ci-cd.yml
index d9640337d31..b1ce33f4ca8 100644
--- a/.github/workflows/ci-cd.yml
+++ b/.github/workflows/ci-cd.yml
@@ -503,7 +503,7 @@ jobs:
       uses: pypa/gh-action-pypi-publish@release/v1
 
     - name: Sign the dists with Sigstore
-      uses: sigstore/gh-action-sigstore-python@v3.0.0
+      uses: sigstore/gh-action-sigstore-python@v3.0.1
       with:
         inputs: >-
           ./dist/*.tar.gz
diff --git a/requirements/constraints.txt b/requirements/constraints.txt
index 641af5da395..c1df5b5e0ab 100644
--- a/requirements/constraints.txt
+++ b/requirements/constraints.txt
@@ -165,7 +165,7 @@ pydantic-core==2.33.2
     # via pydantic
 pyenchant==3.2.2
     # via sphinxcontrib-spelling
-pygments==2.19.1
+pygments==2.19.2
     # via
     #   pytest
     #   rich
diff --git a/requirements/dev.txt b/requirements/dev.txt
index d4f448d3e63..24aa4616ade 100644
--- a/requirements/dev.txt
+++ b/requirements/dev.txt
@@ -160,7 +160,7 @@ pydantic==2.11.7
     # via python-on-whales
 pydantic-core==2.33.2
     # via pydantic
-pygments==2.19.1
+pygments==2.19.2
     # via
     #   pytest
     #   rich
diff --git a/requirements/doc-spelling.txt b/requirements/doc-spelling.txt
index 851a468752a..074016b2e48 100644
--- a/requirements/doc-spelling.txt
+++ b/requirements/doc-spelling.txt
@@ -34,7 +34,7 @@ packaging==25.0
     # via sphinx
 pyenchant==3.2.2
     # via sphinxcontrib-spelling
-pygments==2.19.1
+pygments==2.19.2
     # via sphinx
 requests==2.32.4
     # via
diff --git a/requirements/doc.txt b/requirements/doc.txt
index 7e26e5fb6ab..0357ff6f143 100644
--- a/requirements/doc.txt
+++ b/requirements/doc.txt
@@ -32,7 +32,7 @@ markupsafe==3.0.2
     # via jinja2
 packaging==25.0
     # via sphinx
-pygments==2.19.1
+pygments==2.19.2
     # via sphinx
 requests==2.32.4
     # via sphinx
diff --git a/requirements/lint.txt b/requirements/lint.txt
index f6dcbba3804..40f696bc373 100644
--- a/requirements/lint.txt
+++ b/requirements/lint.txt
@@ -71,7 +71,7 @@ pydantic==2.11.7
     # via python-on-whales
 pydantic-core==2.33.2
     # via pydantic
-pygments==2.19.1
+pygments==2.19.2
     # via
     #   pytest
     #   rich
diff --git a/requirements/test.txt b/requirements/test.txt
index c94e5f91ea5..cbbbfad95c4 100644
--- a/requirements/test.txt
+++ b/requirements/test.txt
@@ -91,7 +91,7 @@ pydantic==2.11.7
     # via python-on-whales
 pydantic-core==2.33.2
     # via pydantic
-pygments==2.19.1
+pygments==2.19.2
     # via
     #   pytest
     #   rich