diff --git a/release/constraints.txt b/release/constraints.txt
index b4b44bdb..19361332 100644
--- a/release/constraints.txt
+++ b/release/constraints.txt
@@ -13,20 +13,20 @@
 # (operators install torch/vllm themselves; see root constraints.txt),
 # so the exposure is confined to the release environment. Bump when an
 # upstream fixed version ships.
-anyio==4.14.1
+anyio==4.14.2
 build==1.5.0
 CacheControl==0.14.4
 certifi==2025.1.31
 cffi==1.17.1
-charset-normalizer==3.4.8
+charset-normalizer==3.4.9
 cleo==2.1.0
 contourpy==1.3.2
 crashtest==0.4.1
 cycler==0.12.1
 distlib==0.4.3
-dulwich==1.2.9
+dulwich==1.2.12
 fastjsonschema==2.21.2
-filelock==3.29.5
+filelock==3.31.1
 findpython==0.8.0
 fonttools==4.63.0
 fsspec==2026.6.0
@@ -40,7 +40,7 @@ iniconfig==2.3.0
 installer==0.7.0
 jaraco.classes==3.4.0
 jaraco.context==6.1.2
-jaraco.functools==4.5.0
+jaraco.functools==4.6.0
 Jinja2==3.1.6
 keyring==25.7.0
 kiwisolver==1.5.0
@@ -55,7 +55,7 @@ packaging==26.2
 pbs-installer==2025.3.17
 pillow==12.3.0
 pkginfo==1.12.1.2
-platformdirs==4.10.0
+platformdirs==4.10.1
 pluggy==1.6.0
 poetry==2.4.1
 poetry-core==2.4.1
@@ -70,14 +70,14 @@ PyYAML==6.0.3
 RapidFuzz==3.14.5
 requests==2.34.2
 requests-toolbelt==1.0.0
-ruff==0.15.20
+ruff==0.15.22
 setuptools==81.0.0
 shellingham==1.5.4
 six==1.17.0
 sniffio==1.3.1
 sympy==1.14.0
-tomlkit==0.15.0
-torch==2.12.1
+tomlkit==0.15.1
+torch==2.13.0
 trove-classifiers==2025.3.19.19
 typing_extensions==4.16.0
 urllib3==2.7.0