diff --git a/requirements.txt b/requirements.txt
index 2e842b9d..ccacbc21 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -462,9 +462,9 @@ pubtools==1.4.5 \
     # via
     #   -r requirements.in
     #   pubtools-pulplib
-pubtools-pulplib==2.43.2 \
-    --hash=sha256:a32ed0d598bea151f0497328ec07a760a8bdb73bbce503162a28987775613091 \
-    --hash=sha256:c6553666035adc07c01f982971e3fbac5942aa0df852bd6618fa676ff584a80c
+pubtools-pulplib==2.43.3 \
+    --hash=sha256:69fa730127df460df9af593c930a0ac43b848bae5d9abd577b0ee4a609173b65 \
+    --hash=sha256:cd4ad92dbabce881165aaa87a3d78fef4eb97589d5838b755e5c44bc44c9a7fe
     # via -r requirements.in
 pushcollector==1.3.0 \
     --hash=sha256:18281fcd4247ca8b668c25348bbc2f9cc032912cecc7037824a74ad8adcbb1c3 \
diff --git a/test-requirements.txt b/test-requirements.txt
index 2043ca5b..3c68eae9 100644
--- a/test-requirements.txt
+++ b/test-requirements.txt
@@ -413,9 +413,9 @@ dill==0.4.0 \
     --hash=sha256:0633f1d2df477324f53a895b02c901fb961bdbf65a17122586ea7019292cbcf0 \
     --hash=sha256:44f54bf6412c2c8464c14e8243eb163690a9800dbe2c367330883b19c7561049
     # via pylint
-distlib==0.4.0 \
-    --hash=sha256:9659f7d87e46584a30b5780e43ac7a2143098441670ff0a49d5f9034c54a6c16 \
-    --hash=sha256:feec40075be03a04501a973d81f633735b4b69f98b05450592310c0f401a4e0d
+distlib==0.4.1 \
+    --hash=sha256:9c2c552c68cbadc619f2d0ed3a69e27c351a3f4c9baa9ffb7df9e9cdc3d19a97 \
+    --hash=sha256:c3804d0d2d4b5fcd44036eb860cb6660485fcdf5c2aba53dc324d805837ea65b
     # via virtualenv
 docopt==0.6.2 \
     --hash=sha256:49b3a825280bd66b3aa83585ef59c4a8c82f2c8a522dbe754a8bc8d08c85c491
@@ -755,9 +755,9 @@ pubtools==1.4.5 \
     # via
     #   -r requirements.in
     #   pubtools-pulplib
-pubtools-pulplib==2.43.2 \
-    --hash=sha256:a32ed0d598bea151f0497328ec07a760a8bdb73bbce503162a28987775613091 \
-    --hash=sha256:c6553666035adc07c01f982971e3fbac5942aa0df852bd6618fa676ff584a80c
+pubtools-pulplib==2.43.3 \
+    --hash=sha256:69fa730127df460df9af593c930a0ac43b848bae5d9abd577b0ee4a609173b65 \
+    --hash=sha256:cd4ad92dbabce881165aaa87a3d78fef4eb97589d5838b755e5c44bc44c9a7fe
     # via -r requirements.in
 pushcollector==1.3.0 \
     --hash=sha256:18281fcd4247ca8b668c25348bbc2f9cc032912cecc7037824a74ad8adcbb1c3 \
@@ -1046,9 +1046,9 @@ six==1.17.0 \
     #   koji
     #   more-executors
     #   python-dateutil
-snowballstemmer==3.1.0 \
-    --hash=sha256:17e6d1da216aa07db6dad37139ea70cf13c4b2e9a096f6e64a9648fc657d3154 \
-    --hash=sha256:fd9e34526b23340cd23ffea6c9f9760974ecc2c2ac9e1d81401443ccdb2a801f
+snowballstemmer==3.1.1 \
+    --hash=sha256:7e207fa178741da09cdee59d3ecec3827ad5f92b1fc5c9ff3755b639f71f5752 \
+    --hash=sha256:e07bbc54a0d798fe6010a12398422e62a8bfbba95c394fd0956ef58cb4d3e260
     # via sphinx
 sphinx==7.1.2 ; python_version >= "3" \
     --hash=sha256:780f4d32f1d7d1126576e0e5ecc19dc32ab76cd24e950228dcf7b1f6d3d9e22f \