diff --git a/requirements/dev.txt b/requirements/dev.txt
index 6c64eb91..85f19216 100644
--- a/requirements/dev.txt
+++ b/requirements/dev.txt
@@ -12,7 +12,7 @@ astroid==4.0.4
     #   pylint-celery
 cachetools==7.0.5
     # via tox
-certifi==2026.2.25
+certifi==2026.10.19
     # via requests
 cffi==2.0.0
     # via cryptography
diff --git a/requirements/doc.txt b/requirements/doc.txt
index 41e179b4..9adfc085 100644
--- a/requirements/doc.txt
+++ b/requirements/doc.txt
@@ -26,7 +26,7 @@ celery==5.6.3
     # via
     #   -c requirements/constraints.txt
     #   -r requirements/base.in
-certifi==2026.2.25
+certifi==2026.10.19
     # via requests
 cffi==2.0.0
     # via cryptography
diff --git a/requirements/pip.txt b/requirements/pip.txt
index c87fe302..b61502dc 100644
--- a/requirements/pip.txt
+++ b/requirements/pip.txt
@@ -11,6 +11,8 @@ wheel==0.46.3
 
 # The following packages are considered to be unsafe in a requirements file:
 pip==26.0.1
-    # via -r requirements/pip.in
+    # via
+    #   -c requirements/common_constraints.txt
+    #   -r requirements/pip.in
 setuptools==82.0.1
     # via -r requirements/pip.in