diff --git a/denylist.txt b/denylist.txt
index e66e3481e..21fde813a 100644
--- a/denylist.txt
+++ b/denylist.txt
@@ -23,7 +23,9 @@ yamllint
 
 # type stub packages - these do not affect runtime and are effectively only
 # for linting
+types-decorator
 types-Jinja2
+types-jmespath
 types-jsonschema
 types-paramiko
 types-python-dateutil
diff --git a/upper-constraints.txt b/upper-constraints.txt
index 0559c2c6b..d3e7a54ce 100644
--- a/upper-constraints.txt
+++ b/upper-constraints.txt
@@ -8,13 +8,14 @@
 voluptuous===0.16.0
 chardet===6.0.0.post1
 enum-compat===0.0.3
-netmiko===4.6.0
+netmiko===4.7.0
 sshtunnel===0.4.0
 PasteDeploy===3.1.0
 Routes===2.5.1
 rtslib-fb===2.2.4
 oslo.limit===2.11.0
 restructuredtext_lint===2.0.2
+yarl===1.24.2
 tzdata===2026.2
 smmap===5.0.3
 confget===5.1.2
@@ -23,7 +24,7 @@ WebOb===1.8.9
 sphinxcontrib-actdiag===3.0.0
 pecan===1.8.0
 os-api-ref===3.2.0
-python-ldap===3.4.5
+python-ldap===3.4.7
 oslo.concurrency===7.5.0
 websocket-client===1.9.0
 osprofiler===4.4.0
@@ -31,7 +32,7 @@ os-resource-classes===1.1.0
 mypy_extensions===1.1.0
 tabulate===0.10.0
 python-ironic-inspector-client===5.4.0
-lxml===6.1.0
+lxml===6.1.1
 vintage===0.4.1
 rst2txt===1.1.0
 setproctitle===1.3.7
@@ -44,6 +45,7 @@ ntc_templates===9.1.0
 sphinxcontrib-nwdiag===2.0.0
 rbd-iscsi-client===0.1.8
 alabaster===1.0.0
+multidict===6.7.1
 pbr===7.0.3
 munch===4.0.0
 waiting===1.5.0
@@ -61,15 +63,16 @@ sniffio===1.3.1
 fixtures===4.3.2
 neutron-lib===4.0.0
 XStatic-FileSaver===1.3.2.1
-jaraco.functools===4.4.0
+jaraco.functools===4.5.0
 oslo.metrics===0.16.0
 storage-interfaces===1.0.5
 pydantic===2.13.4
 pystache===0.6.8
 XStatic-Font-Awesome===6.2.1.2
+aiohttp===3.13.5
 waitress===3.0.2
 os-refresh-config===14.0.1
-pysnmp===7.1.26
+pysnmp===7.1.27
 Mako===1.3.12
 sphinxcontrib-htmlhelp===2.1.0
 XStatic-jQuery===3.7.1.1
@@ -79,7 +82,7 @@ ddt===1.7.2
 pyserial===3.5
 moto===5.2.1
 infi.dtypes.wwn===0.1.1
-awscrt===0.32.2
+awscrt===0.33.0
 pcre2===0.6.0
 python-freezerclient===6.3.0
 python-vitrageclient===5.4.0
@@ -99,9 +102,9 @@ pyOpenSSL===24.2.1
 typing-inspection===0.4.2
 monasca-common===3.8.0
 hyperframe===6.1.0
-zeroconf===0.148.0
+zeroconf===0.149.16
 scipy===1.17.1
-opentelemetry-exporter-otlp===1.41.1
+opentelemetry-exporter-otlp===1.42.1
 rsd-lib===1.2.0
 XStatic-Jasmine===2.4.1.3
 googleapis-common-protos===1.75.0
@@ -109,7 +112,7 @@ python-glanceclient===4.12.0
 prometheus_client===0.25.0
 jaraco.classes===3.4.0
 debtcollector===3.1.0
-responses===0.26.0
+responses===0.26.1
 croniter===6.2.2
 horizon===25.7.3
 octavia-lib===3.11.0
@@ -123,7 +126,7 @@ sqlparse===0.5.5
 oslotest===6.1.1
 jsonpointer===3.1.1
 defusedxml===0.7.1
-opentelemetry-sdk===1.41.1
+opentelemetry-sdk===1.42.1
 netaddr===1.3.0
 pyghmi===1.6.16
 sphinxcontrib-blockdiag===3.0.0
@@ -143,7 +146,7 @@ async-timeout===5.0.1
 virtualbmc===3.3.0
 SQLAlchemy===2.0.49
 pyroute2===0.8.1
-google-auth===2.52.0
+google-auth===2.53.0
 kazoo===2.11.0
 pyspnego===0.12.1
 trio-websocket===0.12.2
@@ -153,10 +156,10 @@ eventlet===0.41.0
 openstack-doc-tools===4.0.3
 oslo.messaging===18.1.0
 jira===3.10.5
-PyJWT===2.12.1
+PyJWT===2.13.0
 typing_extensions===4.15.0
 zVMCloudConnector===1.6.3
-paramiko===5.0.0
+paramiko===4.0.0
 ifaddr===0.2.0
 reno===4.1.0
 ncclient===0.7.1
@@ -208,7 +211,7 @@ api_object_schema===2.0.0
 XStatic-objectpath===1.2.1.1
 python-manilaclient===6.1.0
 sphinxcontrib-serializinghtml===2.0.0
-requests===2.33.1
+requests===2.34.2
 snowballstemmer===3.0.1
 Jinja2===3.1.6
 XStatic-Bootstrap-SCSS===3.4.1.1
@@ -261,7 +264,7 @@ pycdlib===1.16.0
 pyperclip===1.11.0
 cassandra-driver===3.30.0
 XStatic-Angular-Schema-Form===0.8.13.1
-opentelemetry-exporter-otlp-proto-http===1.41.1
+opentelemetry-exporter-otlp-proto-http===1.42.1
 gabbi===4.2.0
 nwdiag===3.0.0
 XStatic-bootswatch===3.3.7.1
@@ -283,7 +286,7 @@ docutils===0.21.2
 threadpoolctl===3.6.0
 os-ken===4.2.0
 ujson===5.12.1
-selenium===4.43.0
+selenium===4.44.0
 pytest-subtests===0.15.0
 mistral-lib===3.5.1
 dogtag-pki===11.2.1
@@ -294,7 +297,7 @@ os-win===5.9.0
 capacity===1.3.14
 markdown-it-py===4.2.0
 retrying===1.4.2
-python-discovery===1.3.0
+python-discovery===1.3.1
 platformdirs===4.9.6
 pydotplus===2.0.2
 boto3===1.35.99
@@ -315,21 +318,22 @@ oslo.vmware===4.9.0
 autopage===0.6.0
 gitdb===4.0.12
 python-monascaclient===2.8.0
-opentelemetry-api===1.41.1
+opentelemetry-api===1.42.1
+frozenlist===1.8.0
 automaton===3.4.0
 os-service-types===1.8.2
 keyring===25.7.0
 elementpath===4.8.0
 wsgi_intercept===1.13.1
 jsonschema-specifications===2025.9.1
-testscenarios===0.6.1
+testscenarios===0.6.2
 sphinxcontrib-pecanwsme===0.11.0
 sadisplay===0.4.9
 enum34===1.1.10
-infinisdk===289.1.0
+infinisdk===289.1.3
 rich-argparse===1.8.0
 packaging===26.2
-opentelemetry-exporter-otlp-proto-grpc===1.41.1
+opentelemetry-exporter-otlp-proto-grpc===1.42.1
 psutil===7.2.2
 txaio===25.12.2
 elasticsearch===9.4.0
@@ -344,7 +348,7 @@ XStatic-tv4===1.2.7.1
 XStatic-JSEncrypt===2.3.1.2
 python-cinderclient===9.9.0
 keystonemiddleware===13.0.0
-django-formtools===2.5.1
+django-formtools===2.6.1
 XStatic-Spin===1.2.5.3
 rich===15.0.0
 os-traits===3.6.0
@@ -353,16 +357,16 @@ SecretStorage===3.5.0
 XStatic-Rickshaw===1.5.1.3
 iso8601===2.1.0
 tooz===8.1.0
-idna===3.14
+idna===3.16
 yamlloader===1.6.0
 protobuf===6.33.6
 sushy===5.11.0
 python-neutronclient===12.0.0
-pika===1.4.0
+pika===1.4.1
 oslo.cache===4.2.0
 WebTest===3.0.7
 os-collect-config===14.0.1
-edgegrid-python===2.0.6
+edgegrid-python===2.0.7
 python-octaviaclient===3.14.0
 pysaml2===7.5.4
 requests-oauthlib===2.0.0
@@ -375,9 +379,9 @@ Logbook===1.9.2
 PyNaCl===1.6.2
 osc-lib===4.6.0
 python-consul===1.1.0
-more-itertools===11.0.2
+more-itertools===11.1.0
 seqdiag===3.0.0
-numpy===2.4.4
+numpy===2.4.6
 msgpack===1.1.2
 Sphinx===9.0.4
 oslo.config===10.4.0
@@ -388,22 +392,22 @@ zake===0.2.2
 flux===1.4.0
 flexparser===0.4
 krb5===0.9.0
-PyMySQL===1.1.3
+PyMySQL===1.2.0
 uhashring===2.4
-kubernetes===35.0.0
+kubernetes===36.0.0
 httplib2===0.31.2
 betamax===0.9.0
 construct===2.10.70
 pytest-metadata===3.1.1
 pyparsing===3.3.2
 geomet===1.1.0
-opentelemetry-exporter-otlp-proto-common===1.41.1
+opentelemetry-exporter-otlp-proto-common===1.42.1
 distlib===0.4.0
-ast_serialize===0.3.0
+ast_serialize===0.5.0
 dogpile.cache===1.5.0
 python-barbicanclient===7.4.0
 salt===3007.14
-opentelemetry-semantic-conventions===0.62b1
+opentelemetry-semantic-conventions===0.63b1
 blinker===1.9.0
 WSME===0.12.1
 oslo.upgradecheck===2.7.1
@@ -420,8 +424,8 @@ cmd2===3.5.1
 python-json-logger===4.1.0
 redis===7.4.0
 jmespath===1.1.0
-cbor2===6.0.1
-click===8.3.3
+cbor2===6.1.1
+click===8.4.1
 XStatic-smart-table===1.4.13.3
 kuryr-lib===3.4.1
 jsonpatch===1.33
@@ -431,11 +435,11 @@ cotyledon===2.2.0
 xattr===1.3.0
 systemd-python===235
 python-memcached===1.62
-openstacksdk===4.13.0
+openstacksdk===4.14.0
 infi.dtypes.nqn===0.1.0
 six===1.17.0
 h2===4.3.0
-dulwich===1.2.1
+dulwich===1.2.4
 sentinels===1.1.1
 kombu===5.6.2
 distro===1.9.0
@@ -461,14 +465,13 @@ yappi===1.7.6
 mbstrdecoder===1.1.5
 wsproto===1.3.2
 pymemcache===4.0.0
-wrapt===2.1.2
+wrapt===2.2.1
 PySocks===1.7.1
 oslo.privsep===3.11.0
 sphinxcontrib-apidoc===0.6.0
 oslo.policy===5.1.0
 hvac===2.4.0
 pyeclib===1.8.0
-repoze.lru===0.7
 rfc3986===2.0.0
 tenacity===9.1.4
 invoke===3.0.3
@@ -490,26 +493,29 @@ python-troveclient===8.10.0
 cachez===0.1.2
 XStatic-Bootstrap-Datepicker===1.4.0.1
 netifaces===0.11.0
-cachetools===7.1.1
+propcache===0.5.2
+cachetools===7.1.4
 flexcache===0.3
 sphinxcontrib-qthelp===2.0.0
 keystoneauth1===5.14.0
 statsd===4.0.1
 proto-plus===1.28.0
 python-keystoneclient===5.8.0
-diskimage-builder===3.41.0
+diskimage-builder===3.42.0
 heat-translator===3.4.0
 python-magnumclient===4.10.0
 docker===7.1.0
+repoze-lru===0.8
 storops===1.2.12
 anyio===4.13.0
+aiosignal===1.4.0
 XStatic-Angular-lrdragndrop===1.0.2.7
-ovsdbapp===2.17.0
+ovsdbapp===2.18.0
 aniso8601===10.0.1
 rjsmin===1.2.5
-icalendar===7.1.0
+icalendar===7.1.2
 configparser===7.2.0
-decorator===5.2.1
+decorator===5.3.1
 DateTimeRange===2.3.2
 cffi===2.0.0
 python-cyborgclient===2.8.0
@@ -524,8 +530,8 @@ storpool.spopenstack===3.2.0
 dnspython===2.8.0
 oauthlib===3.3.1
 py-ubjson===0.16.1
-zipp===3.23.1
-greenlet===3.5.0
+zipp===4.1.0
+greenlet===3.5.1
 XStatic-Angular-Vis===4.16.0.1
 iniconfig===2.3.0
 referencing===0.37.0
@@ -542,25 +548,26 @@ sqlalchemy-filters===0.13.0
 sphinxcontrib-runcmd===0.2.0
 confspirator===0.3.0
 fasteners===0.20
-importlib_metadata===8.7.1
+importlib_metadata===9.0.0
 sortedcontainers===2.4.0
 microversion_parse===2.1.0
 python-linstor===1.27.1
 filelock===3.29.0
 python-tackerclient===2.5.0
 python-heatclient===5.2.0
-oslo.utils===10.0.1
+oslo.utils===10.1.0
 requests-kerberos===0.15.0
 itsdangerous===2.2.0
 XStatic-jquery-ui===1.13.0.2
 monasca-statsd===2.7.0
 python-dateutil===2.9.0.post0
-virtualenv===21.3.1
+virtualenv===21.3.3
 colorama===0.4.6
 confetti===2.5.3
 ironic-lib===7.0.0
+aiohappyeyeballs===2.6.2
 pytz===2026.2
-opentelemetry-proto===1.41.1
+opentelemetry-proto===1.42.1
 XStatic-D3===3.5.17.1
 actdiag===3.0.0
 sphinxcontrib-applehelp===2.0.0