diff --git a/requirements-dev.txt b/requirements-dev.txt
index b61750e..2eb4421 100644
--- a/requirements-dev.txt
+++ b/requirements-dev.txt
@@ -1,3 +1,3 @@
 # Test/dev dependencies (not installed in the runtime image).
 -r requirements.txt
-pytest==8.3.4
+pytest==9.0.3
diff --git a/requirements-e2e.txt b/requirements-e2e.txt
index 065ecab..1705814 100644
--- a/requirements-e2e.txt
+++ b/requirements-e2e.txt
@@ -1,6 +1,6 @@
 # Browser end-to-end test dependencies (run via the Playwright image; see
 # scripts/run-e2e.sh). Kept separate from the runtime and unit-test deps.
-pytest==8.3.4
+pytest==9.0.3
 # itsdangerous: forge a Starlette session cookie for the authenticated workspace
 # E2E (must match the app's signer).
 itsdangerous==2.2.0