diff --git a/requirements-3.13.txt b/requirements-3.13.txt
index 5b118822..39205c9f 100644
--- a/requirements-3.13.txt
+++ b/requirements-3.13.txt
@@ -10,15 +10,16 @@ buildbot-waterfall-view==4.3.0
 buildbot-worker==4.3.0
 buildbot-wsgi-dashboards==4.3.0
 buildbot-www==4.3.0
-cbor2==6.1.4
+cbor2==6.1.5
 certifi==2026.7.22
 cffi==2.1.1
-charset-normalizer==3.5.1
+charset-normalizer==3.5.2
 click==8.5.0
 constantly==23.10.4
 croniter==6.2.4
-cryptography==50.0.1
+cryptography==50.0.2
 Flask==3.1.3
+greenlet==3.5.6
 humanize==4.16.0
 hyperlink==21.0.0
 idna==3.20
@@ -26,22 +27,22 @@ Incremental==24.11.0
 itsdangerous==2.2.0
 Jinja2==3.1.6
 Mako==1.4.3
-MarkupSafe==3.0.3
-msgpack==1.2.2
+MarkupSafe==3.0.4
+msgpack==1.2.3
 multipart==2.0.1
 packaging==26.3
-psycopg==3.3.6
+psycopg2==2.9.13
 pycparser==3.0
-PyJWT==2.15.0
+PyJWT==2.15.1
 pyOpenSSL==26.4.0
 python-dateutil==2.9.0.post0
 PyYAML==6.0.3
 requests==2.34.2
-sentry-sdk==2.70.0
+sentry-sdk==2.71.0
 service-identity==26.1.0
 setuptools==84.0.0
 six==1.17.0
-SQLAlchemy==2.1.1
+SQLAlchemy==2.0.54
 treq==26.7.0
 Twisted==26.4.0
 txaio==26.6.1
@@ -49,5 +50,5 @@ typing_extensions==4.16.0
 ujson==6.0.0
 unidiff==1.0.1
 urllib3==2.8.0
-Werkzeug==3.1.8
+Werkzeug==3.1.9
 zope.interface==8.6
diff --git a/requirements.in b/requirements.in
index af527e5b..856e128b 100644
--- a/requirements.in
+++ b/requirements.in
@@ -8,4 +8,7 @@ treq
 sentry-sdk
 # buildbot depends on SQLAlchemy, but we add the extra here to ensure the
 # correct leaf dependencies
-SQLAlchemy[postgresql]
+# XXX: The 2.1 series seems a bit fresher than we really want right now.  Stick
+#      to 2.0.x for now, and watch the dependencies when we do update.  We might
+#      have to specify `postgresql-psycopgbinary`
+SQLAlchemy[postgresql]<2.1