diff --git a/pyproject.toml b/pyproject.toml
index dfee3e4..cee69f8 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -36,7 +36,7 @@ include = [
 ]
 
 [tool.poetry.dependencies]
-python = ">=3.8,<3.13"
+python = ">=3.13,<3.14"
 
 # https://github.com/lepture/authlib/pull/662
 # fix authlib to use correct auth method for token introspection
@@ -44,13 +44,13 @@ python = ">=3.8,<3.13"
 # a fixed stable authlib release
 authlib = {git = "https://github.com/AdamWill/authlib.git", branch = "oauth2-fix-introspect-endpoint"}
 
-flask = "^2.2.5"
+flask = "^3.0.0"
 flask-oidc = "^2.2.0"
 flask-session = ">=0.6.0"
 Flask-SQLAlchemy = "^3.1.1"
 Flask-Cors = "^5.0.0"
 Flask-Migrate = "^4.0.5"
-itsdangerous = {version = "==2.0.1", optional = true}
+itsdangerous = {version = "==2.2.0", optional = true}
 
 gssapi = "^1.8.3"
 python-ldap = "^3.4.3"
@@ -77,7 +77,7 @@ fedora-messaging = "^3.4.1"
 
 # Tests
 pytest = {version = "^8.3.3", optional = true}
-pytest-cov = {version = "^5.0.0", optional = true}
+pytest-cov = {version = "^6.0.0", optional = true}
 mock = {version = "^5.1.0", optional = true}
 
 # Functional Tests
@@ -91,9 +91,9 @@ opentelemetry-instrumentation-flask = "^0.46b0"
 opentelemetry-instrumentation-sqlalchemy = "^0.46b0"
 
 # Documentation
-sphinx = {version = "^7.1.1", optional = true}
+sphinx = {version = "^8.0.0", optional = true}
 sphinxcontrib-httpdomain = {version = "^1.8.1", optional = true}
-markupsafe = {version = "==2.1.5", optional = true}
+markupsafe = {version = "==3.0.2", optional = true}
 pydantic = "^2.9.2"
 Flask-Pydantic = "^0.12.0"
 flask-restx = "^1.3.0"