diff --git a/backend/compact-connect/lambdas/python/purchases/requirements-dev.in b/backend/compact-connect/lambdas/python/purchases/requirements-dev.in
index 5b44d6ab1..8f6d4fc3f 100644
--- a/backend/compact-connect/lambdas/python/purchases/requirements-dev.in
+++ b/backend/compact-connect/lambdas/python/purchases/requirements-dev.in
@@ -11,7 +11,7 @@ Faker>=40, <41
 argon2-cffi>=25.1.0, <26.0.0
 aws-lambda-powertools>=3.5.0, <4
 boto3>=1.34.33, <2
-cryptography>=46, <47
+cryptography>=47.0.0, <48
 marshmallow>=4.3.0, <5.0.0
 requests>=2.31.0, <3.0.0
 urllib3>=2.6.3, <3
diff --git a/backend/compact-connect/lambdas/python/purchases/requirements-dev.txt b/backend/compact-connect/lambdas/python/purchases/requirements-dev.txt
index 54487e277..3e8e7becd 100644
--- a/backend/compact-connect/lambdas/python/purchases/requirements-dev.txt
+++ b/backend/compact-connect/lambdas/python/purchases/requirements-dev.txt
@@ -5,16 +5,16 @@
 #    pip-compile --no-emit-index-url --no-strip-extras requirements-dev.in
 #
 argon2-cffi==25.1.0
-    # via -r purchases/requirements-dev.in
+    # via -r requirements-dev.in
 argon2-cffi-bindings==25.1.0
     # via argon2-cffi
 aws-lambda-powertools==3.28.0
-    # via -r purchases/requirements-dev.in
+    # via -r requirements-dev.in
 boolean-py==5.0
     # via license-expression
 boto3==1.42.89
     # via
-    #   -r purchases/requirements-dev.in
+    #   -r requirements-dev.in
     #   moto
 botocore==1.42.91
     # via
@@ -39,11 +39,11 @@ click==8.3.2
     # via pip-tools
 coverage[toml]==7.13.5
     # via
-    #   -r purchases/requirements-dev.in
+    #   -r requirements-dev.in
     #   pytest-cov
-cryptography==46.0.7
+cryptography==47.0.0
     # via
-    #   -r purchases/requirements-dev.in
+    #   -r requirements-dev.in
     #   moto
 cyclonedx-python-lib==11.7.0
     # via pip-audit
@@ -52,7 +52,7 @@ defusedxml==0.7.1
 docker==7.1.0
     # via moto
 faker==40.14.1
-    # via -r purchases/requirements-dev.in
+    # via -r requirements-dev.in
 filelock==3.28.0
     # via cachecontrol
 idna==3.11
@@ -75,11 +75,11 @@ markupsafe==3.0.3
     #   jinja2
     #   werkzeug
 marshmallow==4.3.0
-    # via -r purchases/requirements-dev.in
+    # via -r requirements-dev.in
 mdurl==0.1.2
     # via markdown-it-py
 moto[dynamodb,s3]==5.1.22
-    # via -r purchases/requirements-dev.in
+    # via -r requirements-dev.in
 msgpack==1.1.2
     # via cachecontrol
 packageurl-python==0.17.6
@@ -94,11 +94,11 @@ packaging==26.1
 pip-api==0.0.34
     # via pip-audit
 pip-audit==2.10.0
-    # via -r purchases/requirements-dev.in
+    # via -r requirements-dev.in
 pip-requirements-parser==32.0.1
     # via pip-audit
 pip-tools==7.5.3
-    # via -r purchases/requirements-dev.in
+    # via -r requirements-dev.in
 platformdirs==4.9.6
     # via pip-audit
 pluggy==1.6.0
@@ -123,10 +123,10 @@ pyproject-hooks==1.2.0
     #   pip-tools
 pytest==9.0.3
     # via
-    #   -r purchases/requirements-dev.in
+    #   -r requirements-dev.in
     #   pytest-cov
 pytest-cov==7.1.0
-    # via -r purchases/requirements-dev.in
+    # via -r requirements-dev.in
 python-dateutil==2.9.0.post0
     # via
     #   botocore
@@ -137,7 +137,7 @@ pyyaml==6.0.3
     #   responses
 requests==2.33.1
     # via
-    #   -r purchases/requirements-dev.in
+    #   -r requirements-dev.in
     #   cachecontrol
     #   docker
     #   moto
@@ -148,7 +148,7 @@ responses==0.26.0
 rich==15.0.0
     # via pip-audit
 ruff==0.15.11
-    # via -r purchases/requirements-dev.in
+    # via -r requirements-dev.in
 s3transfer==0.16.0
     # via boto3
 six==1.17.0
@@ -160,10 +160,12 @@ tomli==2.4.1
 tomli-w==1.2.0
     # via pip-audit
 typing-extensions==4.15.0
-    # via aws-lambda-powertools
+    # via
+    #   aws-lambda-powertools
+    #   cyclonedx-python-lib
 urllib3==2.6.3
     # via
-    #   -r purchases/requirements-dev.in
+    #   -r requirements-dev.in
     #   botocore
     #   docker
     #   requests