diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index be0ab96b94..d0420a95d2 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -217,6 +217,16 @@ updates:
           - "*"
     # jupyterlab is pinned <4.0.0: jupyterlab 4.x ships jlpm as Yarn Berry, which
     # cannot consume @plotly/dash-jupyterlab's Yarn 1 lockfile and breaks the build.
+    #
+    # black >=25.12.0 and pylint >=4.0.0 require Python >=3.10 and cannot install
+    # on the 3.9 CI jobs (Dash still supports Python 3.9). Upgrading either past
+    # its last 3.9-compatible release (black 25.11.0, pylint 3.3.9) also forces a
+    # repo-wide reformat / lint-fix pass, so linter bumps are done deliberately,
+    # not via Dependabot.
     ignore:
       - dependency-name: "jupyterlab"
         versions: [">=4.0.0"]
+      - dependency-name: "black"
+        versions: [">=25.12.0"]
+      - dependency-name: "pylint"
+        versions: [">=4.0.0"]
diff --git a/requirements/redis.txt b/requirements/redis.txt
index 5cc9c3dc9e..c4903b4540 100644
--- a/requirements/redis.txt
+++ b/requirements/redis.txt
@@ -1,4 +1,4 @@
 # Dependency used by RedisSharedStorage.
 # Kept in sync with the redis pin in celery.txt; in Dash 5.0 redis will be
 # removed from the celery extra and live here only.
-redis>=3.5.3,<=5.0.4
+redis>=3.5.3,<=8.1.0
diff --git a/requirements/testing.txt b/requirements/testing.txt
index c4ad6bf401..1af5dbf9a9 100644
--- a/requirements/testing.txt
+++ b/requirements/testing.txt
@@ -5,7 +5,7 @@ lxml>=4.6.2
 percy-python-selenium>=1.0.0
 pytest>=6.0.2
 requests[security]>=2.21.0
-selenium>=4.11.0,<=4.47.0
+selenium>=4.11.0,<=4.48.0
 waitress>=1.4.4
 multiprocess>=0.70.12
 psutil>=5.8.0