diff --git a/python-package/requirements/dev.txt b/python-package/requirements/dev.txt
index 25de3e2a..26e1bd7e 100644
--- a/python-package/requirements/dev.txt
+++ b/python-package/requirements/dev.txt
@@ -20,7 +20,7 @@ coverage==5.5
     # via
     #   -r requirements/tests.in
     #   pytest-cov
-distlib==0.3.2
+distlib==0.3.6
     # via virtualenv
 filelock==3.0.12
     # via
@@ -46,6 +46,14 @@ flake8-use-fstring==1.1
     # via -r requirements/style.in
 future==0.18.2
     # via junitparser
+importlib-metadata==4.12.0
+    # via
+    #   flake8
+    #   pep517
+    #   pluggy
+    #   pytest
+    #   tox
+    #   virtualenv
 iniconfig==1.1.1
     # via pytest
 isort==5.9.1
@@ -113,13 +121,22 @@ toml==0.10.2
 tox==3.23.1
     # via -r requirements/tox.in
 typed-ast==1.4.3
-    # via mypy
-typing-extensions==3.10.0.0
-    # via mypy
+    # via
+    #   flake8-annotations
+    #   mypy
+typing-extensions==3.10.0.0 ; python_version < "3.8"
+    # via
+    #   -c requirements/constraints.txt
+    #   importlib-metadata
+    #   mypy
 virtualenv==20.4.7
     # via tox
 wheel==0.36.2
     # via pip-tools
+zipp==3.8.1
+    # via
+    #   importlib-metadata
+    #   pep517
 
 # The following packages are considered to be unsafe in a requirements file:
 # pip
diff --git a/python-package/requirements/tox.txt b/python-package/requirements/tox.txt
index 94c6b67e..d4bfdf66 100644
--- a/python-package/requirements/tox.txt
+++ b/python-package/requirements/tox.txt
@@ -6,12 +6,17 @@
 #
 appdirs==1.4.4
     # via virtualenv
-distlib==0.3.2
+distlib==0.3.6
     # via virtualenv
 filelock==3.0.12
     # via
     #   tox
     #   virtualenv
+importlib-metadata==4.12.0
+    # via
+    #   pluggy
+    #   tox
+    #   virtualenv
 packaging==21.0
     # via tox
 pluggy==0.13.1
@@ -28,5 +33,11 @@ toml==0.10.2
     # via tox
 tox==3.23.1
     # via -r requirements/tox.in
+typing-extensions==4.3.0 ; python_version < "3.8"
+    # via
+    #   -c requirements/constraints.txt
+    #   importlib-metadata
 virtualenv==20.4.7
     # via tox
+zipp==3.8.1
+    # via importlib-metadata