diff --git a/pdm.lock b/pdm.lock
index 81e7fa5ca..f13432a3c 100644
--- a/pdm.lock
+++ b/pdm.lock
@@ -3,10 +3,9 @@
 
 [metadata]
 groups = ["default"]
-cross_platform = true
-static_urls = true
-lock_version = "4.3"
-content_hash = "sha256:6ff8e9c5b619b5181ea479e90c81313ddef35d9405932aa8201d67b6c0ea70fe"
+strategy = ["cross_platform", "static_urls"]
+lock_version = "4.4"
+content_hash = "sha256:1a373347b812a6c5e0cf134f6e6820e773ced33182fe188f3b9ee73b344eff03"
 
 [[package]]
 name = "aiohttp"
@@ -158,10 +157,10 @@ files = [
 
 [[package]]
 name = "bazel-runfiles"
-version = "0.25.0"
+version = "0.27.1"
 summary = ""
 files = [
-    {url = "https://files.pythonhosted.org/packages/3c/87/acb2d68ebd96d7abbc44507dd1903b3c0dc130a7de3efa629f9daeed1c19/bazel_runfiles-0.25.0-py3-none-any.whl", hash = "sha256:f74c1865bbb27824c21775a76d6939206eaa3be75106093ee11615875dd2c935"},
+    {url = "https://files.pythonhosted.org/packages/7b/b1/664f3ebd1b956ee090a629c16dbe1db085951881451227ed326c866cfb52/bazel_runfiles-0.27.1-py3-none-any.whl", hash = "sha256:89ae658e4e6e8714db99bea0e5a4c9c6b171316fc944968efd7502678910169a"},
 ]
 
 [[package]]
diff --git a/pyproject.toml b/pyproject.toml
index ca5733857..0b38636a4 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -19,7 +19,7 @@ dependencies = [
     "tzdata==2023.3",
     "pyinfra==2.7",
     "semver==2.13.0",
-    "bazel-runfiles==0.25.0",
+    "bazel-runfiles==0.27.1",
     "requests==2.31.0",
     "pyOpenSSL==23.1.0",
     "setuptools>=68.2.2",
diff --git a/rules/rules_task/requirements.in b/rules/rules_task/requirements.in
index e4ab898b3..bc70902fb 100644
--- a/rules/rules_task/requirements.in
+++ b/rules/rules_task/requirements.in
@@ -1,5 +1,5 @@
 Jinja2==3.1.2;
-bazel-runfiles==0.25.0;
+bazel-runfiles==0.27.1;
 pytest==7.3.1;
 pytest-cov==3.0.0;
 black==23.3.0;
diff --git a/rules/rules_task/requirements.txt b/rules/rules_task/requirements.txt
index c24aa4d24..d4eceda54 100644
--- a/rules/rules_task/requirements.txt
+++ b/rules/rules_task/requirements.txt
@@ -4,8 +4,8 @@
 #
 #    pip-compile --allow-unsafe --generate-hashes requirements.in
 #
-bazel-runfiles==0.25.0 \
-    --hash=sha256:f74c1865bbb27824c21775a76d6939206eaa3be75106093ee11615875dd2c935
+bazel-runfiles==0.27.1 \
+    --hash=sha256:89ae658e4e6e8714db99bea0e5a4c9c6b171316fc944968efd7502678910169a
     # via -r requirements.in
 black==23.3.0 \
     --hash=sha256:064101748afa12ad2291c2b91c960be28b817c0c7eaa35bec09cc63aa56493c5 \
@@ -97,7 +97,9 @@ coverage[toml]==7.3.1 \
     --hash=sha256:f1a317fdf5c122ad642db8a97964733ab7c3cf6009e1a8ae8821089993f175ff \
     --hash=sha256:f2781fd3cabc28278dc982a352f50c81c09a1a500cc2086dc4249853ea96b981 \
     --hash=sha256:f4f456590eefb6e1b3c9ea6328c1e9fa0f1006e7481179d749b3376fc793478e
-    # via pytest-cov
+    # via
+    #   coverage
+    #   pytest-cov
 deepdiff==6.6.0 \
     --hash=sha256:d78e8a83c8f5b223008983144308b214e29a25fc37a3354148e7eddacd0f9bb1 \
     --hash=sha256:e96424a57befa3f85238d10d9fb73d7a8cfd2228f1c2ab3cedd58b97d2acd80e