diff --git a/Pipfile b/Pipfile
index cf5265b07..babd6dc30 100644
--- a/Pipfile
+++ b/Pipfile
@@ -95,7 +95,7 @@ urllib3 = "==1.26.19"
 "webob" = "==1.8.7"
 "zope.deprecation" = "==4.4.0"
 cee-syslog-handler = "==0.5.0"
-setuptools = "==45.2.0"
+setuptools = "==70.0.0"
 charset-normalizer = "==3.1.0"
 
 [requires]
diff --git a/Pipfile.lock b/Pipfile.lock
index 3a72b3950..399300310 100644
--- a/Pipfile.lock
+++ b/Pipfile.lock
@@ -1,7 +1,7 @@
 {
     "_meta": {
         "hash": {
-            "sha256": "d063f22d8463cfa168f5bc42ce9fa1f9737c4aa04c2d2dd2a667cef8d6f176a5"
+            "sha256": "31c864c465281b60c55910d8dbb89416087441748a52f9419340cfca7d75b080"
         },
         "pipfile-spec": 6,
         "requires": {
@@ -29,7 +29,7 @@
                 "sha256:4640d96be84d82d02ed59ea2b7105a0f7b33abe8703703cd0ab0bf87c427522f",
                 "sha256:7405140ff1230c310e51dc27b3145b9092d659ce68ff733fb0cefe3ee42be028"
             ],
-            "markers": "python_version >= '3.7'",
+            "markers": "python_full_version >= '3.7.0'",
             "version": "==4.0.3"
         },
         "boltons": {
@@ -543,11 +543,11 @@
         },
         "setuptools": {
             "hashes": [
-                "sha256:316484eebff54cc18f322dea09ed031b7e3eb00811b19dcedb09bc09bba7d93d",
-                "sha256:89c6e6011ec2f6d57d43a3f9296c4ef022c2cbf49bab26b407fe67992ae3397f"
+                "sha256:54faa7f2e8d2d11bcd2c07bed282eef1046b5c080d1c32add737d7b5817b1ad4",
+                "sha256:f211a66637b8fa059bb28183da127d4e86396c991a942b028c6650d4319c3fd0"
             ],
             "index": "pypi",
-            "version": "==45.2.0"
+            "version": "==70.0.0"
         },
         "simplejson": {
             "hashes": [
diff --git a/acceptance_tests/app/Pipfile b/acceptance_tests/app/Pipfile
index 93c5d7349..34e54dce3 100644
--- a/acceptance_tests/app/Pipfile
+++ b/acceptance_tests/app/Pipfile
@@ -5,7 +5,7 @@ name = "pypi"
 
 [packages]
 pipenv = "==2022.4.30"
-setuptools = "==65.5.1"
+setuptools = "==70.0.0"
 # Lock dependencies
 "backports.entry-points-selectable" = "==1.1.1"
 certifi = "==2024.7.4"
diff --git a/acceptance_tests/app/Pipfile.lock b/acceptance_tests/app/Pipfile.lock
index 3266f3057..90f052669 100644
--- a/acceptance_tests/app/Pipfile.lock
+++ b/acceptance_tests/app/Pipfile.lock
@@ -1,7 +1,7 @@
 {
     "_meta": {
         "hash": {
-            "sha256": "4fc0a71251d972a8bdf31eb55e33b016281f2180624f833d3369515326ad6987"
+            "sha256": "2b0e056d76e7ec01e214e1e05b0abbab16247c65e88915f5f5700f3c8f953a74"
         },
         "pipfile-spec": 6,
         "requires": {
@@ -74,11 +74,11 @@
         },
         "setuptools": {
             "hashes": [
-                "sha256:d0b9a8433464d5800cbe05094acf5c6d52a91bfac9b52bcfc4d41382be5d5d31",
-                "sha256:e197a19aa8ec9722928f2206f8de752def0e4c9fc6953527360d1c36d94ddb2f"
+                "sha256:54faa7f2e8d2d11bcd2c07bed282eef1046b5c080d1c32add737d7b5817b1ad4",
+                "sha256:f211a66637b8fa059bb28183da127d4e86396c991a942b028c6650d4319c3fd0"
             ],
             "index": "pypi",
-            "version": "==65.5.1"
+            "version": "==70.0.0"
         },
         "six": {
             "hashes": [
@@ -377,11 +377,11 @@
         },
         "setuptools": {
             "hashes": [
-                "sha256:d0b9a8433464d5800cbe05094acf5c6d52a91bfac9b52bcfc4d41382be5d5d31",
-                "sha256:e197a19aa8ec9722928f2206f8de752def0e4c9fc6953527360d1c36d94ddb2f"
+                "sha256:54faa7f2e8d2d11bcd2c07bed282eef1046b5c080d1c32add737d7b5817b1ad4",
+                "sha256:f211a66637b8fa059bb28183da127d4e86396c991a942b028c6650d4319c3fd0"
             ],
             "index": "pypi",
-            "version": "==65.5.1"
+            "version": "==70.0.0"
         },
         "snowballstemmer": {
             "hashes": [
diff --git a/ci/requirements.txt b/ci/requirements.txt
index 309426449..5a0544627 100644
--- a/ci/requirements.txt
+++ b/ci/requirements.txt
@@ -10,3 +10,4 @@ black>=24.3.0 # not directly required, pinned by Snyk to avoid a vulnerability
 idna>=3.7 # not directly required, pinned by Snyk to avoid a vulnerability
 tqdm>=4.66.3 # not directly required, pinned by Snyk to avoid a vulnerability
 requests>=2.32.2 # not directly required, pinned by Snyk to avoid a vulnerability
+setuptools>=70.0.0 # not directly required, pinned by Snyk to avoid a vulnerability