diff --git a/cibuildwheel/resources/build-platforms.toml b/cibuildwheel/resources/build-platforms.toml
index cbef21ca..50904fdc 100644
--- a/cibuildwheel/resources/build-platforms.toml
+++ b/cibuildwheel/resources/build-platforms.toml
@@ -179,8 +179,8 @@ python_configurations = [
   { identifier = "pp310-macosx_arm64", version = "3.10", url = "https://downloads.python.org/pypy/pypy3.10-v7.3.19-macos_arm64.tar.bz2" },
   { identifier = "pp311-macosx_x86_64", version = "3.11", url = "https://downloads.python.org/pypy/pypy3.11-v7.3.20-macos_x86_64.tar.bz2" },
   { identifier = "pp311-macosx_arm64", version = "3.11", url = "https://downloads.python.org/pypy/pypy3.11-v7.3.20-macos_arm64.tar.bz2" },
-  { identifier = "gp311_242-macosx_x86_64", version = "3.11", url = "https://github.com/oracle/graalpython/releases/download/graal-24.2.1/graalpy-24.2.1-macos-amd64.tar.gz" },
-  { identifier = "gp311_242-macosx_arm64", version = "3.11", url = "https://github.com/oracle/graalpython/releases/download/graal-24.2.1/graalpy-24.2.1-macos-aarch64.tar.gz" },
+  { identifier = "gp311_242-macosx_x86_64", version = "3.11", url = "https://github.com/oracle/graalpython/releases/download/graal-24.2.2/graalpy-24.2.2-macos-amd64.tar.gz" },
+  { identifier = "gp311_242-macosx_arm64", version = "3.11", url = "https://github.com/oracle/graalpython/releases/download/graal-24.2.2/graalpy-24.2.2-macos-aarch64.tar.gz" },
 ]
 
 [windows]
@@ -215,7 +215,7 @@ python_configurations = [
   { identifier = "pp39-win_amd64", version = "3.9", arch = "64", url = "https://downloads.python.org/pypy/pypy3.9-v7.3.16-win64.zip" },
   { identifier = "pp310-win_amd64", version = "3.10", arch = "64", url = "https://downloads.python.org/pypy/pypy3.10-v7.3.19-win64.zip" },
   { identifier = "pp311-win_amd64", version = "3.11", arch = "64", url = "https://downloads.python.org/pypy/pypy3.11-v7.3.20-win64.zip" },
-  { identifier = "gp311_242-win_amd64", version = "3.11", arch = "64", url = "https://github.com/oracle/graalpython/releases/download/graal-24.2.1/graalpy-24.2.1-windows-amd64.zip" },
+  { identifier = "gp311_242-win_amd64", version = "3.11", arch = "64", url = "https://github.com/oracle/graalpython/releases/download/graal-24.2.2/graalpy-24.2.2-windows-amd64.zip" },
 ]
 
 [pyodide]
diff --git a/cibuildwheel/resources/constraints-pyodide312.txt b/cibuildwheel/resources/constraints-pyodide312.txt
index 46e762e7..88a0628b 100644
--- a/cibuildwheel/resources/constraints-pyodide312.txt
+++ b/cibuildwheel/resources/constraints-pyodide312.txt
@@ -21,7 +21,7 @@ click==8.1.8
     # via
     #   -r .nox/update_constraints/tmp/constraints-pyodide.in
     #   typer
-distlib==0.3.9
+distlib==0.4.0
     # via virtualenv
 filelock==3.18.0
     # via virtualenv
@@ -107,7 +107,7 @@ unearth==0.17.5
     # via pyodide-build
 urllib3==2.5.0
     # via requests
-virtualenv==20.31.2
+virtualenv==20.32.0
     # via
     #   build
     #   pyodide-build
diff --git a/cibuildwheel/resources/constraints-pyodide313.txt b/cibuildwheel/resources/constraints-pyodide313.txt
index 5d264949..b713eee5 100644
--- a/cibuildwheel/resources/constraints-pyodide313.txt
+++ b/cibuildwheel/resources/constraints-pyodide313.txt
@@ -21,7 +21,7 @@ click==8.1.8
     # via
     #   -r .nox/update_constraints/tmp/constraints-pyodide.in
     #   typer
-distlib==0.3.9
+distlib==0.4.0
     # via virtualenv
 filelock==3.18.0
     # via virtualenv
@@ -106,7 +106,7 @@ unearth==0.17.5
     # via pyodide-build
 urllib3==2.5.0
     # via requests
-virtualenv==20.31.2
+virtualenv==20.32.0
     # via
     #   build
     #   pyodide-build
diff --git a/cibuildwheel/resources/constraints-python310.txt b/cibuildwheel/resources/constraints-python310.txt
index c0257479..f9ce5861 100644
--- a/cibuildwheel/resources/constraints-python310.txt
+++ b/cibuildwheel/resources/constraints-python310.txt
@@ -6,7 +6,7 @@ build==1.2.2.post1
     # via -r cibuildwheel/resources/constraints.in
 delocate==0.13.0
     # via -r cibuildwheel/resources/constraints.in
-distlib==0.3.9
+distlib==0.4.0
     # via virtualenv
 filelock==3.18.0
     # via virtualenv
@@ -28,7 +28,7 @@ tomli==2.2.1
     # via build
 typing-extensions==4.14.1
     # via delocate
-virtualenv==20.31.2
+virtualenv==20.32.0
     # via -r cibuildwheel/resources/constraints.in
 zipp==3.23.0
     # via importlib-metadata
diff --git a/cibuildwheel/resources/constraints-python311.txt b/cibuildwheel/resources/constraints-python311.txt
index f13abf53..ebe71225 100644
--- a/cibuildwheel/resources/constraints-python311.txt
+++ b/cibuildwheel/resources/constraints-python311.txt
@@ -6,7 +6,7 @@ build==1.2.2.post1
     # via -r cibuildwheel/resources/constraints.in
 delocate==0.13.0
     # via -r cibuildwheel/resources/constraints.in
-distlib==0.3.9
+distlib==0.4.0
     # via virtualenv
 filelock==3.18.0
     # via virtualenv
@@ -24,5 +24,5 @@ pyproject-hooks==1.2.0
     # via build
 typing-extensions==4.14.1
     # via delocate
-virtualenv==20.31.2
+virtualenv==20.32.0
     # via -r cibuildwheel/resources/constraints.in
diff --git a/cibuildwheel/resources/constraints-python312.txt b/cibuildwheel/resources/constraints-python312.txt
index f13abf53..ebe71225 100644
--- a/cibuildwheel/resources/constraints-python312.txt
+++ b/cibuildwheel/resources/constraints-python312.txt
@@ -6,7 +6,7 @@ build==1.2.2.post1
     # via -r cibuildwheel/resources/constraints.in
 delocate==0.13.0
     # via -r cibuildwheel/resources/constraints.in
-distlib==0.3.9
+distlib==0.4.0
     # via virtualenv
 filelock==3.18.0
     # via virtualenv
@@ -24,5 +24,5 @@ pyproject-hooks==1.2.0
     # via build
 typing-extensions==4.14.1
     # via delocate
-virtualenv==20.31.2
+virtualenv==20.32.0
     # via -r cibuildwheel/resources/constraints.in
diff --git a/cibuildwheel/resources/constraints-python313.txt b/cibuildwheel/resources/constraints-python313.txt
index f13abf53..ebe71225 100644
--- a/cibuildwheel/resources/constraints-python313.txt
+++ b/cibuildwheel/resources/constraints-python313.txt
@@ -6,7 +6,7 @@ build==1.2.2.post1
     # via -r cibuildwheel/resources/constraints.in
 delocate==0.13.0
     # via -r cibuildwheel/resources/constraints.in
-distlib==0.3.9
+distlib==0.4.0
     # via virtualenv
 filelock==3.18.0
     # via virtualenv
@@ -24,5 +24,5 @@ pyproject-hooks==1.2.0
     # via build
 typing-extensions==4.14.1
     # via delocate
-virtualenv==20.31.2
+virtualenv==20.32.0
     # via -r cibuildwheel/resources/constraints.in
diff --git a/cibuildwheel/resources/constraints-python314.txt b/cibuildwheel/resources/constraints-python314.txt
index f13abf53..ebe71225 100644
--- a/cibuildwheel/resources/constraints-python314.txt
+++ b/cibuildwheel/resources/constraints-python314.txt
@@ -6,7 +6,7 @@ build==1.2.2.post1
     # via -r cibuildwheel/resources/constraints.in
 delocate==0.13.0
     # via -r cibuildwheel/resources/constraints.in
-distlib==0.3.9
+distlib==0.4.0
     # via virtualenv
 filelock==3.18.0
     # via virtualenv
@@ -24,5 +24,5 @@ pyproject-hooks==1.2.0
     # via build
 typing-extensions==4.14.1
     # via delocate
-virtualenv==20.31.2
+virtualenv==20.32.0
     # via -r cibuildwheel/resources/constraints.in
diff --git a/cibuildwheel/resources/constraints-python38.txt b/cibuildwheel/resources/constraints-python38.txt
index 2c40131f..d0b9afa2 100644
--- a/cibuildwheel/resources/constraints-python38.txt
+++ b/cibuildwheel/resources/constraints-python38.txt
@@ -6,7 +6,7 @@ build==1.2.2.post1
     # via -r cibuildwheel/resources/constraints.in
 delocate==0.12.0
     # via -r cibuildwheel/resources/constraints.in
-distlib==0.3.9
+distlib==0.4.0
     # via virtualenv
 filelock==3.16.1
     # via virtualenv
@@ -28,7 +28,7 @@ tomli==2.2.1
     # via build
 typing-extensions==4.13.2
     # via delocate
-virtualenv==20.31.2
+virtualenv==20.32.0
     # via -r cibuildwheel/resources/constraints.in
 zipp==3.20.2
     # via importlib-metadata
diff --git a/cibuildwheel/resources/constraints-python39.txt b/cibuildwheel/resources/constraints-python39.txt
index c0257479..f9ce5861 100644
--- a/cibuildwheel/resources/constraints-python39.txt
+++ b/cibuildwheel/resources/constraints-python39.txt
@@ -6,7 +6,7 @@ build==1.2.2.post1
     # via -r cibuildwheel/resources/constraints.in
 delocate==0.13.0
     # via -r cibuildwheel/resources/constraints.in
-distlib==0.3.9
+distlib==0.4.0
     # via virtualenv
 filelock==3.18.0
     # via virtualenv
@@ -28,7 +28,7 @@ tomli==2.2.1
     # via build
 typing-extensions==4.14.1
     # via delocate
-virtualenv==20.31.2
+virtualenv==20.32.0
     # via -r cibuildwheel/resources/constraints.in
 zipp==3.23.0
     # via importlib-metadata
diff --git a/cibuildwheel/resources/constraints.txt b/cibuildwheel/resources/constraints.txt
index f13abf53..ebe71225 100644
--- a/cibuildwheel/resources/constraints.txt
+++ b/cibuildwheel/resources/constraints.txt
@@ -6,7 +6,7 @@ build==1.2.2.post1
     # via -r cibuildwheel/resources/constraints.in
 delocate==0.13.0
     # via -r cibuildwheel/resources/constraints.in
-distlib==0.3.9
+distlib==0.4.0
     # via virtualenv
 filelock==3.18.0
     # via virtualenv
@@ -24,5 +24,5 @@ pyproject-hooks==1.2.0
     # via build
 typing-extensions==4.14.1
     # via delocate
-virtualenv==20.31.2
+virtualenv==20.32.0
     # via -r cibuildwheel/resources/constraints.in
diff --git a/cibuildwheel/resources/nodejs.toml b/cibuildwheel/resources/nodejs.toml
index 01ca7aba..ee8bf616 100644
--- a/cibuildwheel/resources/nodejs.toml
+++ b/cibuildwheel/resources/nodejs.toml
@@ -1,3 +1,3 @@
 url = "https://nodejs.org/dist/"
-v22 = "v22.17.0"
-v20 = "v20.19.3"
+v22 = "v22.17.1"
+v20 = "v20.19.4"
diff --git a/cibuildwheel/resources/pinned_docker_images.cfg b/cibuildwheel/resources/pinned_docker_images.cfg
index 7dbc3798..26b0704b 100644
--- a/cibuildwheel/resources/pinned_docker_images.cfg
+++ b/cibuildwheel/resources/pinned_docker_images.cfg
@@ -1,51 +1,51 @@
 [x86_64]
-manylinux2014 = quay.io/pypa/manylinux2014_x86_64:2025.07.14-5
-manylinux_2_28 = quay.io/pypa/manylinux_2_28_x86_64:2025.07.14-5
-manylinux_2_34 = quay.io/pypa/manylinux_2_34_x86_64:2025.07.14-5
-musllinux_1_2 = quay.io/pypa/musllinux_1_2_x86_64:2025.07.14-5
+manylinux2014 = quay.io/pypa/manylinux2014_x86_64:2025.07.20-2
+manylinux_2_28 = quay.io/pypa/manylinux_2_28_x86_64:2025.07.20-2
+manylinux_2_34 = quay.io/pypa/manylinux_2_34_x86_64:2025.07.20-2
+musllinux_1_2 = quay.io/pypa/musllinux_1_2_x86_64:2025.07.20-2
 
 [i686]
-manylinux2014 = quay.io/pypa/manylinux2014_i686:2025.07.14-5
-manylinux_2_28 = quay.io/pypa/manylinux_2_28_i686:2025.07.14-5
-manylinux_2_34 = quay.io/pypa/manylinux_2_34_i686:2025.07.14-5
-musllinux_1_2 = quay.io/pypa/musllinux_1_2_i686:2025.07.14-5
+manylinux2014 = quay.io/pypa/manylinux2014_i686:2025.07.20-2
+manylinux_2_28 = quay.io/pypa/manylinux_2_28_i686:2025.07.20-2
+manylinux_2_34 = quay.io/pypa/manylinux_2_34_i686:2025.07.20-2
+musllinux_1_2 = quay.io/pypa/musllinux_1_2_i686:2025.07.20-2
 
 [aarch64]
-manylinux2014 = quay.io/pypa/manylinux2014_aarch64:2025.07.14-5
-manylinux_2_28 = quay.io/pypa/manylinux_2_28_aarch64:2025.07.14-5
-manylinux_2_34 = quay.io/pypa/manylinux_2_34_aarch64:2025.07.14-5
-musllinux_1_2 = quay.io/pypa/musllinux_1_2_aarch64:2025.07.14-5
+manylinux2014 = quay.io/pypa/manylinux2014_aarch64:2025.07.20-2
+manylinux_2_28 = quay.io/pypa/manylinux_2_28_aarch64:2025.07.20-2
+manylinux_2_34 = quay.io/pypa/manylinux_2_34_aarch64:2025.07.20-2
+musllinux_1_2 = quay.io/pypa/musllinux_1_2_aarch64:2025.07.20-2
 
 [ppc64le]
-manylinux2014 = quay.io/pypa/manylinux2014_ppc64le:2025.07.14-5
-manylinux_2_28 = quay.io/pypa/manylinux_2_28_ppc64le:2025.07.14-5
-manylinux_2_34 = quay.io/pypa/manylinux_2_34_ppc64le:2025.07.14-5
-musllinux_1_2 = quay.io/pypa/musllinux_1_2_ppc64le:2025.07.14-5
+manylinux2014 = quay.io/pypa/manylinux2014_ppc64le:2025.07.20-2
+manylinux_2_28 = quay.io/pypa/manylinux_2_28_ppc64le:2025.07.20-2
+manylinux_2_34 = quay.io/pypa/manylinux_2_34_ppc64le:2025.07.20-2
+musllinux_1_2 = quay.io/pypa/musllinux_1_2_ppc64le:2025.07.20-2
 
 [s390x]
-manylinux2014 = quay.io/pypa/manylinux2014_s390x:2025.07.14-5
-manylinux_2_28 = quay.io/pypa/manylinux_2_28_s390x:2025.07.14-5
-manylinux_2_34 = quay.io/pypa/manylinux_2_34_s390x:2025.07.14-5
-musllinux_1_2 = quay.io/pypa/musllinux_1_2_s390x:2025.07.14-5
+manylinux2014 = quay.io/pypa/manylinux2014_s390x:2025.07.20-2
+manylinux_2_28 = quay.io/pypa/manylinux_2_28_s390x:2025.07.20-2
+manylinux_2_34 = quay.io/pypa/manylinux_2_34_s390x:2025.07.20-2
+musllinux_1_2 = quay.io/pypa/musllinux_1_2_s390x:2025.07.20-2
 
 [pypy_x86_64]
-manylinux2014 = quay.io/pypa/manylinux2014_x86_64:2025.07.14-5
-manylinux_2_28 = quay.io/pypa/manylinux_2_28_x86_64:2025.07.14-5
-manylinux_2_34 = quay.io/pypa/manylinux_2_34_x86_64:2025.07.14-5
+manylinux2014 = quay.io/pypa/manylinux2014_x86_64:2025.07.20-2
+manylinux_2_28 = quay.io/pypa/manylinux_2_28_x86_64:2025.07.20-2
+manylinux_2_34 = quay.io/pypa/manylinux_2_34_x86_64:2025.07.20-2
 
 [pypy_i686]
-manylinux2014 = quay.io/pypa/manylinux2014_i686:2025.07.14-5
-manylinux_2_28 = quay.io/pypa/manylinux_2_28_i686:2025.07.14-5
-manylinux_2_34 = quay.io/pypa/manylinux_2_34_i686:2025.07.14-5
+manylinux2014 = quay.io/pypa/manylinux2014_i686:2025.07.20-2
+manylinux_2_28 = quay.io/pypa/manylinux_2_28_i686:2025.07.20-2
+manylinux_2_34 = quay.io/pypa/manylinux_2_34_i686:2025.07.20-2
 
 [pypy_aarch64]
-manylinux2014 = quay.io/pypa/manylinux2014_aarch64:2025.07.14-5
-manylinux_2_28 = quay.io/pypa/manylinux_2_28_aarch64:2025.07.14-5
-manylinux_2_34 = quay.io/pypa/manylinux_2_34_aarch64:2025.07.14-5
+manylinux2014 = quay.io/pypa/manylinux2014_aarch64:2025.07.20-2
+manylinux_2_28 = quay.io/pypa/manylinux_2_28_aarch64:2025.07.20-2
+manylinux_2_34 = quay.io/pypa/manylinux_2_34_aarch64:2025.07.20-2
 
 [armv7l]
-manylinux_2_31 = quay.io/pypa/manylinux_2_31_armv7l:2025.07.14-5
-musllinux_1_2 = quay.io/pypa/musllinux_1_2_armv7l:2025.07.14-5
+manylinux_2_31 = quay.io/pypa/manylinux_2_31_armv7l:2025.07.20-2
+musllinux_1_2 = quay.io/pypa/musllinux_1_2_armv7l:2025.07.20-2
 
 [riscv64]
 
diff --git a/cibuildwheel/resources/virtualenv.toml b/cibuildwheel/resources/virtualenv.toml
index 9e5d08c2..5eff9df4 100644
--- a/cibuildwheel/resources/virtualenv.toml
+++ b/cibuildwheel/resources/virtualenv.toml
@@ -1 +1 @@
-default = { version = "20.31.2", url = "https://github.com/pypa/get-virtualenv/blob/20.31.2/public/virtualenv.pyz?raw=true" }
+default = { version = "20.32.0", url = "https://github.com/pypa/get-virtualenv/blob/20.32.0/public/virtualenv.pyz?raw=true" }
diff --git a/docs/working-examples.md b/docs/working-examples.md
index 4f3caaa1..4d8012aa 100644
--- a/docs/working-examples.md
+++ b/docs/working-examples.md
@@ -76,13 +76,13 @@ title: Working examples
 | [KDEpy][]                         | ![github icon][] | ![windows icon][] ![apple icon][] ![linux icon][] | Kernel Density Estimation in Python |
 | [dd-trace-py][]                   | ![github icon][] | ![windows icon][] ![apple icon][] ![linux icon][] | Uses custom alternate arch emulation on GitHub |
 | [tgcalls][]                       | ![github icon][] | ![apple icon][] ![windows icon][] | Python `pybind11` binding to Telegram's WebRTC library with third party dependencies like `OpenSSL`, `MozJPEG`, `FFmpeg`, etc. |
-| [pybind11 python_example][]       | ![github icon][] | ![windows icon][] ![apple icon][] ![linux icon][] | Example pybind11 module built with a Python-based build system |
 | [python-rapidjson][]              | ![travisci icon][] ![gitlab icon][] | ![windows icon][] ![linux icon][] | Python wrapper around rapidjson |
+| [pybind11 python_example][]       | ![github icon][] | ![windows icon][] ![apple icon][] ![linux icon][] | Example pybind11 module built with a Python-based build system |
 | [sourmash][]                      | ![github icon][] | ![apple icon][] ![linux icon][] ![windows icon][] | Quickly search, compare, and analyze genomic and metagenomic data sets. |
 | [abess][]                         | ![github icon][] | ![windows icon][] ![apple icon][] ![linux icon][] | A fast best-subset selection library. It uses cibuildwheel to build a large project with C++ extensions. |
 | [python-snappy][]                 | ![github icon][] | ![apple icon][] ![linux icon][] ![windows icon][] | Python bindings for the snappy google library |
-| [jq.py][]                         | ![travisci icon][] | ![apple icon][] ![linux icon][] | Python bindings for jq |
 | [cyvcf2][]                        | ![github icon][] | ![apple icon][] ![linux icon][] | cython + htslib == fast VCF and BCF processing |
+| [jq.py][]                         | ![travisci icon][] | ![apple icon][] ![linux icon][] | Python bindings for jq |
 | [matrixprofile][]                 | ![travisci icon][] | ![windows icon][] ![apple icon][] ![linux icon][] | A Python 3 library making time series data mining tasks, utilizing matrix profile algorithms, accessible to everyone. |
 | [Tokenizer][]                     | ![github icon][] | ![windows icon][] ![apple icon][] ![linux icon][] | Fast and customizable text tokenization library with BPE and SentencePiece support |
 | [Confluent client for Kafka][]    | ![travisci icon][] | ![apple icon][] ![linux icon][] ![windows icon][] | setup in `tools/wheels/build-wheels.bat` |
@@ -186,13 +186,13 @@ title: Working examples
 [KDEpy]: https://github.com/tommyod/KDEpy
 [dd-trace-py]: https://github.com/DataDog/dd-trace-py
 [tgcalls]: https://github.com/MarshalX/tgcalls
-[pybind11 python_example]: https://github.com/pybind/python_example
 [python-rapidjson]: https://github.com/python-rapidjson/python-rapidjson
+[pybind11 python_example]: https://github.com/pybind/python_example
 [sourmash]: https://github.com/sourmash-bio/sourmash
 [abess]: https://github.com/abess-team/abess
 [python-snappy]: https://github.com/intake/python-snappy
-[jq.py]: https://github.com/mwilliamson/jq.py
 [cyvcf2]: https://github.com/brentp/cyvcf2
+[jq.py]: https://github.com/mwilliamson/jq.py
 [matrixprofile]: https://github.com/matrix-profile-foundation/matrixprofile
 [Tokenizer]: https://github.com/OpenNMT/Tokenizer
 [Confluent client for Kafka]: https://github.com/confluentinc/confluent-kafka-python