diff --git a/cds_ils/vocabularies/data/tags.json b/cds_ils/vocabularies/data/tags.json
index 40e691e00..f64ad3f95 100644
--- a/cds_ils/vocabularies/data/tags.json
+++ b/cds_ils/vocabularies/data/tags.json
@@ -43,5 +43,10 @@
     "type": "tag",
     "key": "DIVERSITY_AND_INCLUSION",
     "text": "Diversity and Inclusion"
+  },
+  {
+    "type": "tag",
+    "key": "DRO",
+    "text": "DRO"
   }
 ]
diff --git a/requirements.pinned.txt b/requirements.pinned.txt
index 4054d4944..6bb4ba762 100644
--- a/requirements.pinned.txt
+++ b/requirements.pinned.txt
@@ -1,10 +1,9 @@
-alembic==1.16.5
+alembic==1.16.4
 amqp==5.3.1
 appdirs==1.4.4
 arrow==1.4.0
 asttokens==3.0.1
-async-timeout==5.0.1
-attrs==25.4.0
+attrs==26.1.0
 babel==2.18.0
 babel-edtf==1.2.1
 base32-lib==1.0.2
@@ -16,7 +15,7 @@ cds-dojson==0.13.0
 celery==5.3.6
 certifi==2026.2.25
 cffi==2.0.0
-charset-normalizer==3.4.4
+charset-normalizer==3.4.7
 click==8.1.8
 click-default-group==1.2.4
 click-didyoumean==0.3.1
@@ -24,7 +23,7 @@ click-plugins==1.1.1.2
 click-repl==0.3.0
 commonmark==0.9.1
 counter-robots==2025.11
-cryptography==46.0.5
+cryptography==46.0.7
 decorator==5.2.1
 Deprecated==1.3.1
 dictdiffer==0.9.0
@@ -33,7 +32,6 @@ dojson==1.7.0
 edtf==5.0.0
 email-validator==2.3.0
 Events==0.5
-exceptiongroup==1.3.1
 executing==2.2.1
 Flask==3.1.3
 Flask-Alembic==3.1.1
@@ -43,15 +41,15 @@ Flask-CeleryExt==0.5.0
 Flask-Collect-Invenio==1.4.0
 flask-cors==6.0.2
 Flask-DebugToolbar==0.16.0
-Flask-KVSession-Invenio==0.6.4
+Flask-KVSession-Invenio==1.0.0
 Flask-Limiter==2.9.2
 Flask-Login==0.6.3
 Flask-Mail==0.9.1
 flask-menu==2.0.0
-Flask-OAuthlib-Invenio==1.1.2
+Flask-OAuthlib-Invenio==2.0.0
 Flask-Principal==0.4.0
 flask-resources==1.3.0
-Flask-Security-Invenio==3.8.3
+Flask-Security-Invenio==4.2.0
 flask-shell-ipython==0.5.3
 Flask-SQLAlchemy==3.1.1
 flask-talisman==0.8.1
@@ -65,51 +63,52 @@ geojson==3.2.0
 github3.py==4.0.1
 greenlet==3.2.5
 idna==3.11
-idutils==1.5.1
+idutils==1.6.0
 importlib_metadata==8.7.1
 importlib_resources==6.5.2
 infinity==1.5
 intervals==0.9.2
-invenio-access==4.2.1
-invenio-accounts==6.3.0
-invenio-administration==4.4.0
-invenio-app==2.3.0
-invenio-app-ils==7.3.0
+invenio-access==5.1.0
+invenio-accounts==7.1.0
+invenio-administration==5.2.0
+invenio-app==3.0.0
+invenio-app-ils@git+https://github.com/inveniosoftware/invenio-app-ils@master
 invenio-assets==4.2.1
-invenio-banners==5.2.1
+invenio-banners==6.0.0
 invenio-base==2.4.0
-invenio-cache==2.1.0
+invenio-cache==3.0.0
 invenio-celery==2.2.0
 invenio-circulation==4.0.0
 invenio-config==1.1.0
-invenio-db==2.3.0
-invenio-files-rest==3.4.1
-invenio-formatter==3.3.1
+invenio-db==2.5.0
+invenio-files-rest==4.1.0
+invenio-formatter==4.0.0
 invenio-i18n==3.5.0
-invenio-indexer==3.1.0
+invenio-indexer==4.0.0
 invenio-jsonschemas==2.1.0
 invenio-logging==4.1.1
 invenio-mail==2.3.0
-invenio-oaiserver==3.7.4
-invenio-oauth2server==3.3.3
-invenio-oauthclient==6.1.3
+invenio-oaiserver==4.0.1
+invenio-oauth2server==4.0.0
+invenio-oauthclient==7.0.0
 invenio-opendefinition==2.0.0a2
-invenio-pages==7.3.0
+invenio-pages==8.0.0
 invenio-pidrelations==1.0.0
-invenio-pidstore==2.2.2
+invenio-pidstore==3.0.0
 invenio-query-parser==0.6.0
 invenio-queues==1.0.2
-invenio-records==3.1.1
-invenio-records-permissions==1.2.1
-invenio-records-resources==8.8.0
-invenio-records-rest==3.2.1
-invenio-rest==2.0.5
+invenio-records==4.0.0
+invenio-records-permissions==2.0.1
+invenio-records-resources==9.2.0
+invenio-records-rest==4.1.0
+invenio-rest==3.0.1
 invenio-search==3.1.2
 invenio-search-ui==4.2.0
-invenio-stats==5.1.1
-invenio-theme==4.5.0
-invenio-userprofiles==4.1.1
+invenio-stats==6.1.2
+invenio-theme==4.6.0
+invenio-userprofiles==5.1.0
 ipython==8.18.1
+ipython_pygments_lexers==1.1.1
 isbnlib==3.10.14
 itsdangerous==2.2.0
 jedi==0.19.2
@@ -118,10 +117,11 @@ jsmin==3.0.1
 jsonpatch==1.33
 jsonpointer==3.0.0
 jsonref==1.1.0
-jsonresolver==0.5.0
+jsonresolver==0.5.1
 jsonschema==4.25.1
 jsonschema-specifications==2025.9.1
 kombu==5.6.2
+libpass==1.9.3
 limits==4.2
 lorem==0.1.1
 luqum==1.0.0
@@ -142,7 +142,7 @@ ordered-set==4.1.0
 ordereddict==1.1
 packaging==24.2
 parso==0.8.6
-libpass==1.9.3
+passlib==1.7.4
 pexpect==4.9.0
 pillow==11.3.0
 pluggy==1.6.0
@@ -152,12 +152,12 @@ prompt_toolkit==3.0.52
 psycopg2-binary==2.9.11
 ptyprocess==0.7.0
 pure_eval==0.2.3
-pyasn1==0.6.2
+pyasn1==0.6.3
 pyasn1_modules==0.4.2
 pycountry==24.6.1
 pycparser==2.23
-Pygments==2.19.2
-PyJWT==2.11.0
+Pygments==2.20.0
+PyJWT==2.12.1
 PyMySQL==1.1.2
 pynpm==0.3.0
 pyparsing==3.3.2
@@ -176,11 +176,12 @@ rich==12.6.0
 rich-click==1.9.7
 rpds-py==0.27.1
 sentry-sdk==1.45.1
+setuptools==82.0.1
 simplejson==3.20.2
 simplekv==0.14.1
 six==1.17.0
 speaklater==1.3
-SQLAlchemy==2.0.47
+SQLAlchemy==2.0.49
 SQLAlchemy-Continuum==1.5.2
 SQLAlchemy-Utils==0.41.2
 stack-data==0.6.3
@@ -199,10 +200,10 @@ vine==5.1.0
 Wand==0.6.13
 watchdog==6.0.0
 wcwidth==0.6.0
-webargs==5.5.3
+webargs==8.7.1
 webencodings==0.5.1
-Werkzeug==3.1.6
-wrapt==2.1.1
+Werkzeug==3.1.8
+wrapt==2.1.2
 WTForms==3.2.1
 WTForms-Alchemy==0.19.1
 WTForms-Components==0.11.0