diff --git a/requirements.pinned.txt b/requirements.pinned.txt
index 78fbaf99a..cda8dad1f 100644
--- a/requirements.pinned.txt
+++ b/requirements.pinned.txt
@@ -1,5 +1,6 @@
 alembic==1.16.5
 amqp==5.3.1
+appdirs==1.4.4
 arrow==1.4.0
 asttokens==3.0.2
 async-timeout==5.0.1
@@ -21,11 +22,14 @@ click-default-group==1.2.4
 click-didyoumean==0.3.1
 click-plugins==1.1.1.2
 click-repl==0.3.0
+commonmark==0.9.1
 counter-robots==2025.11
 cryptography==50.0.1
+dbus-python==1.2.18
 decorator==5.3.1
 Deprecated==1.3.1
 dictdiffer==0.10.0
+distlib==0.3.8
 dnspython==2.7.0
 dojson==1.7.1
 edtf==5.0.0
@@ -33,6 +37,7 @@ email-validator==2.3.0
 Events==0.5
 exceptiongroup==1.3.1
 executing==2.2.1
+filelock==3.13.1
 Flask==3.1.3
 Flask-Alembic==3.1.1
 flask-babel==4.0.0
@@ -55,11 +60,13 @@ Flask-SQLAlchemy==3.1.1
 flask-talisman==0.8.1
 flask-webpackext==2.1.1
 Flask-WTF==1.2.2
+fs==2.4.16
 ftfy==6.3.1
 future==1.0.0
 fuzzywuzzy==0.18.0
 geojson==3.2.0
 github3.py==4.0.1
+gpg==1.15.1
 greenlet==3.2.5
 idna==3.19
 idutils==1.7.0
@@ -119,6 +126,7 @@ jsonresolver==0.5.2
 jsonschema==4.25.1
 jsonschema-specifications==2025.9.1
 kombu==5.6.2
+libcomps==0.1.18
 libpass==1.9.3
 limits==4.2
 lorem==0.1.1
@@ -142,8 +150,11 @@ ordered-set==4.1.0
 ordereddict==1.1
 packaging==24.2
 parso==0.8.7
+passlib==1.7.4
 pexpect==4.9.0
 pillow==11.3.0
+pipenv==2023.12.1
+platformdirs==4.2.0
 pluggy==1.6.0
 ply==3.11
 polib==1.2.0
@@ -174,15 +185,17 @@ requests-oauthlib==2.0.0
 rich==13.9.4
 rich-click==1.9.8
 rpds-py==0.27.1
+rpm==4.16.1.3
 sentry-sdk==1.45.1
 simplejson==3.20.2
 simplekv==0.14.1
-six==1.17.0
+six==1.15.0
 speaklater==1.3
 SQLAlchemy==2.0.52
 SQLAlchemy-Continuum==1.5.2
 SQLAlchemy-Utils==0.41.2
 stack-data==0.6.3
+systemd-python==234
 tinycss2==1.4.0
 tomli==2.4.1
 traitlets==5.15.1
@@ -195,6 +208,7 @@ uritools==5.0.0
 urllib3==1.26.20
 validators==0.35.0
 vine==5.1.0
+virtualenv==20.25.1
 Wand==0.6.13
 watchdog==6.0.0
 wcwidth==0.8.3
diff --git a/setup.cfg b/setup.cfg
index 66ee48644..6746e8f57 100644
--- a/setup.cfg
+++ b/setup.cfg
@@ -29,6 +29,8 @@ install_requires =
     python-ldap>=3.4.0,<3.5.0
     invenio-app-ils[lorem,opensearch2]>=8.0.0,<9.0.0
     sentry-sdk>=1.45,<2.0.0
+    # invenio-xrootd requires it
+    fs>=2.0.10,<3.0
     # migrator deps
     cds-dojson==0.13.0
     lxml>=4.6.5