<i>Some of my projects have double digits dependencies in their requirements.txt file so upgrading one at a time, even with pip list --outdated, would take too long.</i><p>The only solution I know of to this is to &quot;unroll&quot; all those dependencies into your own requirements.txt, and manage them the same way.<p>For some projects I work with this is actually the only option, since I have to use requirements files with hashes and those are all-or-nothing -- even a single dependency-of-a-dependency that doesn&#x27;t specify a hash will break the install, so I have to track down all of them and get a hashed entry into my requirements file.