diff --git a/constraints.txt b/constraints.txt
index 1e8c76154f..181f4662ab 100644
--- a/constraints.txt
+++ b/constraints.txt
@@ -11,7 +11,13 @@ Paste==3.7.1
 PasteDeploy==2.1.1; python_version == '3.7'
 PasteDeploy==3.1.0; python_version > '3.7'
 Persistence==4.1
-RestrictedPython==7.0
+RestrictedPython==7.1; python_version == '3.10'
+RestrictedPython==7.1; python_version == '3.11'
+RestrictedPython==7.1; python_version == '3.12'
+RestrictedPython==7.1; python_version == '3.7'
+RestrictedPython==7.1; python_version == '3.8'
+RestrictedPython==7.1; python_version == '3.9'
+RestrictedPython==7.2a1.dev0; python_version > '3.12'
 WSGIProxy2==0.5.1
 WebOb==1.8.7
 WebTest==3.0.0
diff --git a/requirements-full.txt b/requirements-full.txt
index 94028803ef..3b51a3f080 100644
--- a/requirements-full.txt
+++ b/requirements-full.txt
@@ -12,7 +12,13 @@ Paste==3.7.1
 PasteDeploy==2.1.1; python_version == '3.7'
 PasteDeploy==3.1.0; python_version > '3.7'
 Persistence==4.1
-RestrictedPython==7.0
+RestrictedPython==7.1; python_version == '3.10'
+RestrictedPython==7.1; python_version == '3.11'
+RestrictedPython==7.1; python_version == '3.12'
+RestrictedPython==7.1; python_version == '3.7'
+RestrictedPython==7.1; python_version == '3.8'
+RestrictedPython==7.1; python_version == '3.9'
+RestrictedPython==7.2a1.dev0; python_version > '3.12'
 WSGIProxy2==0.5.1
 WebOb==1.8.7
 WebTest==3.0.0
diff --git a/versions-prod.cfg b/versions-prod.cfg
index cdf37e1aed..0e96f7b610 100644
--- a/versions-prod.cfg
+++ b/versions-prod.cfg
@@ -16,7 +16,7 @@ MultiMapping = 5.0
 Paste = 3.7.1
 PasteDeploy = 3.1.0
 Persistence = 4.1
-RestrictedPython = 7.0
+RestrictedPython = 7.2a1.dev0
 WebTest = 3.0.0
 WSGIProxy2 = 0.5.1
 WebOb = 1.8.7
@@ -89,3 +89,25 @@ PasteDeploy = 2.1.1
 soupsieve = 2.4.1
 # cffi 1.16.0 requires Python 3.8
 cffi = 1.15.1
+# Use newest final release
+RestrictedPython = 7.1
+
+[versions:python38]
+# Use newest final release
+RestrictedPython = 7.1
+
+[versions:python39]
+# Use newest final release
+RestrictedPython = 7.1
+
+[versions:python310]
+# Use newest final release
+RestrictedPython = 7.1
+
+[versions:python311]
+# Use newest final release
+RestrictedPython = 7.1
+
+[versions:python312]
+# Use newest final release
+RestrictedPython = 7.1