diff --git a/lock/requirements-dev-template.in b/lock/requirements-dev-template.in
index 36459d7..6ad64ca 100644
--- a/lock/requirements-dev-template.in
+++ b/lock/requirements-dev-template.in
@@ -3,6 +3,7 @@
 pytest>=8.1
 pytest-asyncio>=0.23
 pytest-cov>=5
+pytest-profiling >= 1.7
 snakeviz>=2.2
 logot>=1.3
 
diff --git a/lock/requirements-dev.txt b/lock/requirements-dev.txt
index 6b64f91..c8967b1 100644
--- a/lock/requirements-dev.txt
+++ b/lock/requirements-dev.txt
@@ -258,6 +258,10 @@ ghga-event-schemas==3.1.0 \
 ghga-service-commons==3.1.2 \
     --hash=sha256:2756ce804a9e50b33b4a58b2604e7b9c974760fd2850bcf418cae634df3791f2 \
     --hash=sha256:34a820178e12178b6465db68869f59d90e46864e5dfd651c9f7b87610690b48a
+gprof2dot==2022.7.29 \
+    --hash=sha256:45b4d298bd36608fccf9511c3fd88a773f7a1abc04d6cd39445b11ba43133ec5 \
+    --hash=sha256:f165b3851d3c52ee4915eb1bd6cca571e5759823c2cd0f71a79bda93c2dc85d6
+    # via pytest-profiling
 h11==0.14.0 \
     --hash=sha256:8f19fbbe99e72420ff35c00b27a34cb9937e902a8b810e2c88300c6f0a3b699d \
     --hash=sha256:e3fe4ac4b851c468cc8363d500db52c2ead036020723024a109d37346efaa761
@@ -611,6 +615,7 @@ pytest==8.1.1 \
     #   pytest-asyncio
     #   pytest-cov
     #   pytest-httpx
+    #   pytest-profiling
 pytest-asyncio==0.23.6 \
     --hash=sha256:68516fdd1018ac57b846c9846b954f0393b26f094764a28c955eabb0536a4e8a \
     --hash=sha256:ffe523a89c1c222598c76856e76852b787504ddb72dd5d9b6617ffa8aa2cde5f
@@ -620,6 +625,9 @@ pytest-cov==5.0.0 \
 pytest-httpx==0.30.0 \
     --hash=sha256:6d47849691faf11d2532565d0c8e0e02b9f4ee730da31687feae315581d7520c \
     --hash=sha256:755b8edca87c974dd4f3605c374fda11db84631de3d163b99c0df5807023a19a
+pytest-profiling==1.7.0 \
+    --hash=sha256:93938f147662225d2b8bd5af89587b979652426a8a6ffd7e73ec4a23e24b7f29 \
+    --hash=sha256:999cc9ac94f2e528e3f5d43465da277429984a1c237ae9818f8cfd0b06acb019
 python-dateutil==2.9.0.post0 \
     --hash=sha256:37dd54208da7e1cd875388217d5e00ebd4179249f90fb72437e91a35459a0ad3 \
     --hash=sha256:a8b2bc7bffae282281c8140a97d3aa9c14da0b136dfe83f850eea9a5f7470427
@@ -837,7 +845,9 @@ shellingham==1.5.4 \
 six==1.16.0 \
     --hash=sha256:1e61c37477a1626458e36f7b1d82aa5c9b094fa4802892072e49de9c60c4c926 \
     --hash=sha256:8abb2f1d86890a2dfb989f9a77cfcfd3e47c2a354b01111771326f8aa26e0254
-    # via python-dateutil
+    # via
+    #   pytest-profiling
+    #   python-dateutil
 snakeviz==2.2.0 \
     --hash=sha256:569e2d71c47f80a886aa6e70d6405cb6d30aa3520969ad956b06f824c5f02b8e \
     --hash=sha256:7bfd00be7ae147eb4a170a471578e1cd3f41f803238958b6b8efcf2c698a6aa9