diff --git a/images/hub/requirements.txt b/images/hub/requirements.txt
index 53d8a27654..e8cea6ff88 100644
--- a/images/hub/requirements.txt
+++ b/images/hub/requirements.txt
@@ -6,7 +6,7 @@
 #
 aiohappyeyeballs==2.6.1
     # via aiohttp
-aiohttp==3.11.16
+aiohttp==3.11.18
     # via kubernetes-asyncio
 aiosignal==1.3.2
     # via aiohttp
@@ -27,7 +27,7 @@ bcrypt==4.3.0
     #   jupyterhub-nativeauthenticator
 cachetools==5.5.2
     # via google-auth
-certifi==2025.1.31
+certifi==2025.4.26
     # via
     #   kubernetes-asyncio
     #   requests
@@ -35,9 +35,9 @@ certipy==0.2.2
     # via jupyterhub
 cffi==1.17.1
     # via cryptography
-charset-normalizer==3.4.1
+charset-normalizer==3.4.2
     # via requests
-cryptography==44.0.2
+cryptography==45.0.2
     # via
     #   certipy
     #   pyjwt
@@ -47,15 +47,15 @@ escapism==1.0.1
     #   jupyterhub-ltiauthenticator
 fqdn==1.5.1
     # via jsonschema
-frozenlist==1.5.0
+frozenlist==1.6.0
     # via
     #   aiohttp
     #   aiosignal
-google-auth==2.39.0
+google-auth==2.40.1
     # via google-auth-oauthlib
-google-auth-oauthlib==1.2.1
+google-auth-oauthlib==1.2.2
     # via oauthenticator
-greenlet==3.1.1
+greenlet==3.2.2
     # via sqlalchemy
 idna==3.10
     # via
@@ -75,7 +75,7 @@ jsonschema==4.23.0
     # via
     #   jupyter-events
     #   oauthenticator
-jsonschema-specifications==2024.10.1
+jsonschema-specifications==2025.4.1
     # via jsonschema
 jupyter-events==0.12.0
     # via jupyterhub
@@ -104,7 +104,7 @@ jupyterhub-nativeauthenticator==1.3.0
     # via -r unfrozen/requirements.txt
 jupyterhub-tmpauthenticator==1.0.0
     # via -r unfrozen/requirements.txt
-kubernetes-asyncio==32.3.0
+kubernetes-asyncio==32.3.2
     # via jupyterhub-kubespawner
 ldap3==2.9.1
     # via jupyterhub-ldapauthenticator
@@ -130,14 +130,14 @@ oauthlib==3.2.2
     #   requests-oauthlib
 onetimepass==1.0.1
     # via jupyterhub-nativeauthenticator
-packaging==24.2
+packaging==25.0
     # via
     #   jupyter-events
     #   jupyterhub
     #   jupyterhub-idle-culler
 pamela==1.2.0
     # via jupyterhub
-prometheus-client==0.21.1
+prometheus-client==0.22.0
     # via jupyterhub
 propcache==0.3.1
     # via
@@ -156,9 +156,9 @@ pycparser==2.22
     # via cffi
 pycurl==7.45.6
     # via -r unfrozen/requirements.txt
-pydantic==2.11.3
+pydantic==2.11.4
     # via jupyterhub
-pydantic-core==2.33.1
+pydantic-core==2.33.2
     # via pydantic
 pyjwt==2.10.1
     # via
@@ -205,11 +205,11 @@ rfc3986-validator==0.1.1
     # via
     #   jsonschema
     #   jupyter-events
-rpds-py==0.24.0
+rpds-py==0.25.0
     # via
     #   jsonschema
     #   referencing
-rsa==4.9
+rsa==4.9.1
     # via google-auth
 ruamel-yaml==0.18.10
     # via oauthenticator
@@ -221,7 +221,7 @@ six==1.17.0
     #   onetimepass
     #   python-dateutil
     #   rfc3339-validator
-sqlalchemy==2.0.40
+sqlalchemy==2.0.41
     # via
     #   alembic
     #   jupyterhub
@@ -232,7 +232,7 @@ statsd==4.0.1
     # via -r unfrozen/requirements.txt
 text-unidecode==1.3
     # via python-slugify
-tornado==6.4.2
+tornado==6.5
     # via
     #   jupyterhub
     #   jupyterhub-idle-culler
@@ -245,7 +245,7 @@ traitlets==5.14.3
     #   jupyterhub-ldapauthenticator
     #   jupyterhub-ltiauthenticator
     #   oauthenticator
-types-python-dateutil==2.9.0.20241206
+types-python-dateutil==2.9.0.20250516
     # via arrow
 typing-extensions==4.13.2
     # via
@@ -266,5 +266,5 @@ urllib3==2.4.0
     #   requests
 webcolors==24.11.1
     # via jsonschema
-yarl==1.19.0
+yarl==1.20.0
     # via aiohttp
diff --git a/images/singleuser-sample/requirements.txt b/images/singleuser-sample/requirements.txt
index e613562359..41a0e0f925 100644
--- a/images/singleuser-sample/requirements.txt
+++ b/images/singleuser-sample/requirements.txt
@@ -28,11 +28,11 @@ attrs==25.3.0
     #   referencing
 babel==2.17.0
     # via jupyterlab-server
-beautifulsoup4==4.13.3
+beautifulsoup4==4.13.4
     # via nbconvert
 bleach==6.2.0
     # via nbconvert
-certifi==2025.1.31
+certifi==2025.4.26
     # via
     #   httpcore
     #   httpx
@@ -43,11 +43,11 @@ cffi==1.17.1
     # via
     #   argon2-cffi-bindings
     #   cryptography
-charset-normalizer==3.4.1
+charset-normalizer==3.4.2
     # via requests
 comm==0.2.2
     # via ipykernel
-cryptography==44.0.2
+cryptography==45.0.2
     # via certipy
 debugpy==1.8.14
     # via ipykernel
@@ -61,11 +61,11 @@ fastjsonschema==2.21.1
     # via nbformat
 fqdn==1.5.1
     # via jsonschema
-greenlet==3.1.1
+greenlet==3.2.2
     # via sqlalchemy
-h11==0.14.0
+h11==0.16.0
     # via httpcore
-httpcore==1.0.8
+httpcore==1.0.9
     # via httpx
 httpx==0.28.1
     # via jupyterlab
@@ -80,7 +80,7 @@ ipykernel==6.29.5
     # via
     #   jupyterlab
     #   nbclassic
-ipython==9.1.0
+ipython==9.2.0
     # via ipykernel
 ipython-genutils==0.2.0
     # via nbclassic
@@ -106,7 +106,7 @@ jsonschema==4.23.0
     #   jupyter-events
     #   jupyterlab-server
     #   nbformat
-jsonschema-specifications==2024.10.1
+jsonschema-specifications==2025.4.1
     # via jsonschema
 jupyter-client==8.6.3
     # via
@@ -128,7 +128,7 @@ jupyter-events==0.12.0
     #   jupyterhub
 jupyter-lsp==2.2.5
     # via jupyterlab
-jupyter-server==2.15.0
+jupyter-server==2.16.0
     # via
     #   jupyter-lsp
     #   jupyterlab
@@ -139,7 +139,7 @@ jupyter-server-terminals==0.5.3
     # via jupyter-server
 jupyterhub==5.3.0
     # via -r unfrozen/requirements.txt
-jupyterlab==4.4.0
+jupyterlab==4.4.2
     # via -r unfrozen/requirements.txt
 jupyterlab-pygments==0.3.0
     # via nbconvert
@@ -158,7 +158,7 @@ matplotlib-inline==0.1.7
     #   ipython
 mistune==3.1.3
     # via nbconvert
-nbclassic==1.2.0
+nbclassic==1.3.1
     # via -r unfrozen/requirements.txt
 nbclient==0.10.2
     # via nbconvert
@@ -183,7 +183,7 @@ oauthlib==3.2.2
     # via jupyterhub
 overrides==7.7.0
     # via jupyter-server
-packaging==24.2
+packaging==25.0
     # via
     #   ipykernel
     #   jupyter-events
@@ -200,9 +200,9 @@ parso==0.8.4
     # via jedi
 pexpect==4.9.0
     # via ipython
-platformdirs==4.3.7
+platformdirs==4.3.8
     # via jupyter-core
-prometheus-client==0.21.1
+prometheus-client==0.22.0
     # via
     #   jupyter-server
     #   jupyterhub
@@ -218,9 +218,9 @@ pure-eval==0.2.3
     # via stack-data
 pycparser==2.22
     # via cffi
-pydantic==2.11.3
+pydantic==2.11.4
     # via jupyterhub
-pydantic-core==2.33.1
+pydantic-core==2.33.2
     # via pydantic
 pygments==2.19.1
     # via
@@ -258,7 +258,7 @@ rfc3986-validator==0.1.1
     # via
     #   jsonschema
     #   jupyter-events
-rpds-py==0.24.0
+rpds-py==0.25.0
     # via
     #   jsonschema
     #   referencing
@@ -270,9 +270,9 @@ six==1.17.0
     #   rfc3339-validator
 sniffio==1.3.1
     # via anyio
-soupsieve==2.6
+soupsieve==2.7
     # via beautifulsoup4
-sqlalchemy==2.0.40
+sqlalchemy==2.0.41
     # via
     #   alembic
     #   jupyterhub
@@ -284,7 +284,7 @@ terminado==0.18.1
     #   jupyter-server-terminals
 tinycss2==1.4.0
     # via bleach
-tornado==6.4.2
+tornado==6.5
     # via
     #   ipykernel
     #   jupyter-client
@@ -308,7 +308,7 @@ traitlets==5.14.3
     #   nbclient
     #   nbconvert
     #   nbformat
-types-python-dateutil==2.9.0.20241206
+types-python-dateutil==2.9.0.20250516
     # via arrow
 typing-extensions==4.13.2
     # via
@@ -338,5 +338,5 @@ websocket-client==1.8.0
     # via jupyter-server
 
 # The following packages are considered to be unsafe in a requirements file:
-setuptools==78.1.0
+setuptools==80.7.1
     # via jupyterlab