diff --git a/images/hub/requirements.txt b/images/hub/requirements.txt
index 2c369c6b33..5666875704 100644
--- a/images/hub/requirements.txt
+++ b/images/hub/requirements.txt
@@ -6,11 +6,11 @@
 #
 aiohappyeyeballs==2.6.1
     # via aiohttp
-aiohttp==3.13.1
+aiohttp==3.13.2
     # via kubernetes-asyncio
 aiosignal==1.4.0
     # via aiohttp
-alembic==1.17.0
+alembic==1.17.2
     # via jupyterhub
 annotated-types==0.7.0
     # via pydantic
@@ -25,9 +25,9 @@ bcrypt==5.0.0
     # via
     #   jupyterhub-firstuseauthenticator
     #   jupyterhub-nativeauthenticator
-cachetools==6.2.1
+cachetools==6.2.2
     # via google-auth
-certifi==2025.10.5
+certifi==2025.11.12
     # via
     #   kubernetes-asyncio
     #   requests
@@ -53,7 +53,7 @@ frozenlist==1.8.0
     #   aiosignal
 google-auth==2.41.1
     # via google-auth-oauthlib
-google-auth-oauthlib==1.2.2
+google-auth-oauthlib==1.2.3
     # via oauthenticator
 greenlet==3.2.4
     # via sqlalchemy
@@ -106,7 +106,7 @@ jupyterhub-tmpauthenticator==1.0.0
     # via -r unfrozen/requirements.txt
 kubernetes-asyncio==33.3.0
     # via jupyterhub-kubespawner
-lark==1.3.0
+lark==1.3.1
     # via rfc3987-syntax
 ldap3==2.9.1
     # via jupyterhub-ldapauthenticator
@@ -158,9 +158,9 @@ pycparser==2.23
     # via cffi
 pycurl==7.45.7
     # via -r unfrozen/requirements.txt
-pydantic==2.12.3
+pydantic==2.12.5
     # via jupyterhub
-pydantic-core==2.41.4
+pydantic-core==2.41.5
     # via pydantic
 pyjwt==2.10.1
     # via
@@ -209,7 +209,7 @@ rfc3986-validator==0.1.1
     #   jupyter-events
 rfc3987-syntax==1.1.0
     # via jsonschema
-rpds-py==0.28.0
+rpds-py==0.30.0
     # via
     #   jsonschema
     #   referencing
@@ -217,7 +217,7 @@ rsa==4.9.1
     # via google-auth
 ruamel-yaml==0.18.16
     # via oauthenticator
-ruamel-yaml-clib==0.2.14
+ruamel-yaml-clib==0.2.15
     # via ruamel-yaml
 six==1.17.0
     # via
@@ -269,7 +269,7 @@ urllib3==2.5.0
     #   jupyterhub-kubespawner
     #   kubernetes-asyncio
     #   requests
-webcolors==24.11.1
+webcolors==25.10.0
     # via jsonschema
 yarl==1.22.0
     # via aiohttp
diff --git a/images/singleuser-sample/requirements.txt b/images/singleuser-sample/requirements.txt
index a891837657..a9bdcbc330 100644
--- a/images/singleuser-sample/requirements.txt
+++ b/images/singleuser-sample/requirements.txt
@@ -4,11 +4,11 @@
 #
 #    Use the "Run workflow" button at https://github.com/jupyterhub/zero-to-jupyterhub-k8s/actions/workflows/watch-dependencies.yaml
 #
-alembic==1.17.0
+alembic==1.17.2
     # via jupyterhub
 annotated-types==0.7.0
     # via pydantic
-anyio==4.11.0
+anyio==4.12.0
     # via
     #   httpx
     #   jupyter-server
@@ -18,7 +18,7 @@ argon2-cffi-bindings==25.1.0
     # via argon2-cffi
 arrow==1.4.0
     # via isoduration
-asttokens==3.0.0
+asttokens==3.0.1
     # via stack-data
 async-lru==2.0.5
     # via jupyterlab
@@ -28,11 +28,11 @@ attrs==25.4.0
     #   referencing
 babel==2.17.0
     # via jupyterlab-server
-beautifulsoup4==4.14.2
+beautifulsoup4==4.14.3
     # via nbconvert
-bleach==6.2.0
+bleach==6.3.0
     # via nbconvert
-certifi==2025.10.5
+certifi==2025.11.12
     # via
     #   httpcore
     #   httpx
@@ -76,11 +76,11 @@ idna==3.11
     #   jsonschema
     #   jupyterhub
     #   requests
-ipykernel==7.0.1
+ipykernel==7.1.0
     # via
     #   jupyterlab
     #   nbclassic
-ipython==9.6.0
+ipython==9.7.0
     # via ipykernel
 ipython-genutils==0.2.0
     # via nbclassic
@@ -139,13 +139,13 @@ jupyter-server-terminals==0.5.3
     # via jupyter-server
 jupyterhub==5.4.2
     # via -r unfrozen/requirements.txt
-jupyterlab==4.4.10
+jupyterlab==4.5.0
     # via -r unfrozen/requirements.txt
 jupyterlab-pygments==0.3.0
     # via nbconvert
 jupyterlab-server==2.28.0
     # via jupyterlab
-lark==1.3.0
+lark==1.3.1
     # via rfc3987-syntax
 mako==1.3.10
     # via alembic
@@ -208,7 +208,7 @@ prometheus-client==0.23.1
     #   jupyterhub
 prompt-toolkit==3.0.52
     # via ipython
-psutil==7.1.1
+psutil==7.1.3
     # via ipykernel
 ptyprocess==0.7.0
     # via
@@ -218,9 +218,9 @@ pure-eval==0.2.3
     # via stack-data
 pycparser==2.23
     # via cffi
-pydantic==2.12.3
+pydantic==2.12.5
     # via jupyterhub
-pydantic-core==2.41.4
+pydantic-core==2.41.5
     # via pydantic
 pygments==2.19.2
     # via
@@ -260,7 +260,7 @@ rfc3986-validator==0.1.1
     #   jupyter-events
 rfc3987-syntax==1.1.0
     # via jsonschema
-rpds-py==0.28.0
+rpds-py==0.30.0
     # via
     #   jsonschema
     #   referencing
@@ -270,8 +270,6 @@ six==1.17.0
     # via
     #   python-dateutil
     #   rfc3339-validator
-sniffio==1.3.1
-    # via anyio
 soupsieve==2.8
     # via beautifulsoup4
 sqlalchemy==2.0.44
@@ -329,7 +327,7 @@ urllib3==2.5.0
     # via requests
 wcwidth==0.2.14
     # via prompt-toolkit
-webcolors==24.11.1
+webcolors==25.10.0
     # via jsonschema
 webencodings==0.5.1
     # via