diff --git a/requirements-test.txt b/requirements-test.txt
index 915367f..e710164 100644
--- a/requirements-test.txt
+++ b/requirements-test.txt
@@ -16,7 +16,7 @@
 #######################################################################################
 asynctest==0.13.0
     # via -r requirements-test.in
-certifi==2025.8.3
+certifi==2025.10.5
     # via requests
 charset-normalizer==3.4.3
     # via
diff --git a/requirements.in b/requirements.in
index 7bdb344..94de7bb 100644
--- a/requirements.in
+++ b/requirements.in
@@ -31,3 +31,4 @@
 pydantic
 randomname
 retrying-async
+urllib3==2.5.0
diff --git a/requirements.txt b/requirements.txt
index 7bcab7e..0012931 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -16,7 +16,7 @@
 #######################################################################################
 aiohappyeyeballs==2.6.1
     # via aiohttp
-aiohttp==3.12.15
+aiohttp==3.13.0
     # via -r requirements.in
 aiosignal==1.4.0
     # via aiohttp
@@ -27,7 +27,7 @@
     #   -r requirements.in
     #   aiohttp
     #   retrying-async
-attrs==25.3.0
+attrs==25.4.0
     # via
     #   aiohttp
     #   glom
@@ -39,7 +39,7 @@
     #   glom
 cachetools==5.5.2
     # via google-auth
-certifi==2025.8.3
+certifi==2025.10.5
     # via
     #   kubernetes
     #   requests
@@ -65,7 +65,7 @@
     # via glom
 fire==0.7.1
     # via randomname
-frozenlist==1.7.0
+frozenlist==1.8.0
     # via
     #   aiohttp
     #   aiosignal
@@ -99,7 +99,7 @@
     # via -r requirements.in
 jujubundlelib==0.5.7
     # via theblues
-kubernetes==34.1.0
+kubernetes==33.1.0
     # via
     #   -r requirements.in
     #   juju
@@ -111,7 +111,7 @@
     # via jinja2
 motor==3.7.1
     # via -r requirements.in
-multidict==6.6.4
+multidict==6.7.0
     # via
     #   aiohttp
     #   grpclib
@@ -119,12 +119,14 @@
 mypy-extensions==1.1.0
     # via typing-inspect
 oauthlib==3.3.1
-    # via requests-oauthlib
+    # via
+    #   kubernetes
+    #   requests-oauthlib
 paramiko==2.12.0
     # via juju
 ply==3.11
     # via jsonpath-ng
-propcache==0.3.2
+propcache==0.4.0
     # via
     #   aiohttp
     #   yarl
@@ -143,9 +145,9 @@
     # via google-auth
 pycparser==2.23
     # via cffi
-pydantic==2.11.9
+pydantic==2.12.0
     # via -r requirements.in
-pydantic-core==2.33.2
+pydantic-core==2.41.1
     # via pydantic
 pymacaroons==0.13.0
     # via macaroonbakery
@@ -212,15 +214,16 @@
     # via juju
 typing-inspection==0.4.2
     # via pydantic
-urllib3==2.3.0
+urllib3==2.5.0
     # via
+    #   -r requirements.in
     #   kubernetes
     #   requests
 websocket-client==1.8.0
     # via kubernetes
 websockets==15.0.1
     # via juju
-yarl==1.20.1
+yarl==1.22.0
     # via aiohttp
 
 # The following packages are considered to be unsafe in a requirements file: