diff --git a/ddev/changelog.d/16687.fixed b/ddev/changelog.d/16687.fixed
new file mode 100644
index 0000000000000..1c05ab18b60f4
--- /dev/null
+++ b/ddev/changelog.d/16687.fixed
@@ -0,0 +1 @@
+Prevent `ddev dep` to bump `kubernetes`
diff --git a/ddev/src/ddev/cli/dep.py b/ddev/src/ddev/cli/dep.py
index 3a22b35a3421a..ef9e8d0801407 100644
--- a/ddev/src/ddev/cli/dep.py
+++ b/ddev/src/ddev/cli/dep.py
@@ -46,6 +46,9 @@
     # cryptography>=42 requires rust>=1.63.0. We have rust 1.62 on centos 6
     # https://github.com/DataDog/datadog-agent/pull/22268
     'cryptography',
+    # Brings urllib 2.0.7 which breaks `test_uds_request` in the base check
+    # https://github.com/kubernetes-client/python/pull/2131
+    'kubernetes',
 }
 
 # Dependencies for the downloader that are security-related and should be updated separately from the others