diff --git a/images/hub/requirements.txt b/images/hub/requirements.txt
index 431f425d4f..d14a2e916d 100644
--- a/images/hub/requirements.txt
+++ b/images/hub/requirements.txt
@@ -94,9 +94,9 @@ jupyterhub-hmacauthenticator==1.0
     # via -r requirements.in
 jupyterhub-idle-culler==1.4.0
     # via -r requirements.in
-jupyterhub-kubespawner==7.0.0b3
+jupyterhub-kubespawner==7.0.0
     # via -r requirements.in
-jupyterhub-ldapauthenticator==2.0.0
+jupyterhub-ldapauthenticator==2.0.1
     # via -r requirements.in
 jupyterhub-ltiauthenticator==1.6.2
     # via -r requirements.in
@@ -259,5 +259,5 @@ urllib3==2.2.3
     #   requests
 webcolors==24.8.0
     # via jsonschema
-yarl==1.16.0
+yarl==1.17.1
     # via aiohttp
diff --git a/images/singleuser-sample/requirements.txt b/images/singleuser-sample/requirements.txt
index 3a71220216..4e5f6afa52 100644
--- a/images/singleuser-sample/requirements.txt
+++ b/images/singleuser-sample/requirements.txt
@@ -30,7 +30,7 @@ babel==2.16.0
     # via jupyterlab-server
 beautifulsoup4==4.12.3
     # via nbconvert
-bleach==6.1.0
+bleach==6.2.0
     # via nbconvert
 certifi==2024.8.30
     # via
@@ -137,7 +137,7 @@ jupyter-server-terminals==0.5.3
     # via jupyter-server
 jupyterhub==5.2.1
     # via -r requirements.in
-jupyterlab==4.2.5
+jupyterlab==4.3.0
     # via -r requirements.in
 jupyterlab-pygments==0.3.0
     # via nbconvert
@@ -263,7 +263,6 @@ send2trash==1.8.3
 six==1.16.0
     # via
     #   asttokens
-    #   bleach
     #   python-dateutil
     #   rfc3339-validator
 sniffio==1.3.1
@@ -332,5 +331,5 @@ websocket-client==1.8.0
     # via jupyter-server
 
 # The following packages are considered to be unsafe in a requirements file:
-setuptools==75.2.0
+setuptools==75.3.0
     # via jupyterlab