diff --git a/images/hub/requirements.txt b/images/hub/requirements.txt
index 6dffea6cf2..e738672e05 100644
--- a/images/hub/requirements.txt
+++ b/images/hub/requirements.txt
@@ -8,16 +8,16 @@ aiohttp==3.9.1
     # via kubernetes-asyncio
 aiosignal==1.3.1
     # via aiohttp
-alembic==1.12.1
+alembic==1.13.1
     # via jupyterhub
 async-generator==1.10
     # via jupyterhub
-attrs==23.1.0
+attrs==23.2.0
     # via
     #   aiohttp
     #   jsonschema
     #   referencing
-bcrypt==4.0.1
+bcrypt==4.1.2
     # via
     #   jupyterhub-firstuseauthenticator
     #   jupyterhub-nativeauthenticator
@@ -31,7 +31,7 @@ cffi==1.16.0
     # via cryptography
 charset-normalizer==3.3.2
     # via requests
-cryptography==41.0.6
+cryptography==41.0.7
     # via
     #   pyjwt
     #   pyopenssl
@@ -39,11 +39,11 @@ escapism==1.0.1
     # via
     #   jupyterhub-kubespawner
     #   jupyterhub-ltiauthenticator
-frozenlist==1.4.0
+frozenlist==1.4.1
     # via
     #   aiohttp
     #   aiosignal
-greenlet==3.0.1
+greenlet==3.0.3
     # via sqlalchemy
 idna==3.6
     # via
@@ -57,7 +57,7 @@ jsonschema==4.20.0
     # via
     #   jupyter-telemetry
     #   oauthenticator
-jsonschema-specifications==2023.11.1
+jsonschema-specifications==2023.12.1
     # via jsonschema
 jupyter-telemetry==0.1.0
     # via jupyterhub
@@ -151,7 +151,7 @@ pyyaml==6.0.1
     # via
     #   jupyterhub-kubespawner
     #   kubernetes-asyncio
-referencing==0.31.0
+referencing==0.32.0
     # via
     #   jsonschema
     #   jsonschema-specifications
@@ -163,7 +163,7 @@ requests==2.31.0
     #   requests-oauthlib
 requests-oauthlib==1.3.1
     # via mwoauth
-rpds-py==0.13.1
+rpds-py==0.16.2
     # via
     #   jsonschema
     #   referencing
@@ -178,7 +178,7 @@ six==1.16.0
     #   kubernetes-asyncio
     #   onetimepass
     #   python-dateutil
-sqlalchemy==2.0.23
+sqlalchemy==2.0.25
     # via
     #   alembic
     #   jupyterhub
@@ -189,13 +189,13 @@ statsd==4.0.1
     # via -r requirements.in
 text-unidecode==1.3
     # via python-slugify
-tornado==6.3.3
+tornado==6.4
     # via
     #   jupyterhub
     #   jupyterhub-idle-culler
     #   jupyterhub-ldapauthenticator
     #   oauthenticator
-traitlets==5.13.0
+traitlets==5.14.1
     # via
     #   jupyter-telemetry
     #   jupyterhub
@@ -203,7 +203,7 @@ traitlets==5.13.0
     #   jupyterhub-ldapauthenticator
     #   jupyterhub-ltiauthenticator
     #   oauthenticator
-typing-extensions==4.8.0
+typing-extensions==4.9.0
     # via
     #   alembic
     #   sqlalchemy
@@ -212,7 +212,7 @@ urllib3==2.1.0
     #   jupyterhub-kubespawner
     #   kubernetes-asyncio
     #   requests
-yarl==1.9.3
+yarl==1.9.4
     # via aiohttp
 
 # The following packages are considered to be unsafe in a requirements file:
diff --git a/images/singleuser-sample/requirements.txt b/images/singleuser-sample/requirements.txt
index 626c20c174..907bc9b25d 100644
--- a/images/singleuser-sample/requirements.txt
+++ b/images/singleuser-sample/requirements.txt
@@ -4,9 +4,9 @@
 #
 #    Use the "Run workflow" button at https://github.com/jupyterhub/zero-to-jupyterhub-k8s/actions/workflows/watch-dependencies.yaml
 #
-alembic==1.12.1
+alembic==1.13.1
     # via jupyterhub
-anyio==4.1.0
+anyio==4.2.0
     # via jupyter-server
 argon2-cffi==23.1.0
     # via
@@ -22,11 +22,11 @@ async-generator==1.10
     # via jupyterhub
 async-lru==2.0.4
     # via jupyterlab
-attrs==23.1.0
+attrs==23.2.0
     # via
     #   jsonschema
     #   referencing
-babel==2.13.1
+babel==2.14.0
     # via jupyterlab-server
 beautifulsoup4==4.12.2
     # via nbconvert
@@ -42,9 +42,9 @@ cffi==1.16.0
     #   cryptography
 charset-normalizer==3.3.2
     # via requests
-comm==0.2.0
+comm==0.2.1
     # via ipykernel
-cryptography==41.0.6
+cryptography==41.0.7
     # via pyopenssl
 debugpy==1.8.0
     # via ipykernel
@@ -54,22 +54,22 @@ defusedxml==0.7.1
     # via nbconvert
 executing==2.0.1
     # via stack-data
-fastjsonschema==2.19.0
+fastjsonschema==2.19.1
     # via nbformat
 fqdn==1.5.1
     # via jsonschema
-greenlet==3.0.1
+greenlet==3.0.3
     # via sqlalchemy
 idna==3.6
     # via
     #   anyio
     #   jsonschema
     #   requests
-ipykernel==6.26.0
+ipykernel==6.28.0
     # via
     #   jupyterlab
     #   nbclassic
-ipython==8.18.1
+ipython==8.19.0
     # via ipykernel
 ipython-genutils==0.2.0
     # via nbclassic
@@ -95,7 +95,7 @@ jsonschema[format-nongpl]==4.20.0
     #   jupyter-telemetry
     #   jupyterlab-server
     #   nbformat
-jsonschema-specifications==2023.11.1
+jsonschema-specifications==2023.12.1
     # via jsonschema
 jupyter-client==8.6.0
     # via
@@ -103,7 +103,7 @@ jupyter-client==8.6.0
     #   jupyter-server
     #   nbclassic
     #   nbclient
-jupyter-core==5.5.0
+jupyter-core==5.6.1
     # via
     #   ipykernel
     #   jupyter-client
@@ -117,7 +117,7 @@ jupyter-events==0.9.0
     # via jupyter-server
 jupyter-lsp==2.2.1
     # via jupyterlab
-jupyter-server==2.11.2
+jupyter-server==2.12.1
     # via
     #   jupyter-lsp
     #   jupyterlab
@@ -125,13 +125,13 @@ jupyter-server==2.11.2
     #   nbclassic
     #   nbgitpuller
     #   notebook-shim
-jupyter-server-terminals==0.4.4
+jupyter-server-terminals==0.5.1
     # via jupyter-server
 jupyter-telemetry==0.1.0
     # via jupyterhub
 jupyterhub==4.0.2
     # via -r requirements.in
-jupyterlab==4.0.9
+jupyterlab==4.0.10
     # via -r requirements.in
 jupyterlab-pygments==0.3.0
     # via nbconvert
@@ -154,7 +154,7 @@ nbclassic==1.0.0
     # via -r requirements.in
 nbclient==0.9.0
     # via nbconvert
-nbconvert==7.11.0
+nbconvert==7.14.0
     # via
     #   jupyter-server
     #   nbclassic
@@ -194,16 +194,16 @@ parso==0.8.3
     # via jedi
 pexpect==4.9.0
     # via ipython
-platformdirs==4.0.0
+platformdirs==4.1.0
     # via jupyter-core
 prometheus-client==0.19.0
     # via
     #   jupyter-server
     #   jupyterhub
     #   nbclassic
-prompt-toolkit==3.0.41
+prompt-toolkit==3.0.43
     # via ipython
-psutil==5.9.6
+psutil==5.9.7
     # via ipykernel
 ptyprocess==0.7.0
     # via
@@ -230,13 +230,13 @@ python-json-logger==2.0.7
     #   jupyter-telemetry
 pyyaml==6.0.1
     # via jupyter-events
-pyzmq==25.1.1
+pyzmq==25.1.2
     # via
     #   ipykernel
     #   jupyter-client
     #   jupyter-server
     #   nbclassic
-referencing==0.31.0
+referencing==0.32.0
     # via
     #   jsonschema
     #   jsonschema-specifications
@@ -253,7 +253,7 @@ rfc3986-validator==0.1.1
     # via
     #   jsonschema
     #   jupyter-events
-rpds-py==0.13.1
+rpds-py==0.16.2
     # via
     #   jsonschema
     #   referencing
@@ -275,7 +275,7 @@ sniffio==1.3.0
     # via anyio
 soupsieve==2.5
     # via beautifulsoup4
-sqlalchemy==2.0.23
+sqlalchemy==2.0.25
     # via
     #   alembic
     #   jupyterhub
@@ -288,7 +288,7 @@ terminado==0.18.0
     #   nbclassic
 tinycss2==1.2.1
     # via nbconvert
-tornado==6.3.3
+tornado==6.4
     # via
     #   ipykernel
     #   jupyter-client
@@ -298,7 +298,7 @@ tornado==6.3.3
     #   nbclassic
     #   nbgitpuller
     #   terminado
-traitlets==5.13.0
+traitlets==5.14.1
     # via
     #   comm
     #   ipykernel
@@ -317,7 +317,7 @@ traitlets==5.13.0
     #   nbformat
 types-python-dateutil==2.8.19.14
     # via arrow
-typing-extensions==4.8.0
+typing-extensions==4.9.0
     # via
     #   alembic
     #   sqlalchemy
@@ -333,5 +333,5 @@ webencodings==0.5.1
     # via
     #   bleach
     #   tinycss2
-websocket-client==1.6.4
+websocket-client==1.7.0
     # via jupyter-server