diff --git a/requirements-dev.txt b/requirements-dev.txt
index 8a07340..ddb2e7f 100644
--- a/requirements-dev.txt
+++ b/requirements-dev.txt
@@ -16,20 +16,23 @@ click==8.3.1
     #   pip-tools
 distlib==0.4.0
     # via virtualenv
-filelock==3.20.0
+filelock==3.20.1
     # via virtualenv
 identify==2.6.15
     # via pre-commit
 iniconfig==2.3.0
     # via pytest
 mypy-extensions==1.1.0
-    # via black
+    # via
+    #   -c requirements.txt
+    #   black
 nodeenv==1.9.1
     # via
     #   pre-commit
     #   pyright
 packaging==25.0
     # via
+    #   -c requirements.txt
     #   black
     #   build
     #   pytest
@@ -56,7 +59,9 @@ pytest==7.4.2
 pyyaml==6.0.3
     # via pre-commit
 typing-extensions==4.15.0
-    # via pyright
+    # via
+    #   -c requirements.txt
+    #   pyright
 virtualenv==20.35.4
     # via pre-commit
 wheel==0.45.1
diff --git a/requirements.in b/requirements.in
index a2082fc..cff0fe7 100644
--- a/requirements.in
+++ b/requirements.in
@@ -3,4 +3,4 @@ agent-base @ git+https://github.com/monte-carlo-data/agent-base.git@dev
 requests>=2.32.4 # Upgraded in VULN-616
 retry2==0.9.5
 sseclient==0.0.27
-urllib3==2.5.0 # Upgraded in VULN-621
+urllib3==2.6.0 # Upgraded in VULN-621
diff --git a/requirements.txt b/requirements.txt
index 2ede076..62cac4c 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -53,7 +53,7 @@ typing-extensions==4.15.0
     # via typing-inspect
 typing-inspect==0.9.0
     # via dataclasses-json
-urllib3==2.5.0
+urllib3==2.6.0
     # via
     #   -r requirements.in
     #   botocore