diff --git a/pyproject.toml b/pyproject.toml
index 788e3fc..d9b22de 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -11,7 +11,7 @@ requires-python = ">=3.12"
 license = { text = "MIT" }
 dependencies = [
     "requests==2.34.2",
-    "urllib3==2.7.0",
+    "urllib3==2.8.0",
     "paho-mqtt==2.1.0",
     "numpy==2.5.3",
     "pyyaml==6.0.3",
diff --git a/requirements-plot.txt b/requirements-plot.txt
index c38b097..fd713c6 100644
--- a/requirements-plot.txt
+++ b/requirements-plot.txt
@@ -1,2 +1,2 @@
 # Optional: PNG export for plot.py --png
-matplotlib>=3.11.1
+matplotlib>=3.11.2
diff --git a/requirements.txt b/requirements.txt
index 6f7c7f5..2d31640 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -1,6 +1,6 @@
 # Pinned for reproducible installs and supply-chain stability.
 requests==2.34.2
-urllib3==2.7.0    # pinned explicitly: alarms.py imports its connection internals for SSRF DNS-pinning
+urllib3==2.8.0    # pinned explicitly: alarms.py imports its connection internals for SSRF DNS-pinning
 paho-mqtt==2.1.0
 numpy==2.5.3
 pyyaml==6.0.3     # cook presets (presets.py) -- safe_load only, never yaml.load
\ No newline at end of file