diff --git a/requirements.in b/requirements.in
index a85caacf..e6c6dd01 100644
--- a/requirements.in
+++ b/requirements.in
@@ -56,7 +56,7 @@ dask[distributed]==2026.3.0
     #   mozilla-jetstream
 db-dtypes==1.5.1
     # via mozilla-jetstream
-distlib==0.4.0
+distlib==0.4.3
     # via virtualenv
 distributed==2026.3.0
     # via dask
diff --git a/requirements.txt b/requirements.txt
index 9eb3a49e..d2ffa67f 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -536,9 +536,9 @@ db-dtypes==1.5.1 \
     --hash=sha256:901099b807c9312bc61a5bddbfb07512884e6c6d5a9edacf24d50bcf303aa5f7 \
     --hash=sha256:ad71a6645e3c1f06d4d32023940576648f43119822f825f0d22587c6ef8afe15
     # via -r requirements.in
-distlib==0.4.0 \
-    --hash=sha256:9659f7d87e46584a30b5780e43ac7a2143098441670ff0a49d5f9034c54a6c16 \
-    --hash=sha256:feec40075be03a04501a973d81f633735b4b69f98b05450592310c0f401a4e0d
+distlib==0.4.3 \
+    --hash=sha256:4b0ce306c966eb73bc3a7b6abad017c556dadd92c44701562cd528ac7fde4d5b \
+    --hash=sha256:f152097224a0ae24be5a0f6bae1b9359af82133bce63f98a95f86cae1aede9ed
     # via
     #   -r requirements.in
     #   virtualenv