diff --git a/python/poetry.lock b/python/poetry.lock
index 4cfe4e31..073f4849 100644
--- a/python/poetry.lock
+++ b/python/poetry.lock
@@ -1751,14 +1751,14 @@ files = [
 
 [[package]]
 name = "urllib3"
-version = "2.6.0"
+version = "2.6.3"
 description = "HTTP library with thread-safe connection pooling, file post, and more."
 optional = false
 python-versions = ">=3.9"
 groups = ["dev"]
 files = [
-    {file = "urllib3-2.6.0-py3-none-any.whl", hash = "sha256:c90f7a39f716c572c4e3e58509581ebd83f9b59cced005b7db7ad2d22b0db99f"},
-    {file = "urllib3-2.6.0.tar.gz", hash = "sha256:cb9bcef5a4b345d5da5d145dc3e30834f58e8018828cbc724d30b4cb7d4d49f1"},
+    {file = "urllib3-2.6.3-py3-none-any.whl", hash = "sha256:bf272323e553dfb2e87d9bfd225ca7b0f467b919d7bbd355436d3fd37cb0acd4"},
+    {file = "urllib3-2.6.3.tar.gz", hash = "sha256:1b62b6884944a57dbe321509ab94fd4d3b307075e0c2eae991ac71ee15ad38ed"},
 ]
 
 [package.extras]
diff --git a/template/requirements.txt b/template/requirements.txt
index c0abd490..99164507 100644
--- a/template/requirements.txt
+++ b/template/requirements.txt
@@ -14,7 +14,7 @@ e2b_charts
 # Other packages
 aiohttp==3.13.3
 beautifulsoup4==4.13.4
-bokeh==3.7.3
+bokeh==3.8.2
 gensim==4.3.3 # unmaintained, blocking numpy and scipy bump
 imageio==2.37.0
 joblib==1.5.0
@@ -38,7 +38,7 @@ soundfile==0.13.1
 spacy==3.8.2 # doesn't work on 3.13.x
 textblob==0.19.0
 tornado==6.5.1
-urllib3==2.6.0
+urllib3==2.6.3
 xarray==2025.4.0
 xlrd==2.0.1
 sympy==1.14.0