diff --git a/images/hub/requirements.txt b/images/hub/requirements.txt
index e1bc20df1b..9e57da96ba 100644
--- a/images/hub/requirements.txt
+++ b/images/hub/requirements.txt
@@ -6,7 +6,7 @@
 #
 aiohappyeyeballs==2.6.1
     # via aiohttp
-aiohttp==3.12.15
+aiohttp==3.13.0
     # via kubernetes-asyncio
 aiosignal==1.4.0
     # via aiohttp
@@ -16,7 +16,7 @@ annotated-types==0.7.0
     # via pydantic
 arrow==1.3.0
     # via isoduration
-attrs==25.3.0
+attrs==25.4.0
     # via
     #   aiohttp
     #   jsonschema
@@ -27,7 +27,7 @@ bcrypt==5.0.0
     #   jupyterhub-nativeauthenticator
 cachetools==6.2.0
     # via google-auth
-certifi==2025.8.3
+certifi==2025.10.5
     # via
     #   kubernetes-asyncio
     #   requests
@@ -47,7 +47,7 @@ escapism==1.0.1
     #   jupyterhub-ltiauthenticator
 fqdn==1.5.1
     # via jsonschema
-frozenlist==1.7.0
+frozenlist==1.8.0
     # via
     #   aiohttp
     #   aiosignal
@@ -79,7 +79,7 @@ jsonschema-specifications==2025.9.1
     # via jsonschema
 jupyter-events==0.12.0
     # via jupyterhub
-jupyterhub==5.3.0
+jupyterhub==5.4.0
     # via
     #   -r unfrozen/requirements.txt
     #   jupyterhub-firstuseauthenticator
@@ -116,7 +116,7 @@ markupsafe==3.0.3
     # via
     #   jinja2
     #   mako
-multidict==6.6.4
+multidict==6.7.0
     # via
     #   aiohttp
     #   yarl
@@ -141,7 +141,7 @@ pamela==1.2.0
     # via jupyterhub
 prometheus-client==0.23.1
     # via jupyterhub
-propcache==0.3.2
+propcache==0.4.0
     # via
     #   aiohttp
     #   yarl
@@ -158,7 +158,7 @@ pycparser==2.23
     # via cffi
 pycurl==7.45.7
     # via -r unfrozen/requirements.txt
-pydantic==2.11.9
+pydantic==2.11.10
     # via jupyterhub
 pydantic-core==2.33.2
     # via pydantic
@@ -175,7 +175,7 @@ python-dateutil==2.9.0.post0
     #   jupyterhub
     #   jupyterhub-idle-culler
     #   kubernetes-asyncio
-python-json-logger==3.3.0
+python-json-logger==4.0.0
     # via jupyter-events
 python-slugify==8.0.4
     # via jupyterhub-kubespawner
@@ -271,5 +271,5 @@ urllib3==2.5.0
     #   requests
 webcolors==24.11.1
     # via jsonschema
-yarl==1.20.1
+yarl==1.22.0
     # via aiohttp
diff --git a/images/hub/unfrozen/requirements.txt b/images/hub/unfrozen/requirements.txt
index 01b1542299..4f43dea33b 100644
--- a/images/hub/unfrozen/requirements.txt
+++ b/images/hub/unfrozen/requirements.txt
@@ -8,7 +8,7 @@
 #
 
 # JupyterHub itself
-jupyterhub==5.3.0
+jupyterhub==5.4.0
 
 # JupyterHub Spawner, kubernetes specific
 jupyterhub-kubespawner==7.*
diff --git a/images/singleuser-sample/requirements.txt b/images/singleuser-sample/requirements.txt
index f3767ed92c..7bed41104c 100644
--- a/images/singleuser-sample/requirements.txt
+++ b/images/singleuser-sample/requirements.txt
@@ -22,7 +22,7 @@ asttokens==3.0.0
     # via stack-data
 async-lru==2.0.5
     # via jupyterlab
-attrs==25.3.0
+attrs==25.4.0
     # via
     #   jsonschema
     #   referencing
@@ -32,7 +32,7 @@ beautifulsoup4==4.14.2
     # via nbconvert
 bleach==6.2.0
     # via nbconvert
-certifi==2025.8.3
+certifi==2025.10.5
     # via
     #   httpcore
     #   httpx
@@ -137,7 +137,7 @@ jupyter-server==2.17.0
     #   notebook-shim
 jupyter-server-terminals==0.5.3
     # via jupyter-server
-jupyterhub==5.3.0
+jupyterhub==5.4.0
     # via -r unfrozen/requirements.txt
 jupyterlab==4.4.9
     # via -r unfrozen/requirements.txt
@@ -218,7 +218,7 @@ pure-eval==0.2.3
     # via stack-data
 pycparser==2.23
     # via cffi
-pydantic==2.11.9
+pydantic==2.11.10
     # via jupyterhub
 pydantic-core==2.33.2
     # via pydantic
@@ -232,7 +232,7 @@ python-dateutil==2.9.0.post0
     #   arrow
     #   jupyter-client
     #   jupyterhub
-python-json-logger==3.3.0
+python-json-logger==4.0.0
     # via jupyter-events
 pyyaml==6.0.3
     # via jupyter-events
diff --git a/images/singleuser-sample/unfrozen/requirements.txt b/images/singleuser-sample/unfrozen/requirements.txt
index c8b4f6cd65..fd68c63457 100644
--- a/images/singleuser-sample/unfrozen/requirements.txt
+++ b/images/singleuser-sample/unfrozen/requirements.txt
@@ -7,7 +7,7 @@
 
 # JupyterHub itself, update this version pinning by running the workflow
 # mentioned above.
-jupyterhub==5.3.0
+jupyterhub==5.4.0
 
 # UI
 jupyterlab
diff --git a/jupyterhub/Chart.yaml b/jupyterhub/Chart.yaml
index 8473b641d2..f2ed748aa8 100644
--- a/jupyterhub/Chart.yaml
+++ b/jupyterhub/Chart.yaml
@@ -2,7 +2,7 @@
 apiVersion: v2
 name: jupyterhub
 version: 0.0.1-set.by.chartpress
-appVersion: "5.3.0"
+appVersion: "5.4.0"
 description: Multi-user Jupyter installation
 keywords: [jupyter, jupyterhub, z2jh]
 home: https://z2jh.jupyter.org