diff --git a/requirements.txt b/requirements.txt
--- a/requirements.txt
+++ b/requirements.txt
@@ -1,8 +1,8 @@
 # deps, generated via pipdeptree --exclude setuptools,wheel,pipdeptree,pip -f | tr '[:upper:]' '[:lower:]'
 
 alembic==1.13.1
-  mako==1.2.4
-    markupsafe==2.1.2
+  mako==1.3.6
+    markupsafe==3.0.2
   sqlalchemy==1.4.52
     greenlet==3.1.1
   typing_extensions==4.12.2
@@ -48,8 +48,8 @@ channelstream==0.7.1
     zope.interface==7.1.0
   pyramid-jinja2==2.10
     jinja2==3.1.2
-      markupsafe==2.1.2
-    markupsafe==2.1.2
+      markupsafe==3.0.2
+    markupsafe==3.0.2
     pyramid==2.0.2
       hupper==1.12
       plaster==1.1.2
@@ -122,12 +122,12 @@ nbconvert==7.7.3
     webencodings==0.5.1
   defusedxml==0.7.1
   jinja2==3.1.2
-    markupsafe==2.1.2
+    markupsafe==3.0.2
   jupyter_core==5.3.1
     platformdirs==3.10.0
     traitlets==5.14.3
   jupyterlab-pygments==0.2.2
-  markupsafe==2.1.2
+  markupsafe==3.0.2
   mistune==2.0.5
   nbclient==0.8.0
     jupyter_client==8.3.0
@@ -208,8 +208,8 @@ pyramid-mailer==0.15.1
   transaction==5.0.0
     zope.interface==7.1.0
 pyramid-mako==1.1.0
-  mako==1.2.4
-    markupsafe==2.1.2
+  mako==1.3.6
+    markupsafe==3.0.2
   pyramid==2.0.2
     hupper==1.12
     plaster==1.1.2
@@ -288,7 +288,7 @@ unidecode==1.3.6
 urlobject==2.4.3
 waitress==3.0.0
 webhelpers2==2.1
-  markupsafe==2.1.2
+  markupsafe==3.0.2
   six==1.16.0
 whoosh==2.7.4
 zope.cachedescriptors==5.0.0