diff --git a/requirements.in b/requirements.in
index f429935f9..94b897e4c 100644
--- a/requirements.in
+++ b/requirements.in
@@ -1,6 +1,5 @@
-click >= 8.0
-protobuf>=4.22
-urllib3>=1.26.3
+click>=8.0
+protobuf>=4.22.0
 requests>=2.25.0
 grpcio>=1.36.1
 numpy
@@ -28,6 +27,7 @@ task-queue>=2.13.0
 messagingclient
 dracopy>=1.3.0
 datastoreflex>=0.5.0
+zstandard==0.21.0
 
 # Conda only - use requirements.yml (or install manually):
 # graph-tool
\ No newline at end of file
diff --git a/requirements.txt b/requirements.txt
index deac584cf..17d326843 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -5,15 +5,17 @@
 #    pip-compile --output-file=requirements.txt requirements.in
 #
 attrs==23.1.0
-    # via jsonschema
+    # via
+    #   jsonschema
+    #   referencing
 blinker==1.6.2
     # via flask
-boto3==1.28.49
+boto3==1.28.52
     # via
     #   cloud-files
     #   cloud-volume
     #   task-queue
-botocore==1.31.49
+botocore==1.31.52
     # via
     #   boto3
     #   s3transfer
@@ -70,7 +72,7 @@ dracopy==1.3.0
     # via
     #   -r requirements.in
     #   cloud-volume
-fasteners==0.18
+fasteners==0.19
     # via cloud-files
 fastremap==1.14.0
     # via
@@ -124,7 +126,7 @@ google-cloud-datastore==2.18.0
     #   datastoreflex
 google-cloud-pubsub==2.18.4
     # via messagingclient
-google-cloud-storage==2.10.0
+google-cloud-storage==2.11.0
     # via
     #   cloud-files
     #   cloud-volume
@@ -173,10 +175,12 @@ jmespath==1.0.1
     #   botocore
 json5==0.9.14
     # via cloud-volume
-jsonschema==4.17.3
+jsonschema==4.19.1
     # via
     #   cloud-volume
     #   python-jsonschema-objects
+jsonschema-specifications==2023.7.1
+    # via jsonschema
 markdown==3.4.4
     # via python-jsonschema-objects
 markupsafe==2.1.3
@@ -185,7 +189,7 @@ markupsafe==2.1.3
     #   werkzeug
 messagingclient==0.1.3
     # via -r requirements.in
-middle-auth-client==3.16.0
+middle-auth-client==3.16.1
     # via -r requirements.in
 multiprocess==0.70.15
     # via pathos
@@ -220,7 +224,7 @@ orjson==3.9.7
     #   task-queue
 packaging==23.1
     # via pytest
-pandas==2.1.0
+pandas==2.1.1
     # via -r requirements.in
 pathos==0.3.1
     # via
@@ -267,8 +271,6 @@ pyasn1-modules==0.3.0
     # via google-auth
 pybind11==2.11.1
     # via crackle-codec
-pyrsistent==0.19.3
-    # via jsonschema
 pysimdjson==5.0.2
     # via cloud-volume
 pyspng-seunglab==1.1.0
@@ -282,7 +284,7 @@ python-dateutil==2.8.2
     #   pandas
 python-json-logger==2.0.7
     # via -r requirements.in
-python-jsonschema-objects==0.4.6
+python-jsonschema-objects==0.5.0
     # via cloud-volume
 pytz==2023.3.post1
     # via pandas
@@ -292,6 +294,10 @@ redis==5.0.0
     # via
     #   -r requirements.in
     #   rq
+referencing==0.30.2
+    # via
+    #   jsonschema
+    #   jsonschema-specifications
 requests==2.31.0
     # via
     #   -r requirements.in
@@ -301,6 +307,10 @@ requests==2.31.0
     #   google-cloud-storage
     #   middle-auth-client
     #   task-queue
+rpds-py==0.10.3
+    # via
+    #   jsonschema
+    #   referencing
 rq==1.15.1
     # via -r requirements.in
 rsa==4.9
@@ -355,7 +365,9 @@ zope-event==5.0
 zope-interface==6.0
     # via gevent
 zstandard==0.21.0
-    # via cloud-files
+    # via
+    #   -r requirements.in
+    #   cloud-files
 
 # The following packages are considered to be unsafe in a requirements file:
 # setuptools
diff --git a/requirements.yml b/requirements.yml
index 1de7ebe0c..0bfa5b227 100644
--- a/requirements.yml
+++ b/requirements.yml
@@ -7,6 +7,7 @@ dependencies:
   - tox
   - uwsgi==2.0.21
   - graph-tool-base==2.58
+  - zstandard==0.19.0  # ugly hack to force PyPi install 0.21.0
   - pip:
     - -r requirements.txt
     - -r requirements-dev.txt
\ No newline at end of file