diff --git a/requirements-lock.txt b/requirements-lock.txt
index 86f7bb1..006cbde 100644
--- a/requirements-lock.txt
+++ b/requirements-lock.txt
@@ -5,10 +5,9 @@
 # upstream patch / security releases within the bounded ranges in requirements.txt.
 blinker==1.9.0            # via flask
 click==8.5.0              # via flask
-defusedxml==0.7.1         # via fpdf2
 flask==3.1.3              # via -r requirements.txt
 fonttools==4.65.0         # via -r requirements.txt, fpdf2
-fpdf2==2.8.9              # via -r requirements.txt
+fpdf2==2.9.0              # via -r requirements.txt
 itsdangerous==2.2.0       # via flask
 jinja2==3.1.6             # via flask
 markupsafe==3.0.4         # via flask, jinja2, werkzeug