diff --git a/conf/requirements.txt b/conf/requirements.txt
index 30575d86..325e8d4f 100644
--- a/conf/requirements.txt
+++ b/conf/requirements.txt
@@ -7,6 +7,11 @@ django-auth-ldap==5.3.0
 # the installer's venv can otherwise keep older distro copies (openSUSE 15.6)
 python-ldap>=3.4.5
 pyasn1>=0.6.4
+# for django-bootstrap-icons and websockify; a host's python3-requests would
+# otherwise bring idna, requests and urllib3 with advisories
+idna>=3.15
+requests>=2.33.0
+urllib3>=2.8.0
 django-axes==8.3.1
 djangorestframework==3.18.3
 drf-nested-routers==0.95.3