diff --git a/requirements.in b/requirements.in
index a85caacf..27bdd679 100644
--- a/requirements.in
+++ b/requirements.in
@@ -56,7 +56,7 @@ dask[distributed]==2026.3.0
     #   mozilla-jetstream
 db-dtypes==1.5.1
     # via mozilla-jetstream
-distlib==0.4.0
+distlib==0.4.2
     # via virtualenv
 distributed==2026.3.0
     # via dask
diff --git a/requirements.txt b/requirements.txt
index 9eb3a49e..ff942b09 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -536,9 +536,9 @@ db-dtypes==1.5.1 \
     --hash=sha256:901099b807c9312bc61a5bddbfb07512884e6c6d5a9edacf24d50bcf303aa5f7 \
     --hash=sha256:ad71a6645e3c1f06d4d32023940576648f43119822f825f0d22587c6ef8afe15
     # via -r requirements.in
-distlib==0.4.0 \
-    --hash=sha256:9659f7d87e46584a30b5780e43ac7a2143098441670ff0a49d5f9034c54a6c16 \
-    --hash=sha256:feec40075be03a04501a973d81f633735b4b69f98b05450592310c0f401a4e0d
+distlib==0.4.2 \
+    --hash=sha256:baeb401c90f27acd15c4861ae0847d1e731c27ac3dbf4210643ba61fa1e813db \
+    --hash=sha256:ca4cb11e5d746b5ec13c199cbf19ae27a241f89702b54e153a74332955446067
     # via
     #   -r requirements.in
     #   virtualenv