diff --git a/src/test-requirements-py312.txt b/src/test-requirements-py312.txt
index 4c13c30..f408192 100644
--- a/src/test-requirements-py312.txt
+++ b/src/test-requirements-py312.txt
@@ -6,7 +6,7 @@
 #
 aiohappyeyeballs==2.6.2
     # via aiohttp
-aiohttp==3.13.5
+aiohttp==3.14.0
     # via
     #   python-libmaas
     #   zaza
@@ -188,6 +188,8 @@ jsonschema==4.17.3
     #   python-designateclient
     #   python-ironicclient
     #   warlock
+juju==3.6.1.3
+    # via zaza
 juju-wait==2.8.4
     # via zaza
 jujubundlelib==0.5.7
@@ -215,6 +217,8 @@ keystoneauth1==5.14.0
     #   python-octaviaclient
     #   python-openstackclient
     #   python-watcherclient
+kubernetes==30.1.0
+    # via juju
 lxml==6.1.1
     # via zaza-openstack
 macaroonbakery==1.3.4
@@ -405,8 +409,6 @@ pbr==7.0.3
     #   python-watcherclient
 pika==1.4.1
     # via zaza-openstack
-pip==26.1.1
-    # via charm-tools
 platformdirs==4.10.0
     # via
     #   openstacksdk
@@ -596,12 +598,6 @@ secretstorage==3.3.3
     # via
     #   charm-tools
     #   keyring
-setuptools==81.0.0
-    # via
-    #   -r test-requirements.in
-    #   charm-tools
-    #   colander
-    #   pbr
 simplejson==4.1.1
     # via
     #   python-manilaclient
@@ -661,6 +657,7 @@ types-setuptools==82.0.0.20260518
     # via requirements-parser
 typing-extensions==4.15.0
     # via
+    #   aiohttp
     #   aiosignal
     #   juju
     #   keystoneauth1
@@ -684,6 +681,8 @@ webob==1.8.9
     # via osprofiler
 websocket-client==1.9.0
     # via kubernetes
+websockets==16.0
+    # via juju
 wrapt==2.2.1
     # via
     #   debtcollector
@@ -698,6 +697,11 @@ zaza-openstack @ git+https://github.com/openstack-charmers/zaza-openstack-tests.
     # via -r test-requirements.in
 
 # The following packages are considered to be unsafe in a requirements file:
-# juju
-# kubernetes
-# websockets
+pip==26.1.1
+    # via charm-tools
+setuptools==81.0.0
+    # via
+    #   -r test-requirements.in
+    #   charm-tools
+    #   colander
+    #   pbr