diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index dfd0e308..54876ba5 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -8,3 +8,14 @@ updates:
     schedule:
       # Check for updates to GitHub Actions every week
       interval: "weekly"
+
+  - package-ecosystem: "pip"
+    directories: 
+      - "/starfish/REQUIREMENTS-STRICT.txt"
+      - "/requirements/REQUIREMENTS-CI.txt"
+      - "/requirements/REQUIREMENTS-NAPARI-CI.txt"
+      - "/requirements/REQUIREMENTS-JUPYTER.txt"
+    schedule:
+      interval: "weekly"
+    # Disable version updates (allows only security updates)
+    open-pull-requests-limit: 0
diff --git a/requirements/REQUIREMENTS-CI.txt b/requirements/REQUIREMENTS-CI.txt
index 4679009c..262f6978 100644
--- a/requirements/REQUIREMENTS-CI.txt
+++ b/requirements/REQUIREMENTS-CI.txt
@@ -143,7 +143,7 @@ threadpoolctl==3.6.0
 tifffile==2024.8.30
 tinycss2==1.4.0
 tomli==2.2.1
-tornado==6.4.2
+tornado==6.5.1
 tqdm==4.67.1
 trackpy==0.6.4
 traitlets==5.14.3
diff --git a/requirements/REQUIREMENTS-CI.txt.in b/requirements/REQUIREMENTS-CI.txt.in
index 152e3c1d..f8da8d98 100644
--- a/requirements/REQUIREMENTS-CI.txt.in
+++ b/requirements/REQUIREMENTS-CI.txt.in
@@ -1,6 +1,6 @@
 # requirements to run CI except for napari
 # constrain the CI requirements to packages already in REQUIREMENTS-STRICT.txt
--c ../starfish/REQUIREMENTS-STRICT.txt
+-r ../starfish/REQUIREMENTS-STRICT.txt
 build
 flake8
 flake8-import-order
diff --git a/requirements/REQUIREMENTS-JUPYTER.txt b/requirements/REQUIREMENTS-JUPYTER.txt
index 0f77151a..bf295240 100644
--- a/requirements/REQUIREMENTS-JUPYTER.txt
+++ b/requirements/REQUIREMENTS-JUPYTER.txt
@@ -124,7 +124,7 @@ threadpoolctl==3.6.0
 tifffile==2024.8.30
 tinycss2==1.4.0
 tomli==2.2.1
-tornado==6.4.2
+tornado==6.5.1
 tqdm==4.67.1
 trackpy==0.6.4
 traitlets==5.14.3
diff --git a/requirements/REQUIREMENTS-NAPARI-CI.txt b/requirements/REQUIREMENTS-NAPARI-CI.txt
index 9977c882..d58adfb0 100644
--- a/requirements/REQUIREMENTS-NAPARI-CI.txt
+++ b/requirements/REQUIREMENTS-NAPARI-CI.txt
@@ -143,7 +143,7 @@ tifffile==2024.8.30
 tomli==2.2.1
 tomli_w==1.2.0
 toolz==1.0.0
-tornado==6.4.2
+tornado==6.5.1
 tqdm==4.67.1
 trackpy==0.6.4
 traitlets==5.14.3
diff --git a/requirements/REQUIREMENTS-NAPARI-CI.txt.in b/requirements/REQUIREMENTS-NAPARI-CI.txt.in
index 3a667245..af214b9c 100644
--- a/requirements/REQUIREMENTS-NAPARI-CI.txt.in
+++ b/requirements/REQUIREMENTS-NAPARI-CI.txt.in
@@ -1,6 +1,6 @@
 # requirements to run napari and CI for napari
 # constrain the NAPARI-CI requirements to packages already in REQUIREMENTS-CI.txt
--c REQUIREMENTS-CI.txt
+-r REQUIREMENTS-CI.txt
 # napari 0.4.18 made point sizes only isotropic: https://forum.image.sc/t/anisotropic-point-sizes/83388
 napari[all]>0.4.17
 pytest-qt