diff --git a/cli_bundle/requirements.txt b/cli_bundle/requirements.txt
index 2ac9385b..6f16a7a9 100644
--- a/cli_bundle/requirements.txt
+++ b/cli_bundle/requirements.txt
@@ -1,5 +1,5 @@
 # Core CLI/runtime deps (safe across Linux runners)
-click==8.3.0
+click==8.3.1
 rich==14.1.0
 pyyaml==6.0.2
 requests==2.32.5  # fixed .netrc credential leak (CVE-2024-35195)
diff --git a/docker/requirements.txt b/docker/requirements.txt
index 2c6a3757..84735833 100644
--- a/docker/requirements.txt
+++ b/docker/requirements.txt
@@ -1,5 +1,5 @@
 # Core CLI/runtime deps (safe across Linux runners)
-click==8.3.0
+click==8.3.1
 rich==14.1.0
 pyyaml==6.0.2
 requests==2.32.5  # fixed .netrc credential leak (CVE-2024-35195)