diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index 94bd007..dad70bf 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -12,11 +12,11 @@ repos:
     hooks:
       - id: black
   - repo: https://github.com/astral-sh/ruff-pre-commit
-    rev: v0.9.6
+    rev: v0.11.8
     hooks:
       - id: ruff
   - repo: https://github.com/RobertCraigie/pyright-python
-    rev: v1.1.394
+    rev: v1.1.400
     hooks:
       - id: pyright
         name: pyright (system)
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 1af4791..ee536d4 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -13,7 +13,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ### Changed
 
-- Upgrade to wombat 3.8.11 (#256)
+- Upgrade dependencies, especially wombat 3.8.12 (#262)
 - Backport changes in wabac.js around JS rewriting rules (#259)
 
 ### Fixed
diff --git a/openzim.toml b/openzim.toml
index b1ca194..c01d4b0 100644
--- a/openzim.toml
+++ b/openzim.toml
@@ -6,5 +6,5 @@ execute_after=[
 
 [files.assets.actions."wombat.js"]
 action="get_file"
-source="https://cdn.jsdelivr.net/npm/@webrecorder/wombat@3.8.11/dist/wombat.js"
+source="https://cdn.jsdelivr.net/npm/@webrecorder/wombat@3.8.12/dist/wombat.js"
 target_file="wombat.js"
diff --git a/pyproject.toml b/pyproject.toml
index 19c6a74..c2f64c7 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -1,7 +1,7 @@
 [build-system]
 # jinja2 is required to generate JS and Python rules at build time
 # PyYAML is used to parse fuzzy rules and generate Python/JS code
-requires = ["hatchling", "hatch-openzim>=0.2", "jinja2==3.1.5", "PyYAML==6.0.2"]
+requires = ["hatchling", "hatch-openzim>=0.2", "jinja2==3.1.6", "PyYAML==6.0.2"]
 build-backend = "hatchling.build"
 
 [project]
@@ -26,11 +26,11 @@ dependencies = [
   "regex>=2020.7.14",
   "pymupdf>=1.24.0,<2.0",
   "CairoSVG>=2.2.0,<3.0",
-  "beartype==0.19.0",
+  "beartype>=0.19,<0.21",
   # youtube-dl should be updated as frequently as possible
   "yt-dlp",
   "pillow>=7.0.0,<12.0",
-  "urllib3>=1.26.5,<2.4.0",
+  "urllib3>=1.26.5,<2.5.0",
   "piexif==1.1.3", # this dep is a nightmare in terms of release management, better pinned just like in optimize-images anyway
   "idna>=2.5,<4.0",
   "xxhash>=2.0,<4.0",
@@ -52,36 +52,36 @@ scripts = [
   "invoke==2.2.0",
   # jinja2 is required to generate JS and Python rules at build time
   # PyYAML is used to parse fuzzy rules and generate Python/JS code
-  # also update version in build-system above and in build_js.sh
-  "jinja2==3.1.5",
+  # also update version in build-system above
+  "jinja2==3.1.6",
   "PyYAML==6.0.2",
 
 ]
 lint = [
   "black==25.1.0",
-  "ruff==0.9.6",
+  "ruff==0.11.8",
 ]
 check = [
-  "pyright==1.1.394",
-  "pytest==8.3.4",
+  "pyright==1.1.400",
+  "pytest==8.3.5",
 ]
 test = [
-  "pytest==8.3.4",
+  "pytest==8.3.5",
   "pytest-mock==3.14.0",
-  "coverage==7.6.12",
+  "coverage==7.8.0",
 ]
 docs = [
   "mkdocs==1.6.1",
-  "mkdocstrings[python]==0.28.1",
-  "mkdocs-material==9.6.4",
-  "pymdown-extensions==10.14.3",
+  "mkdocstrings[python]==0.29.1",
+  "mkdocs-material==9.6.12",
+  "pymdown-extensions==10.15",
   "mkdocs-gen-files==0.5.0",
-  "mkdocs-literate-nav==0.6.1",
-  "mkdocs-include-markdown-plugin==7.1.4",
+  "mkdocs-literate-nav==0.6.2",
+  "mkdocs-include-markdown-plugin==7.1.5",
 ]
 dev = [
-  "ipython==8.32.0",
-  "pre-commit==4.1.0",
+  "ipython==9.2.0",
+  "pre-commit==4.2.0",
   "zimscraperlib[scripts]",
   "zimscraperlib[lint]",
   "zimscraperlib[test]",
diff --git a/src/zimscraperlib/image/conversion.py b/src/zimscraperlib/image/conversion.py
index a62cc41..27cd411 100644
--- a/src/zimscraperlib/image/conversion.py
+++ b/src/zimscraperlib/image/conversion.py
@@ -2,7 +2,7 @@
 import pathlib
 from typing import Any
 
-import cairosvg.svg  # pyright: ignore[reportMissingTypeStubs]
+import cairosvg  # pyright: ignore[reportMissingTypeStubs]
 from PIL.Image import open as pilopen
 
 from zimscraperlib.constants import ALPHA_NOT_SUPPORTED