diff --git a/.github/workflows/docker_update_readme.yml b/.github/workflows/docker_update_readme.yml
index 9d2f8b76801..d91e79099d6 100644
--- a/.github/workflows/docker_update_readme.yml
+++ b/.github/workflows/docker_update_readme.yml
@@ -10,7 +10,7 @@ jobs:
     steps:
     - uses: actions/checkout@v4
     - name: Docker Hub Description
-      uses: peter-evans/dockerhub-description@v3
+      uses: peter-evans/dockerhub-description@v4
       env:
         DOCKERHUB_USERNAME: ${{ secrets.DOCKER_USERNAME }}
         DOCKERHUB_PASSWORD: ${{ secrets.DOCKER_PASSWORD }}
diff --git a/Dockerfile b/Dockerfile
index e5a33df87af..6e8992b8bb3 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,4 +1,4 @@
-FROM python:3.11.7-slim-bookworm as base
+FROM python:3.12.2-slim-bookworm as base
 
 # Setup env
 ENV LANG C.UTF-8
diff --git a/docker/Dockerfile.armhf b/docker/Dockerfile.armhf
index 4cb8f5fea89..8640b182b70 100644
--- a/docker/Dockerfile.armhf
+++ b/docker/Dockerfile.armhf
@@ -1,4 +1,4 @@
-FROM python:3.11.7-slim-bookworm as base
+FROM python:3.12.0b4-slim-bullseye as base
 
 # Setup env
 ENV LANG C.UTF-8
diff --git a/docs/requirements-docs.txt b/docs/requirements-docs.txt
index 7ec1eb4221c..39e4dde267f 100644
--- a/docs/requirements-docs.txt
+++ b/docs/requirements-docs.txt
@@ -2,5 +2,5 @@ markdown==3.5.2
 mkdocs==1.5.3
 mkdocs-material==9.5.3
 mdx_truly_sane_lists==1.3
-pymdown-extensions==10.7
+pymdown-extensions==10.5
 jinja2==3.1.3
diff --git a/requirements-freqai.txt b/requirements-freqai.txt
index 17087d8ca17..a371dfacd8f 100644
--- a/requirements-freqai.txt
+++ b/requirements-freqai.txt
@@ -10,3 +10,8 @@ lightgbm==4.2.0
 xgboost==2.0.3
 tensorboard==2.15.1
 datasieve==0.1.7
+
+numpy>=1.22.2 # not directly required, pinned by Snyk to avoid a vulnerability
+pillow>=10.2.0 # not directly required, pinned by Snyk to avoid a vulnerability
+fonttools>=4.43.0 # not directly required, pinned by Snyk to avoid a vulnerability
+
diff --git a/requirements.txt b/requirements.txt
index 85f811f14b7..04e3e28a5de 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -2,18 +2,23 @@ numpy==1.26.3
 pandas==2.1.4
 pandas-ta==0.3.14b
 
-ccxt==4.2.15
-cryptography==41.0.7
-aiohttp==3.9.1
-SQLAlchemy==2.0.25
-python-telegram-bot==20.7
+ccxt==3.1.44
+cryptography==42.0.2; platform_machine != 'armv7l'
+cryptography==42.0.2; platform_machine == 'armv7l'
+aiohttp==3.9.0
+SQLAlchemy==2.0.16
+python-telegram-bot==20.3
+
 # can't be hard-pinned due to telegram-bot pinning httpx with ~
 httpx>=0.24.1
 arrow==1.3.0
 cachetools==5.3.2
 requests==2.31.0
-urllib3==2.1.0
-jsonschema==4.20.0
+
+urllib3==2.0.7
+
+jsonschema==4.19.1
+
 TA-Lib==0.4.28
 technical==1.4.2
 tabulate==0.9.0
@@ -36,9 +41,10 @@ orjson==3.9.10
 sdnotify==0.3.2
 
 # API Server
-fastapi==0.109.0
-pydantic==2.5.3
-uvicorn==0.25.0
+fastapi==0.103.2
+pydantic==2.4.0
+uvicorn==0.23.2
+
 pyjwt==2.8.0
 aiofiles==23.2.1
 psutil==5.9.7