diff --git a/.services/signer/poetry.lock b/.services/signer/poetry.lock
index a49818f..ffaa992 100644
--- a/.services/signer/poetry.lock
+++ b/.services/signer/poetry.lock
@@ -591,13 +591,13 @@ rfc3161ng = ">=2.1.3,<3.0.0"
 
 [[package]]
 name = "werkzeug"
-version = "3.0.4"
+version = "3.0.6"
 description = "The comprehensive WSGI web application library."
 optional = false
 python-versions = ">=3.8"
 files = [
-    {file = "werkzeug-3.0.4-py3-none-any.whl", hash = "sha256:02c9eb92b7d6c06f31a782811505d2157837cea66aaede3e217c7c27c039476c"},
-    {file = "werkzeug-3.0.4.tar.gz", hash = "sha256:34f2371506b250df4d4f84bfe7b0921e4762525762bbd936614909fe25cd7306"},
+    {file = "werkzeug-3.0.6-py3-none-any.whl", hash = "sha256:1bc0c2310d2fbb07b1dd1105eba2f7af72f322e1e455f2f93c993bee8c8a5f17"},
+    {file = "werkzeug-3.0.6.tar.gz", hash = "sha256:a8dd59d4de28ca70471a34cba79bed5f7ef2e036a76b3ab0835474246eb41f8d"},
 ]
 
 [package.dependencies]
diff --git a/.services/signer/pyproject.toml b/.services/signer/pyproject.toml
index 2d6936c..5881c53 100644
--- a/.services/signer/pyproject.toml
+++ b/.services/signer/pyproject.toml
@@ -1,6 +1,6 @@
 [tool.poetry]
 name = "signer"
-version = "0.2.5"
+version = "0.2.6"
 description = ""
 authors = ["Library Innovation Lab <lil@law.harvard.edu>"]
 readme = "README.md"
diff --git a/.services/signer/requirements.txt b/.services/signer/requirements.txt
index 94a274a..8b1f62d 100644
--- a/.services/signer/requirements.txt
+++ b/.services/signer/requirements.txt
@@ -306,9 +306,9 @@ urllib3==2.2.2 ; python_version >= "3.9" and python_version < "4.0" \
 wacz-signing==0.4.1 ; python_version >= "3.9" and python_version < "4.0" \
     --hash=sha256:b82d131c86aab2fc80e11c30562bcacbd4ed7edb5a40df055dfbf9ce036b89d2 \
     --hash=sha256:cd3f6fb07b795ef35ec9aee7ee9527a11fa45ca56958c2c770c9a2f945b7746c
-werkzeug==3.0.4 ; python_version >= "3.9" and python_version < "4.0" \
-    --hash=sha256:02c9eb92b7d6c06f31a782811505d2157837cea66aaede3e217c7c27c039476c \
-    --hash=sha256:34f2371506b250df4d4f84bfe7b0921e4762525762bbd936614909fe25cd7306
+werkzeug==3.0.6 ; python_version >= "3.9" and python_version < "4.0" \
+    --hash=sha256:1bc0c2310d2fbb07b1dd1105eba2f7af72f322e1e455f2f93c993bee8c8a5f17 \
+    --hash=sha256:a8dd59d4de28ca70471a34cba79bed5f7ef2e036a76b3ab0835474246eb41f8d
 zipp==3.20.1 ; python_version >= "3.9" and python_version < "3.10" \
     --hash=sha256:9960cd8967c8f85a56f920d5d507274e74f9ff813a0ab8889a5b5be2daf44064 \
     --hash=sha256:c22b14cc4763c5a5b04134207736c107db42e9d3ef2d9779d465f5f1bcba572b
diff --git a/package-lock.json b/package-lock.json
index bd0e73a..aceb116 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -903,9 +903,10 @@
       }
     },
     "node_modules/cross-spawn": {
-      "version": "7.0.3",
-      "resolved": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.3.tgz",
-      "integrity": "sha512-iRDPJKUPVEND7dHPO8rkbOnPpyDygcDFtWjpeWNCgy8WP2rXcxXL8TskReQl6OrB2G7+UJrags1q15Fudc7G6w==",
+      "version": "7.0.6",
+      "resolved": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.6.tgz",
+      "integrity": "sha512-uV2QOWP2nWzsy2aMp8aRibhi9dlzF5Hgh5SHaB9OiTGEyDTiJJyx0uy51QXdyWbtAHNua4XJzUKca3OzKUd3vA==",
+      "license": "MIT",
       "dependencies": {
         "path-key": "^3.1.0",
         "shebang-command": "^2.0.0",