diff --git a/requirements.txt b/requirements.txt
index 9725d6c3..4b78e234 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -59,7 +59,9 @@ mypy>=1.5.0,<2.0.0
 # psutil            — per-plugin resource monitoring in
 #                     src/plugin_system/resource_monitor.py. The monitor
 #                     silently no-ops when missing (PSUTIL_AVAILABLE = False).
-#   pip install 'psutil>=5.9.0,<6.0.0'
+#                     Note: web_interface/requirements.txt requires this
+#                     range as a hard dependency — keep the two in sync.
+#   pip install 'psutil>=6.0.0,<7.0.0'
 #
 # Flask-Limiter     — request rate limiting in web_interface/app.py
 #                     (accidental-abuse protection, not security). The
diff --git a/web_interface/requirements.txt b/web_interface/requirements.txt
index 6b1a98e0..3363b779 100644
--- a/web_interface/requirements.txt
+++ b/web_interface/requirements.txt
@@ -6,7 +6,7 @@
 flask>=3.1.3,<4.0.0
 werkzeug>=3.1.6,<4.0.0
 flask-wtf>=1.2.0  # CSRF protection (optional for local-only, but recommended)
-flask-limiter>=3.5.0  # Rate limiting (prevent accidental abuse)
+flask-limiter>=3.5.0,<4.0.0  # Rate limiting (prevent accidental abuse)
 flask-compress>=1.14  # gzip/brotli response compression (big win for the large JS/HTML over WiFi)
 
 # WebSocket support for plugins
@@ -26,7 +26,7 @@ Pillow>=12.2.0,<13.0.0
 psutil>=6.0.0,<7.0.0
 
 # Font rendering
-freetype-py>=2.5.0,<3.0.0
+freetype-py>=2.5.1,<3.0.0
 
 # Numerical operations
 # NumPy 1.24+ required for Python 3.12+ compatibility (compatible with 2.x)