diff --git a/images/hub/requirements.txt b/images/hub/requirements.txt
index 86d984b8b7..ebc71178cf 100644
--- a/images/hub/requirements.txt
+++ b/images/hub/requirements.txt
@@ -2,11 +2,11 @@
 # This file is autogenerated by pip-compile with Python 3.12
 # by the following command:
 #
-#    Use the "Run workflow" button at https://github.com/jupyterhub/zero-to-jupyterhub-k8s/actions/workflows/watch-dependencies.yaml
+#    pip-compile --output-file=requirements.txt unfrozen/requirements.txt
 #
-aiohappyeyeballs==2.4.3
+aiohappyeyeballs==2.4.4
     # via aiohttp
-aiohttp==3.10.11
+aiohttp==3.11.9
     # via kubernetes-asyncio
 aiosignal==1.3.1
     # via aiohttp
@@ -21,7 +21,7 @@ attrs==24.2.0
     #   aiohttp
     #   jsonschema
     #   referencing
-bcrypt==4.2.0
+bcrypt==4.2.1
     # via
     #   jupyterhub-firstuseauthenticator
     #   jupyterhub-nativeauthenticator
@@ -37,7 +37,7 @@ cffi==1.17.1
     # via cryptography
 charset-normalizer==3.4.0
     # via requests
-cryptography==43.0.3
+cryptography==44.0.0
     # via
     #   certipy
     #   pyjwt
@@ -57,6 +57,8 @@ google-auth-oauthlib==1.2.1
     # via oauthenticator
 greenlet==3.1.1
     # via sqlalchemy
+hatchling==1.26.3
+    # via -r unfrozen/requirements.txt
 idna==3.10
     # via
     #   jsonschema
@@ -71,7 +73,7 @@ jinja2==3.1.4
     #   jupyterhub-kubespawner
 jsonpointer==3.0.0
     # via jsonschema
-jsonschema==4.23.0
+jsonschema[format-nongpl]==4.23.0
     # via
     #   jupyter-events
     #   oauthenticator
@@ -86,6 +88,7 @@ jupyterhub==5.2.1
     #   jupyterhub-kubespawner
     #   jupyterhub-ldapauthenticator
     #   jupyterhub-ltiauthenticator
+    #   jupyterhub-multiauthenticator
     #   jupyterhub-nativeauthenticator
     #   oauthenticator
 jupyterhub-firstuseauthenticator==1.1.0
@@ -94,11 +97,13 @@ jupyterhub-hmacauthenticator==1.0
     # via -r unfrozen/requirements.txt
 jupyterhub-idle-culler==1.4.0
     # via -r unfrozen/requirements.txt
-jupyterhub-kubespawner==7.0.0
+jupyterhub-kubespawner==7.0.0b1
     # via -r unfrozen/requirements.txt
 jupyterhub-ldapauthenticator==2.0.2
     # via -r unfrozen/requirements.txt
-jupyterhub-ltiauthenticator==1.6.2
+jupyterhub-ltiauthenticator @ git+https://github.com/TIK-NFL/jupyterhub-ltiauthenticator.git@multiauth_support
+    # via -r unfrozen/requirements.txt
+jupyterhub-multiauthenticator @ git+https://github.com/TIK-NFL/jupyterhub-multiauthenticator.git@lti_support
     # via -r unfrozen/requirements.txt
 jupyterhub-nativeauthenticator==1.3.0
     # via -r unfrozen/requirements.txt
@@ -108,7 +113,7 @@ kubernetes-asyncio==31.1.0
     # via jupyterhub-kubespawner
 ldap3==2.9.1
     # via jupyterhub-ldapauthenticator
-mako==1.3.6
+mako==1.3.7
     # via alembic
 markupsafe==3.0.2
     # via
@@ -120,8 +125,10 @@ multidict==6.1.0
     #   yarl
 mwoauth==0.4.0
     # via oauthenticator
-oauthenticator==17.1.0
-    # via -r unfrozen/requirements.txt
+oauthenticator[googlegroups,mediawiki]==17.2.0
+    # via
+    #   -r unfrozen/requirements.txt
+    #   jupyterhub-multiauthenticator
 oauthlib==3.2.2
     # via
     #   jupyterhub
@@ -130,16 +137,23 @@ oauthlib==3.2.2
     #   requests-oauthlib
 onetimepass==1.0.1
     # via jupyterhub-nativeauthenticator
-packaging==24.1
+packaging==24.2
     # via
+    #   hatchling
     #   jupyterhub
     #   jupyterhub-idle-culler
 pamela==1.2.0
     # via jupyterhub
-prometheus-client==0.21.0
+pathspec==0.12.1
+    # via hatchling
+pluggy==1.5.0
+    # via hatchling
+prometheus-client==0.21.1
     # via jupyterhub
-propcache==0.2.0
-    # via yarl
+propcache==0.2.1
+    # via
+    #   aiohttp
+    #   yarl
 psycopg2==2.9.10
     # via -r unfrozen/requirements.txt
 pyasn1==0.6.1
@@ -153,11 +167,11 @@ pycparser==2.22
     # via cffi
 pycurl==7.45.3
     # via -r unfrozen/requirements.txt
-pydantic==2.9.2
+pydantic==2.10.3
     # via jupyterhub
-pydantic-core==2.23.4
+pydantic-core==2.27.1
     # via pydantic
-pyjwt==2.9.0
+pyjwt[crypto]==2.10.1
     # via
     #   jupyterhub-ltiauthenticator
     #   mwoauth
@@ -202,7 +216,7 @@ rfc3986-validator==0.1.1
     # via
     #   jsonschema
     #   jupyter-events
-rpds-py==0.21.0
+rpds-py==0.22.1
     # via
     #   jsonschema
     #   referencing
@@ -242,6 +256,8 @@ traitlets==5.14.3
     #   jupyterhub-ldapauthenticator
     #   jupyterhub-ltiauthenticator
     #   oauthenticator
+trove-classifiers==2024.10.21.16
+    # via hatchling
 types-python-dateutil==2.9.0.20241003
     # via arrow
 typing-extensions==4.12.2
@@ -257,7 +273,7 @@ urllib3==2.2.3
     #   jupyterhub-kubespawner
     #   kubernetes-asyncio
     #   requests
-webcolors==24.8.0
+webcolors==24.11.1
     # via jsonschema
-yarl==1.17.1
+yarl==1.18.3
     # via aiohttp
diff --git a/images/hub/unfrozen/requirements.txt b/images/hub/unfrozen/requirements.txt
index 241c7990df..605113d042 100644
--- a/images/hub/unfrozen/requirements.txt
+++ b/images/hub/unfrozen/requirements.txt
@@ -21,6 +21,11 @@ jupyterhub-ltiauthenticator==1.*
 jupyterhub-nativeauthenticator==1.*
 jupyterhub-tmpauthenticator==1.*
 oauthenticator[googlegroups,mediawiki]==17.*
+git+https://github.com/TIK-NFL/jupyterhub-ltiauthenticator.git@multiauth_support
+git+https://github.com/TIK-NFL/jupyterhub-multiauthenticator.git@lti_support
+
+## Build tools
+hatchling
 
 # JupyterHub service shutting servers after a period of inactivity
 jupyterhub-idle-culler==1.*