diff --git a/demo/Dockerfile.jupyter b/demo/Dockerfile.jupyter
index 4007ee0..e82a7cb 100644
--- a/demo/Dockerfile.jupyter
+++ b/demo/Dockerfile.jupyter
@@ -2,7 +2,7 @@
 # Python stack comes from the same uv.lock the tests run on.
 
 # uv exports the lock; only its binary is copied into the image.
-FROM ghcr.io/astral-sh/uv:0.13.1@sha256:4a1f3666816dafadd20ceb71eac9a7d56d7ef30279f7d64048519ab901ada336 AS uv
+FROM ghcr.io/astral-sh/uv:0.13.5@sha256:32a7bb39b496babbd997b0a39a4d66c126bdaf5661b302bf6f06abda8deca6ff AS uv
 
 # quay.io is where Project Jupyter publishes its images now; the Docker Hub
 # copy stopped receiving updates in October 2023.