diff --git a/Dockerfile.tmpl b/Dockerfile.tmpl
index a5e5df79..8d72c7a5 100644
--- a/Dockerfile.tmpl
+++ b/Dockerfile.tmpl
@@ -1,7 +1,7 @@
 {{ if eq .Accelerator "gpu" }}
-FROM us-docker.pkg.dev/colab-images/public/runtime:release-colab-external-images_20260514-060047_RC00
+FROM us-docker.pkg.dev/colab-images/public/runtime:release-colab-external-images_20260716-060051_RC00
 {{ else }}
-FROM us-docker.pkg.dev/colab-images/public/cpu-runtime:release-colab-external-images_20260514-060047_RC00
+FROM us-docker.pkg.dev/colab-images/public/cpu-runtime:release-colab-external-images_20260716-060051_RC00
 {{ end}}
 
 ADD kaggle_requirements.txt /kaggle_requirements.txt
@@ -82,9 +82,11 @@ RUN mkdir -p /usr/share/nltk_data && \
     twitter_samples udhr2 udhr unicode_samples universal_tagset universal_treebanks_v20 \
     vader_lexicon verbnet webtext word2vec_sample wordnet wordnet_ic words ycoe
 
-RUN apt-get install -y git-lfs && \
-    # vtk dependencies
-    apt-get install -y libgl1-mesa-glx && \
+# Don't `apt-get install git-lfs` here. The base image already ships
+# git-lfs 3.7.1 built with Go 1.26, and Ubuntu's git-lfs 3.0.2 package
+# overwrites it with an older build from Go 1.18.
+# vtk dependencies
+RUN apt-get install -y libgl1-mesa-glx && \
     # xvfbwrapper dependencies
     apt-get install -y xvfb && \
     /tmp/clean-layer.sh
diff --git a/kaggle_requirements.txt b/kaggle_requirements.txt
index c7eb18e5..2de01e43 100644
--- a/kaggle_requirements.txt
+++ b/kaggle_requirements.txt
@@ -100,6 +100,9 @@ papermill
 path
 path.py
 pdf2image
+# The base image ships pillow 11.3; pin up to a newer release.
+# Remove once the base image ships >=12.2 itself.
+pillow>=12.2
 plotly-express
 pudb
 pyLDAvis
@@ -127,11 +130,14 @@ git+https://github.com/facebookresearch/segment-anything.git
 squarify
 tensorflow-io
 # Must be compatible with torch version: https://github.com/meta-pytorch/torchcodec?tab=readme-ov-file#installing-torchcodec
-torchcodec==0.10.0
+torchcodec==0.11.0
 torchinfo
 torchmetrics
 torchtune
 transformers>=5.0.0
+# The base image ships urllib3 2.5; pin up to a newer release.
+# Remove once the base image ships >=2.7 itself.
+urllib3>=2.7
 vtk
 wavio
 xvfbwrapper