diff --git a/requirements-unit.txt b/requirements-unit.txt
index 166db8a..dac0b5b 100644
--- a/requirements-unit.txt
+++ b/requirements-unit.txt
@@ -6,208 +6,208 @@
 #
 annotated-types==0.7.0
     # via
-    #   -r requirements.txt
+    #   -r /tmp/renovate/repos/github/canonical/envoy-operator/requirements.txt
     #   pydantic
 anyio==4.5.2
     # via
-    #   -r requirements.txt
+    #   -r /tmp/renovate/repos/github/canonical/envoy-operator/requirements.txt
     #   httpx
 attrs==24.2.0
     # via
-    #   -r requirements.txt
+    #   -r /tmp/renovate/repos/github/canonical/envoy-operator/requirements.txt
     #   jsonschema
 backports-strenum==1.3.1
     # via
-    #   -r requirements.txt
+    #   -r /tmp/renovate/repos/github/canonical/envoy-operator/requirements.txt
     #   juju
 bcrypt==4.2.1
     # via
-    #   -r requirements.txt
+    #   -r /tmp/renovate/repos/github/canonical/envoy-operator/requirements.txt
     #   paramiko
 cachetools==5.5.0
     # via
-    #   -r requirements.txt
+    #   -r /tmp/renovate/repos/github/canonical/envoy-operator/requirements.txt
     #   google-auth
 certifi==2024.8.30
     # via
-    #   -r requirements.txt
+    #   -r /tmp/renovate/repos/github/canonical/envoy-operator/requirements.txt
     #   httpcore
     #   httpx
     #   kubernetes
     #   requests
 cffi==1.17.1
     # via
-    #   -r requirements.txt
+    #   -r /tmp/renovate/repos/github/canonical/envoy-operator/requirements.txt
     #   cryptography
     #   pynacl
 charmed-kubeflow-chisme==0.4.3
-    # via -r requirements.txt
+    # via -r /tmp/renovate/repos/github/canonical/envoy-operator/requirements.txt
 charset-normalizer==3.4.0
     # via
-    #   -r requirements.txt
+    #   -r /tmp/renovate/repos/github/canonical/envoy-operator/requirements.txt
     #   requests
 cosl==0.0.45
-    # via -r requirements.txt
+    # via -r /tmp/renovate/repos/github/canonical/envoy-operator/requirements.txt
 coverage==7.6.1
     # via -r requirements-unit.in
 cryptography==44.0.0
     # via
-    #   -r requirements.txt
+    #   -r /tmp/renovate/repos/github/canonical/envoy-operator/requirements.txt
     #   paramiko
 deepdiff==6.2.1
     # via
-    #   -r requirements.txt
+    #   -r /tmp/renovate/repos/github/canonical/envoy-operator/requirements.txt
     #   charmed-kubeflow-chisme
 exceptiongroup==1.2.2
     # via
-    #   -r requirements.txt
+    #   -r /tmp/renovate/repos/github/canonical/envoy-operator/requirements.txt
     #   anyio
     #   pytest
 google-auth==2.36.0
     # via
-    #   -r requirements.txt
+    #   -r /tmp/renovate/repos/github/canonical/envoy-operator/requirements.txt
     #   kubernetes
 h11==0.14.0
     # via
-    #   -r requirements.txt
+    #   -r /tmp/renovate/repos/github/canonical/envoy-operator/requirements.txt
     #   httpcore
 httpcore==1.0.7
     # via
-    #   -r requirements.txt
+    #   -r /tmp/renovate/repos/github/canonical/envoy-operator/requirements.txt
     #   httpx
 httpx==0.27.2
     # via
-    #   -r requirements.txt
+    #   -r /tmp/renovate/repos/github/canonical/envoy-operator/requirements.txt
     #   lightkube
 hvac==2.3.0
     # via
-    #   -r requirements.txt
+    #   -r /tmp/renovate/repos/github/canonical/envoy-operator/requirements.txt
     #   juju
 idna==3.10
     # via
-    #   -r requirements.txt
+    #   -r /tmp/renovate/repos/github/canonical/envoy-operator/requirements.txt
     #   anyio
     #   httpx
     #   requests
 importlib-resources==6.4.5
     # via
-    #   -r requirements.txt
+    #   -r /tmp/renovate/repos/github/canonical/envoy-operator/requirements.txt
     #   jsonschema
 iniconfig==2.0.0
     # via pytest
 jinja2==3.1.4
     # via
-    #   -r requirements.txt
+    #   -r /tmp/renovate/repos/github/canonical/envoy-operator/requirements.txt
     #   charmed-kubeflow-chisme
 jsonschema==4.17.3
     # via
-    #   -r requirements.txt
+    #   -r /tmp/renovate/repos/github/canonical/envoy-operator/requirements.txt
     #   serialized-data-interface
 juju==3.6.0.0
     # via
-    #   -r requirements.txt
+    #   -r /tmp/renovate/repos/github/canonical/envoy-operator/requirements.txt
     #   charmed-kubeflow-chisme
 kubernetes==30.1.0
     # via
-    #   -r requirements.txt
+    #   -r /tmp/renovate/repos/github/canonical/envoy-operator/requirements.txt
     #   juju
 lightkube==0.15.6
     # via
-    #   -r requirements.txt
+    #   -r /tmp/renovate/repos/github/canonical/envoy-operator/requirements.txt
     #   charmed-kubeflow-chisme
     #   cosl
 lightkube-models==1.31.1.8
     # via
-    #   -r requirements.txt
+    #   -r /tmp/renovate/repos/github/canonical/envoy-operator/requirements.txt
     #   lightkube
 macaroonbakery==1.3.4
     # via
-    #   -r requirements.txt
+    #   -r /tmp/renovate/repos/github/canonical/envoy-operator/requirements.txt
     #   juju
 markupsafe==2.1.5
     # via
-    #   -r requirements.txt
+    #   -r /tmp/renovate/repos/github/canonical/envoy-operator/requirements.txt
     #   jinja2
 mypy-extensions==1.0.0
     # via
-    #   -r requirements.txt
+    #   -r /tmp/renovate/repos/github/canonical/envoy-operator/requirements.txt
     #   typing-inspect
 oauthlib==3.2.2
     # via
-    #   -r requirements.txt
+    #   -r /tmp/renovate/repos/github/canonical/envoy-operator/requirements.txt
     #   kubernetes
     #   requests-oauthlib
 oci-image==1.0.0
-    # via -r requirements.txt
+    # via -r /tmp/renovate/repos/github/canonical/envoy-operator/requirements.txt
 ops==2.17.1
     # via
-    #   -r requirements.txt
+    #   -r /tmp/renovate/repos/github/canonical/envoy-operator/requirements.txt
     #   charmed-kubeflow-chisme
     #   cosl
     #   serialized-data-interface
 ordered-set==4.1.0
     # via
-    #   -r requirements.txt
+    #   -r /tmp/renovate/repos/github/canonical/envoy-operator/requirements.txt
     #   deepdiff
 packaging==24.2
     # via
-    #   -r requirements.txt
+    #   -r /tmp/renovate/repos/github/canonical/envoy-operator/requirements.txt
     #   juju
     #   pytest
 paramiko==3.5.0
     # via
-    #   -r requirements.txt
+    #   -r /tmp/renovate/repos/github/canonical/envoy-operator/requirements.txt
     #   juju
 pkgutil-resolve-name==1.3.10
     # via
-    #   -r requirements.txt
+    #   -r /tmp/renovate/repos/github/canonical/envoy-operator/requirements.txt
     #   jsonschema
 pluggy==1.5.0
     # via pytest
 protobuf==5.29.1
     # via
-    #   -r requirements.txt
+    #   -r /tmp/renovate/repos/github/canonical/envoy-operator/requirements.txt
     #   macaroonbakery
 pyasn1==0.6.1
     # via
-    #   -r requirements.txt
+    #   -r /tmp/renovate/repos/github/canonical/envoy-operator/requirements.txt
     #   juju
     #   pyasn1-modules
     #   rsa
 pyasn1-modules==0.4.1
     # via
-    #   -r requirements.txt
+    #   -r /tmp/renovate/repos/github/canonical/envoy-operator/requirements.txt
     #   google-auth
 pycparser==2.22
     # via
-    #   -r requirements.txt
+    #   -r /tmp/renovate/repos/github/canonical/envoy-operator/requirements.txt
     #   cffi
-pydantic==2.6.4
+pydantic==2.10.3
     # via
-    #   -r requirements.txt
+    #   -r /tmp/renovate/repos/github/canonical/envoy-operator/requirements.txt
     #   cosl
-pydantic-core==2.16.3
+pydantic-core==2.27.1
     # via
-    #   -r requirements.txt
+    #   -r /tmp/renovate/repos/github/canonical/envoy-operator/requirements.txt
     #   pydantic
 pymacaroons==0.13.0
     # via
-    #   -r requirements.txt
+    #   -r /tmp/renovate/repos/github/canonical/envoy-operator/requirements.txt
     #   macaroonbakery
 pynacl==1.5.0
     # via
-    #   -r requirements.txt
+    #   -r /tmp/renovate/repos/github/canonical/envoy-operator/requirements.txt
     #   macaroonbakery
     #   paramiko
     #   pymacaroons
 pyrfc3339==1.1
     # via
-    #   -r requirements.txt
+    #   -r /tmp/renovate/repos/github/canonical/envoy-operator/requirements.txt
     #   juju
     #   macaroonbakery
 pyrsistent==0.20.0
     # via
-    #   -r requirements.txt
+    #   -r /tmp/renovate/repos/github/canonical/envoy-operator/requirements.txt
     #   jsonschema
 pytest==8.3.4
     # via
@@ -220,15 +220,15 @@ pytest-mock==3.14.0
     # via -r requirements-unit.in
 python-dateutil==2.9.0.post0
     # via
-    #   -r requirements.txt
+    #   -r /tmp/renovate/repos/github/canonical/envoy-operator/requirements.txt
     #   kubernetes
 pytz==2024.2
     # via
-    #   -r requirements.txt
+    #   -r /tmp/renovate/repos/github/canonical/envoy-operator/requirements.txt
     #   pyrfc3339
 pyyaml==6.0.2
     # via
-    #   -r requirements.txt
+    #   -r /tmp/renovate/repos/github/canonical/envoy-operator/requirements.txt
     #   cosl
     #   juju
     #   kubernetes
@@ -237,7 +237,7 @@ pyyaml==6.0.2
     #   serialized-data-interface
 requests==2.32.3
     # via
-    #   -r requirements.txt
+    #   -r /tmp/renovate/repos/github/canonical/envoy-operator/requirements.txt
     #   hvac
     #   kubernetes
     #   macaroonbakery
@@ -245,50 +245,50 @@ requests==2.32.3
     #   serialized-data-interface
 requests-oauthlib==2.0.0
     # via
-    #   -r requirements.txt
+    #   -r /tmp/renovate/repos/github/canonical/envoy-operator/requirements.txt
     #   kubernetes
 rsa==4.9
     # via
-    #   -r requirements.txt
+    #   -r /tmp/renovate/repos/github/canonical/envoy-operator/requirements.txt
     #   google-auth
 ruamel-yaml==0.18.6
     # via
-    #   -r requirements.txt
+    #   -r /tmp/renovate/repos/github/canonical/envoy-operator/requirements.txt
     #   charmed-kubeflow-chisme
 ruamel-yaml-clib==0.2.8
     # via
-    #   -r requirements.txt
+    #   -r /tmp/renovate/repos/github/canonical/envoy-operator/requirements.txt
     #   ruamel-yaml
 serialized-data-interface==0.7.0
     # via
-    #   -r requirements.txt
+    #   -r /tmp/renovate/repos/github/canonical/envoy-operator/requirements.txt
     #   charmed-kubeflow-chisme
 six==1.17.0
     # via
-    #   -r requirements.txt
+    #   -r /tmp/renovate/repos/github/canonical/envoy-operator/requirements.txt
     #   kubernetes
     #   macaroonbakery
     #   pymacaroons
     #   python-dateutil
 sniffio==1.3.1
     # via
-    #   -r requirements.txt
+    #   -r /tmp/renovate/repos/github/canonical/envoy-operator/requirements.txt
     #   anyio
     #   httpx
 tenacity==9.0.0
     # via
-    #   -r requirements.txt
+    #   -r /tmp/renovate/repos/github/canonical/envoy-operator/requirements.txt
     #   charmed-kubeflow-chisme
     #   cosl
 tomli==2.2.1
     # via pytest
 toposort==1.10
     # via
-    #   -r requirements.txt
+    #   -r /tmp/renovate/repos/github/canonical/envoy-operator/requirements.txt
     #   juju
 typing-extensions==4.12.2
     # via
-    #   -r requirements.txt
+    #   -r /tmp/renovate/repos/github/canonical/envoy-operator/requirements.txt
     #   annotated-types
     #   anyio
     #   cosl
@@ -298,23 +298,23 @@ typing-extensions==4.12.2
     #   typing-inspect
 typing-inspect==0.9.0
     # via
-    #   -r requirements.txt
+    #   -r /tmp/renovate/repos/github/canonical/envoy-operator/requirements.txt
     #   juju
 urllib3==2.2.3
     # via
-    #   -r requirements.txt
+    #   -r /tmp/renovate/repos/github/canonical/envoy-operator/requirements.txt
     #   kubernetes
     #   requests
 websocket-client==1.8.0
     # via
-    #   -r requirements.txt
+    #   -r /tmp/renovate/repos/github/canonical/envoy-operator/requirements.txt
     #   kubernetes
     #   ops
 websockets==13.1
     # via
-    #   -r requirements.txt
+    #   -r /tmp/renovate/repos/github/canonical/envoy-operator/requirements.txt
     #   juju
 zipp==3.20.2
     # via
-    #   -r requirements.txt
+    #   -r /tmp/renovate/repos/github/canonical/envoy-operator/requirements.txt
     #   importlib-resources
diff --git a/requirements.in b/requirements.in
index 2664e15..ad0c5f0 100644
--- a/requirements.in
+++ b/requirements.in
@@ -10,4 +10,4 @@ ops
 # To avoid build-time errors, pydantic has to be pinned to a version that can be built
 # with the rustc version that the OS can provide.
 # Remove this pin when the base OS can install rustc v1.76 or newer.
-pydantic>=2.6,<2.7
+pydantic>=2.10,<2.11
diff --git a/requirements.txt b/requirements.txt
index 3dda59e..a6d9f0a 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -106,11 +106,11 @@ pyasn1-modules==0.4.1
     # via google-auth
 pycparser==2.22
     # via cffi
-pydantic==2.6.4
+pydantic==2.10.3
     # via
     #   -r requirements.in
     #   cosl
-pydantic-core==2.16.3
+pydantic-core==2.27.1
     # via pydantic
 pymacaroons==0.13.0
     # via macaroonbakery