diff --git a/bypy/sources.json b/bypy/sources.json
index 5a0893dac9..3acd331669 100644
--- a/bypy/sources.json
+++ b/bypy/sources.json
@@ -259,10 +259,10 @@
     },
 
     {
-        "name": "libtiff 4.6.0",
+        "name": "libtiff 4.7.1",
         "unix": {
             "file_extension": "tar.xz",
-            "hash": "sha256:e178649607d1e22b51cf361dd20a3753f244f022eefab1f2f218fc62ebaf87d2",
+            "hash": "sha256:b92017489bdc1db3a4c97191aa4b75366673cb746de0dce5d7a749d5954681ba",
             "urls": ["http://download.osgeo.org/libtiff/tiff-{version}.{file_extension}"]
         }
     },
@@ -327,19 +327,19 @@
     },
 
     {
-        "name": "libxml2 2.12.6",
+        "name": "libxml2 2.15.0",
         "unix": {
             "file_extension": "tar.xz",
-            "hash": "sha256:889c593a881a3db5fdd96cc9318c87df34eb648edfc458272ad46fd607353fbb",
+            "hash": "sha256:5abc766497c5b1d6d99231f662e30c99402a90d03b06c67b62d6c1179dedd561",
             "urls": ["https://download.gnome.org/sources/libxml2/{version_except_last}/{filename}"]
         }
     },
 
     {
-        "name": "libxslt 1.1.39",
+        "name": "libxslt 1.1.43",
         "unix": {
             "file_extension": "tar.xz",
-            "hash": "sha256:2a20ad621148339b0759c4d4e96719362dee64c9a096dbba625ba053846349f0",
+            "hash": "sha256:5a3d6b383ca5afc235b171118e90f5ff6aa27e9fea3303065231a6d403f0183a",
             "urls": ["https://download.gnome.org/sources/libxslt/{version_except_last}/{filename}"]
         }
     },
@@ -397,10 +397,19 @@
     },
 
     {
-        "name": "poppler 23.08.0",
+        "name": "lcms2 2.17",
+        "unix": {
+            "file_extension": "tar.gz",
+            "hash": "sha256:d11af569e42a1baa1650d20ad61d12e41af4fead4aa7964a01f93b08b53ab074",
+            "urls": ["https://github.com/mm2/Little-CMS/releases/download/lcms{version}/lcms2-{version}.{file_extension}"]
+        }
+    },
+
+    {
+        "name": "poppler 25.09.1",
         "unix": {
             "file_extension": "tar.xz",
-            "hash": "sha256:4a4bf7fc903b9f1a2ab7d04b7c5d8220db9bc6261cc73fdb9a826dc272f49aa8",
+            "hash": "sha256:0c1091d01d3dd1664a13816861e812d02b29201e96665454b81b52d261fad658",
             "urls": ["https://poppler.freedesktop.org/{filename}"]
         }
     },