diff --git a/build/images/ml/Dockerfile.cpu b/build/images/ml/Dockerfile.cpu
index a08d070..faf9b87 100644
--- a/build/images/ml/Dockerfile.cpu
+++ b/build/images/ml/Dockerfile.cpu
@@ -3,7 +3,7 @@
 # and runs as non-root (uid 1000), which satisfies restricted Pod Security.
 # Catalog entry: name="Python ML (CPU · Ubuntu 24.04)", tag=ubuntu24.04-cpu-ml
 # Build context: build/images, so session-base/entrypoint.sh can be shared.
-FROM codercom/code-server:4.135.0 AS cs
+FROM codercom/code-server:4.137.0 AS cs
 
 FROM ubuntu:24.04
 ARG TTYD_VERSION=1.7.7
diff --git a/build/images/ml/Dockerfile.cpu22 b/build/images/ml/Dockerfile.cpu22
index 268accd..b75c25e 100644
--- a/build/images/ml/Dockerfile.cpu22
+++ b/build/images/ml/Dockerfile.cpu22
@@ -9,7 +9,7 @@
 # and runs as non-root (uid 1000), which satisfies restricted Pod Security.
 # Catalog entry: name="Ubuntu 22.04", tag=ml-ubuntu22.04
 # Build context: build/images, so session-base/entrypoint.sh can be shared.
-FROM codercom/code-server:4.135.0 AS cs
+FROM codercom/code-server:4.137.0 AS cs
 
 FROM ubuntu:22.04
 ARG TTYD_VERSION=1.7.7
diff --git a/build/images/ml/Dockerfile.ml-cu128 b/build/images/ml/Dockerfile.ml-cu128
index 234dfba..a0ce4b1 100644
--- a/build/images/ml/Dockerfile.ml-cu128
+++ b/build/images/ml/Dockerfile.ml-cu128
@@ -3,7 +3,7 @@
 # PyTorch or TensorFlow themselves if they want one.
 # Catalog entry: name="Python ML · CUDA 12.4 · cuDNN 9 (GPU)", tag=ml-cuda12.4-cudnn9-gpu
 # Build context: build/images, so session-base/entrypoint.sh can be shared.
-FROM codercom/code-server:4.135.0 AS cs
+FROM codercom/code-server:4.137.0 AS cs
 
 FROM nvidia/cuda:12.8.1-cudnn-runtime-ubuntu24.04
 ARG TTYD_VERSION=1.7.7
diff --git a/build/images/ml/Dockerfile.ml-gpu b/build/images/ml/Dockerfile.ml-gpu
index 16d8b69..2c0f21e 100644
--- a/build/images/ml/Dockerfile.ml-gpu
+++ b/build/images/ml/Dockerfile.ml-gpu
@@ -3,7 +3,7 @@
 # PyTorch or TensorFlow themselves if they want one.
 # Catalog entry: name="Python ML · CUDA 12.4 · cuDNN 9 (GPU)", tag=ml-cuda12.4-cudnn9-gpu
 # Build context: build/images, so session-base/entrypoint.sh can be shared.
-FROM codercom/code-server:4.135.0 AS cs
+FROM codercom/code-server:4.137.0 AS cs
 
 FROM nvidia/cuda:12.4.1-cudnn-runtime-ubuntu22.04
 ARG TTYD_VERSION=1.7.7
diff --git a/build/images/ml/Dockerfile.pytorch-blackwell b/build/images/ml/Dockerfile.pytorch-blackwell
index 0cbbae6..f787608 100644
--- a/build/images/ml/Dockerfile.pytorch-blackwell
+++ b/build/images/ml/Dockerfile.pytorch-blackwell
@@ -2,7 +2,7 @@
 # the three GShare connection tools and SciPy.
 # Catalog entry: name="PyTorch 2.6 · CUDA 12.4 (GPU)", tag=pytorch2.6-cuda12.4-cudnn9
 # Build context: build/images, so session-base/entrypoint.sh can be shared.
-FROM codercom/code-server:4.135.0 AS cs
+FROM codercom/code-server:4.137.0 AS cs
 
 FROM pytorch/pytorch:2.7.1-cuda12.8-cudnn9-runtime
 ARG TTYD_VERSION=1.7.7
diff --git a/build/images/ml/Dockerfile.pytorch-gpu b/build/images/ml/Dockerfile.pytorch-gpu
index d1e018b..86b7001 100644
--- a/build/images/ml/Dockerfile.pytorch-gpu
+++ b/build/images/ml/Dockerfile.pytorch-gpu
@@ -2,7 +2,7 @@
 # the three GShare connection tools and SciPy.
 # Catalog entry: name="PyTorch 2.6 · CUDA 12.4 (GPU)", tag=pytorch2.6-cuda12.4-cudnn9
 # Build context: build/images, so session-base/entrypoint.sh can be shared.
-FROM codercom/code-server:4.135.0 AS cs
+FROM codercom/code-server:4.137.0 AS cs
 
 FROM pytorch/pytorch:2.6.0-cuda12.4-cudnn9-runtime
 ARG TTYD_VERSION=1.7.7
diff --git a/build/images/ml/Dockerfile.pytorch28 b/build/images/ml/Dockerfile.pytorch28
index 614048a..f98cbe5 100644
--- a/build/images/ml/Dockerfile.pytorch28
+++ b/build/images/ml/Dockerfile.pytorch28
@@ -2,7 +2,7 @@
 # the three GShare connection tools and SciPy.
 # Catalog entry: name="PyTorch 2.6 · CUDA 12.4 (GPU)", tag=pytorch2.6-cuda12.4-cudnn9
 # Build context: build/images, so session-base/entrypoint.sh can be shared.
-FROM codercom/code-server:4.135.0 AS cs
+FROM codercom/code-server:4.137.0 AS cs
 
 FROM pytorch/pytorch:2.8.0-cuda12.9-cudnn9-runtime
 ARG TTYD_VERSION=1.7.7
diff --git a/build/images/ml/Dockerfile.tensorflow-gpu b/build/images/ml/Dockerfile.tensorflow-gpu
index 84d7669..66eb9c7 100644
--- a/build/images/ml/Dockerfile.tensorflow-gpu
+++ b/build/images/ml/Dockerfile.tensorflow-gpu
@@ -2,7 +2,7 @@
 # pair, plus the three GShare connection tools and SciPy.
 # Catalog entry: name="TensorFlow 2.18 (GPU)", tag=tensorflow2.18-gpu
 # Build context: build/images, so session-base/entrypoint.sh can be shared.
-FROM codercom/code-server:4.135.0 AS cs
+FROM codercom/code-server:4.137.0 AS cs
 
 FROM tensorflow/tensorflow:2.18.0-gpu
 ARG TTYD_VERSION=1.7.7
diff --git a/build/images/ml/Dockerfile.tensorflow-ngc b/build/images/ml/Dockerfile.tensorflow-ngc
index 6b269b3..0a40ebf 100644
--- a/build/images/ml/Dockerfile.tensorflow-ngc
+++ b/build/images/ml/Dockerfile.tensorflow-ngc
@@ -2,7 +2,7 @@
 # plus the three GShare connection tools. Hub's tensorflow/tensorflow images ship an older CUDA and
 # do not run on RTX PRO 5000/6000. Catalog entry: cuda_version=12.8.
 # Build context: build/images, so session-base/entrypoint.sh can be shared.
-FROM codercom/code-server:4.135.0 AS cs
+FROM codercom/code-server:4.137.0 AS cs
 
 FROM nvcr.io/nvidia/tensorflow:25.02-tf2-py3
 ARG TTYD_VERSION=1.7.7