diff --git a/requirements.txt b/requirements.txt
index 14535245..2e90ccc3 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -24,7 +24,8 @@ brotli~=1.0
 requests[socks]
 requests-file
 
-urllib3==1.26.19
+# urllib3==1.26.19  # Unpinned - let requests decide compatible version
+# If specific version needed for security, use urllib3>=1.26.19,<3.0
 chardet>2.3.0
 
 wtforms~=3.0
@@ -55,7 +56,8 @@ beautifulsoup4>=4.0.0
 #         https://bugs.launchpad.net/lxml/+bug/2059910/comments/16
 lxml >=4.8.0,<6,!=5.2.0,!=5.2.1
 
-# XPath 2.0-3.1 support - 4.2.0 broke something?
+# XPath 2.0-3.1 support - 4.2.0 had issues, 4.1.5 stable
+# Consider updating to latest stable version periodically
 elementpath==4.1.5
 
 selenium~=4.31.0