diff --git a/third_party/py/BUILD b/third_party/py/BUILD
index eadbafd..efa4a96 100644
--- a/third_party/py/BUILD
+++ b/third_party/py/BUILD
@@ -1,4 +1,7 @@
 load("@rules_python//python:pip.bzl", "compile_pip_requirements")
+
 compile_pip_requirements(
     name = "requirements",
+    # Allow setuptools and friends to be pulled in as @pydeps_setuptools.
+    extra_args = ["--allow-unsafe"],
 )
diff --git a/third_party/py/requirements.txt b/third_party/py/requirements.txt
index e36bef8..5db9170 100644
--- a/third_party/py/requirements.txt
+++ b/third_party/py/requirements.txt
@@ -1,6 +1,6 @@
 #
-# This file is autogenerated by pip-compile with python 3.10
-# To update, run:
+# This file is autogenerated by pip-compile with Python 3.10
+# by the following command:
 #
 #    bazel run //third_party/py:requirements.update
 #
@@ -402,6 +402,7 @@
     --hash=sha256:d27ec7509b9c18b6d73f2f5ede2622441de812e7b1a80bbd446cb0633bd3d5ae \
     --hash=sha256:d5508f0b173e6aa47273bdc0a0b5ba055b59662ba7c7ee5119528f466585526b \
     --hash=sha256:d75209eed723105f9596807495d58d10b3470fa6732dd6756595e89925ce2470 \
+    --hash=sha256:d967650d3f56af314b72df7089d96cda1083a7fc2da05b375d2bc48c82ab3f3c \
     --hash=sha256:db1a39669102a1d8d12b57de2bb7e2ec9066a6f2b3da35ae511ff93b01b5d564 \
     --hash=sha256:dbfcfc0218093a19c252ca8eb9aee3d29cfdcb586df21049b9d777fd32c14fd9 \
     --hash=sha256:e0f72c9ddb8cd28532185f54cc1453f2c16fb417a08b53a855c4e6a418edd099 \
@@ -749,6 +750,7 @@
 robot-detection==0.4 \
     --hash=sha256:3d8fb72ca47164b8ce55e33bdda93742f62c348def7d3cc3b42b0ceb4795a2f5
     # via hyperkitty
+    # via -r third_party/py/requirements.in
 six==1.16.0 \
     --hash=sha256:1e61c37477a1626458e36f7b1d82aa5c9b094fa4802892072e49de9c60c4c926 \
     --hash=sha256:8abb2f1d86890a2dfb989f9a77cfcfd3e47c2a354b01111771326f8aa26e0254