diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 8d3d736cb..eb8155b22 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -10,3 +10,6 @@ updates:
       interval: "weekly"
     reviewers:
       - "elastic/apm-agent-python"
+    ignore:
+      - dependency-name: "urllib3" # ignore until lambda runtimes use OpenSSL 1.1.1+
+        versions: [">=2.0.0"]
diff --git a/CHANGELOG.asciidoc b/CHANGELOG.asciidoc
index 40ef1ce30..593a5630b 100644
--- a/CHANGELOG.asciidoc
+++ b/CHANGELOG.asciidoc
@@ -29,6 +29,19 @@ endif::[]
 //===== Bug fixes
 //
 
+=== Unreleased
+
+// Unreleased changes go here
+// When the next release happens, nest these changes under the "Python Agent version 6.x" heading
+//[float]
+//===== Features
+//
+[float]
+===== Bug fixes
+
+* Fix compatibility issue with older versions of OpenSSL in lambda runtimes {pull}1847[#1847]
+* Add `latest` tag to docker images {pull}1848[#1848]
+
 [[release-notes-6.x]]
 === Python Agent version 6.x
 
diff --git a/dev-utils/requirements.txt b/dev-utils/requirements.txt
index 5392c72da..30b3131ce 100644
--- a/dev-utils/requirements.txt
+++ b/dev-utils/requirements.txt
@@ -1,4 +1,4 @@
 # These are the pinned requirements for the lambda layer/docker image
 certifi==2023.5.7
-urllib3==2.0.2
+urllib3==1.26.16
 wrapt==1.15.0