diff --git a/apps/backend/requirements-dev.txt b/apps/backend/requirements-dev.txt
index f842f5b..e1fe65f 100644
--- a/apps/backend/requirements-dev.txt
+++ b/apps/backend/requirements-dev.txt
@@ -1,6 +1,6 @@
 # Test-only. Kept out of requirements.txt so the runtime image does not
 # ship a test framework.
-pytest>=9.1.1,<10.0.0
+pytest>=9.2.0,<10.0.0
 
 # A websocket regression tends to block a receive rather than raise. Without a
 # hard per-test cap, that hangs CI instead of failing it.
diff --git a/apps/backend/requirements.txt b/apps/backend/requirements.txt
index ae4f0c0..03e8f33 100644
--- a/apps/backend/requirements.txt
+++ b/apps/backend/requirements.txt
@@ -1,7 +1,7 @@
 anyio>=4.15.1,<5.0.0
-asyncpg>=0.31.0,<1.0.0
-fastapi>=0.141.1,<1.0.0
+asyncpg>=0.32.0,<1.0.0
+fastapi>=0.162.0,<1.0.0
 httpx>=0.28.1,<1.0.0
-pyjwt[crypto]>=2.14.0,<3.0.0
-python-dotenv>=1.2.3,<2.0.0
-uvicorn[standard]>=0.53.0,<1.0.0
+pyjwt[crypto]>=2.15.1,<3.0.0
+python-dotenv>=1.2.4,<2.0.0
+uvicorn[standard]>=0.54.0,<1.0.0