From 2d20ef6cbcf31f2aef9f4368f34dc832022d5e5e Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sun, 1 Nov 2026 09:12:16 +0000
Subject: [PATCH] Bump the backend group across 1 directory with 6 updates

Updates the requirements on [asyncpg](https://github.com/MagicStack/asyncpg), [fastapi](https://github.com/fastapi/fastapi), [pyjwt](https://github.com/jpadilla/pyjwt), [python-dotenv](https://github.com/theskumar/python-dotenv), [uvicorn](https://github.com/Kludex/uvicorn) and [pytest](https://github.com/pytest-dev/pytest) to permit the latest version.

Updates `asyncpg` to 0.32.0
- [Release notes](https://github.com/MagicStack/asyncpg/releases)
- [Commits](https://github.com/MagicStack/asyncpg/compare/v0.31.0...v0.32.0)

Updates `fastapi` to 0.162.0
- [Release notes](https://github.com/fastapi/fastapi/releases)
- [Commits](https://github.com/fastapi/fastapi/compare/0.141.1...0.162.0)

Updates `pyjwt` to 2.15.1
- [Release notes](https://github.com/jpadilla/pyjwt/releases)
- [Changelog](https://github.com/jpadilla/pyjwt/blob/master/CHANGELOG.rst)
- [Commits](https://github.com/jpadilla/pyjwt/compare/2.14.0...2.15.1)

Updates `python-dotenv` to 1.2.4
- [Release notes](https://github.com/theskumar/python-dotenv/releases)
- [Changelog](https://github.com/theskumar/python-dotenv/blob/main/CHANGELOG.md)
- [Commits](https://github.com/theskumar/python-dotenv/compare/v1.2.3...v1.2.4)

Updates `uvicorn` to 0.54.0
- [Release notes](https://github.com/Kludex/uvicorn/releases)
- [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md)
- [Commits](https://github.com/Kludex/uvicorn/compare/0.53.0...0.54.0)

Updates `pytest` to 9.2.0
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](https://github.com/pytest-dev/pytest/compare/9.1.1...9.2.0)

---
updated-dependencies:
- dependency-name: asyncpg
  dependency-version: 0.32.0
  dependency-type: direct:production
  dependency-group: backend
- dependency-name: fastapi
  dependency-version: 0.162.0
  dependency-type: direct:production
  dependency-group: backend
- dependency-name: pyjwt
  dependency-version: 2.15.1
  dependency-type: direct:production
  dependency-group: backend
- dependency-name: python-dotenv
  dependency-version: 1.2.4
  dependency-type: direct:production
  dependency-group: backend
- dependency-name: uvicorn
  dependency-version: 0.54.0
  dependency-type: direct:production
  dependency-group: backend
- dependency-name: pytest
  dependency-version: 9.2.0
  dependency-type: direct:development
  dependency-group: backend
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 apps/backend/requirements-dev.txt |  2 +-
 apps/backend/requirements.txt     | 10 +++++-----
 2 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/apps/backend/requirements-dev.txt b/apps/backend/requirements-dev.txt
index f842f5b..e1fe65f 100644
--- a/apps/backend/requirements-dev.txt
+++ b/apps/backend/requirements-dev.txt
@@ -1,6 +1,6 @@
 # Test-only. Kept out of requirements.txt so the runtime image does not
 # ship a test framework.
-pytest>=9.1.1,<10.0.0
+pytest>=9.2.0,<10.0.0
 
 # A websocket regression tends to block a receive rather than raise. Without a
 # hard per-test cap, that hangs CI instead of failing it.
diff --git a/apps/backend/requirements.txt b/apps/backend/requirements.txt
index ae4f0c0..03e8f33 100644
--- a/apps/backend/requirements.txt
+++ b/apps/backend/requirements.txt
@@ -1,7 +1,7 @@
 anyio>=4.15.1,<5.0.0
-asyncpg>=0.31.0,<1.0.0
-fastapi>=0.141.1,<1.0.0
+asyncpg>=0.32.0,<1.0.0
+fastapi>=0.162.0,<1.0.0
 httpx>=0.28.1,<1.0.0
-pyjwt[crypto]>=2.14.0,<3.0.0
-python-dotenv>=1.2.3,<2.0.0
-uvicorn[standard]>=0.53.0,<1.0.0
+pyjwt[crypto]>=2.15.1,<3.0.0
+python-dotenv>=1.2.4,<2.0.0
+uvicorn[standard]>=0.54.0,<1.0.0