diff --git a/backend/requirements-dev.txt b/backend/requirements-dev.txt
index 1009df5..8dc1b02 100644
--- a/backend/requirements-dev.txt
+++ b/backend/requirements-dev.txt
@@ -1,6 +1,6 @@
 # Development and CI/CD Dependencies
-ruff==0.15.3
+ruff==0.15.12
 mypy==1.19.1
-pytest==9.0.2
+pytest==9.0.3
 pytest-asyncio==1.3.0
 httpx==0.28.1
diff --git a/backend/requirements.txt b/backend/requirements.txt
index 26045fd..04fc201 100644
--- a/backend/requirements.txt
+++ b/backend/requirements.txt
@@ -1,22 +1,22 @@
-fastapi==0.135.1
-uvicorn[standard]==0.41.0
-sqlalchemy==2.0.47
+fastapi==0.136.1
+uvicorn[standard]==0.46.0
+sqlalchemy==2.0.49
 alembic==1.18.4
-pydantic==2.12.5
-pydantic-settings==2.13.1
-psycopg2-binary==2.9.11
+pydantic==2.13.4
+pydantic-settings==2.14.1
+psycopg2-binary==2.9.12
 asyncpg==0.31.0
-python-dotenv==1.2.1
+python-dotenv==1.2.2
 python-multipart==0.0.27
-pytest==9.0.2
+pytest==9.0.3
 pytest-asyncio==1.3.0
 httpx==0.28.1
 aiosqlite==0.22.1
 scikit-learn==1.8.0
-PyJWT==2.11.0
+PyJWT==2.12.1
 bcrypt>=4.0.0
 email-validator==2.3.0
-reportlab==4.4.10
+reportlab==4.5.0
 # Streaming multipart parser — used by upload_artifact for true mid-wire size-limit abort.
 # Pinned to <2.0 to avoid breaking API changes; Dependabot will bump the minor.
 streaming-form-data>=1.16,<2.0