diff --git a/backend/requirements.txt b/backend/requirements.txt
index 179fac6..91a46a7 100644
--- a/backend/requirements.txt
+++ b/backend/requirements.txt
@@ -2,7 +2,7 @@
 # fastapi 0.138.x drops Starlette's upper bound, letting us pull a Starlette
 # release with no open advisories (CVE remediation — see requirements.lock).
 fastapi==0.141.1
-uvicorn[standard]==0.52.3
+uvicorn[standard]==0.52.4
 
 # Configuration
 pydantic-settings==2.15.0
@@ -25,7 +25,7 @@ PyJWT==2.13.0
 bcrypt==5.0.0
 
 # Encryption (credential storage at rest)
-cryptography==50.0.0
+cryptography==50.0.1
 
 # Logging
 structlog==26.1.0
@@ -39,5 +39,5 @@ pytest-asyncio==1.4.0
 pytest-cov==7.1.0
 
 # Linting and type checking
-ruff==0.16.3
-mypy==2.3.0
+ruff==0.16.6
+mypy==2.3.1