From 34409ca2d6b52f9e74e51324c2489273ed3a712a Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 7 Sep 2026 06:37:56 +0000
Subject: [PATCH] build(deps): bump the python-deps group across 1 directory
 with 4 updates

Bumps the python-deps group with 4 updates in the /backend directory: [uvicorn](https://github.com/Kludex/uvicorn), [cryptography](https://github.com/pyca/cryptography), [ruff](https://github.com/astral-sh/ruff) and [mypy](https://github.com/python/mypy).


Updates `uvicorn` from 0.52.3 to 0.52.4
- [Release notes](https://github.com/Kludex/uvicorn/releases)
- [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md)
- [Commits](https://github.com/Kludex/uvicorn/compare/0.52.3...0.52.4)

Updates `cryptography` from 50.0.0 to 50.0.1
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](https://github.com/pyca/cryptography/compare/50.0.0...50.0.1)

Updates `ruff` from 0.16.3 to 0.16.6
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](https://github.com/astral-sh/ruff/compare/0.16.3...0.16.6)

Updates `mypy` from 2.3.0 to 2.3.1
- [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md)
- [Commits](https://github.com/python/mypy/compare/v2.3.0...v2.3.1)

---
updated-dependencies:
- dependency-name: cryptography
  dependency-version: 50.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-deps
- dependency-name: mypy
  dependency-version: 2.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-deps
- dependency-name: ruff
  dependency-version: 0.16.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-deps
- dependency-name: uvicorn
  dependency-version: 0.52.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 backend/requirements.txt | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/backend/requirements.txt b/backend/requirements.txt
index 179fac6..91a46a7 100644
--- a/backend/requirements.txt
+++ b/backend/requirements.txt
@@ -2,7 +2,7 @@
 # fastapi 0.138.x drops Starlette's upper bound, letting us pull a Starlette
 # release with no open advisories (CVE remediation — see requirements.lock).
 fastapi==0.141.1
-uvicorn[standard]==0.52.3
+uvicorn[standard]==0.52.4
 
 # Configuration
 pydantic-settings==2.15.0
@@ -25,7 +25,7 @@ PyJWT==2.13.0
 bcrypt==5.0.0
 
 # Encryption (credential storage at rest)
-cryptography==50.0.0
+cryptography==50.0.1
 
 # Logging
 structlog==26.1.0
@@ -39,5 +39,5 @@ pytest-asyncio==1.4.0
 pytest-cov==7.1.0
 
 # Linting and type checking
-ruff==0.16.3
-mypy==2.3.0
+ruff==0.16.6
+mypy==2.3.1