diff --git a/apps/api/requirements-ci.txt b/apps/api/requirements-ci.txt
index 1ac01d3..7764785 100644
--- a/apps/api/requirements-ci.txt
+++ b/apps/api/requirements-ci.txt
@@ -1,6 +1,6 @@
 # CI-only tools used by GitHub Actions workflows.
 # Pinned versions (no hashes needed since these are not application dependencies
 # but we keep them pinned for reproducibility and to satisfy Scorecard pinning).
-ruff==0.15.14
-pip-audit==2.10.0
-pip-tools==7.5.1
+ruff==0.15.20
+pip-audit==2.10.1
+pip-tools==7.5.3
diff --git a/apps/api/requirements-dev.txt b/apps/api/requirements-dev.txt
index d118b9f..0fd6f60 100644
--- a/apps/api/requirements-dev.txt
+++ b/apps/api/requirements-dev.txt
@@ -1,6 +1,6 @@
-pytest==9.0.3
+pytest==9.1.1
 pytest-asyncio==1.4.0
 pytest-cov==7.1.0
 httpx==0.28.1
-ruff==0.15.14
-pip-audit==2.10.0
+ruff==0.15.20
+pip-audit==2.10.1
diff --git a/apps/api/requirements.txt b/apps/api/requirements.txt
index 214b342..b8277ad 100644
--- a/apps/api/requirements.txt
+++ b/apps/api/requirements.txt
@@ -1,11 +1,11 @@
-fastapi==0.136.3
-uvicorn[standard]==0.48.0
+fastapi==0.139.0
+uvicorn[standard]==0.49.0
 pydantic==2.13.4
-pydantic-settings==2.14.1
+pydantic-settings==2.14.2
 prometheus-client==0.25.0
-opentelemetry-api==1.42.1
-opentelemetry-sdk==1.42.1
-opentelemetry-exporter-otlp==1.42.1
-opentelemetry-instrumentation-fastapi==0.63b1
+opentelemetry-api==1.43.0
+opentelemetry-sdk==1.43.0
+opentelemetry-exporter-otlp==1.43.0
+opentelemetry-instrumentation-fastapi==0.64b0
 structlog==25.5.0
 httpx==0.28.1