diff --git a/backend/requirements-dev.txt b/backend/requirements-dev.txt
index 315e493..9197e4d 100644
--- a/backend/requirements-dev.txt
+++ b/backend/requirements-dev.txt
@@ -4,5 +4,5 @@ pytest-asyncio==1.4.0
 pytest-cov==7.1.0
 httpx==0.28.1
 aiosqlite==0.22.1
-ruff==0.16.1
+ruff==0.16.3
 mypy==2.3.0
diff --git a/backend/requirements.txt b/backend/requirements.txt
index 3560218..5e52499 100644
--- a/backend/requirements.txt
+++ b/backend/requirements.txt
@@ -1,13 +1,13 @@
 fastapi==0.141.1
 # starlette is a FastAPI dependency; pinned explicitly to stay on a version without the
 # advisories flagged by pip-audit (see the CI security scan). Keep compatible with fastapi.
-starlette==1.3.1
-uvicorn[standard]==0.52.0
-sqlalchemy==2.0.51
+starlette==1.6.0
+uvicorn[standard]==0.52.3
+sqlalchemy==2.0.52
 asyncpg==0.31.0
-alembic==1.18.5
+alembic==1.19.1
 pydantic==2.13.4
-pydantic-settings==2.14.2
+pydantic-settings==2.15.0
 jinja2==3.1.6
 python-multipart==0.0.32
 httpx==0.28.1