diff --git a/backend/requirements-dev.txt b/backend/requirements-dev.txt
index 6ecef89..48318e8 100644
--- a/backend/requirements-dev.txt
+++ b/backend/requirements-dev.txt
@@ -1,4 +1,4 @@
-ruff==0.16.2
+ruff==0.16.4
 pytest==9.1.1
 pytest-cov==7.1.0
 # mypy==1.15.0
diff --git a/backend/requirements-scraper.txt b/backend/requirements-scraper.txt
index f0e82d3..fb67597 100644
--- a/backend/requirements-scraper.txt
+++ b/backend/requirements-scraper.txt
@@ -6,4 +6,4 @@
 # PDF/DOCX/PPTX text extraction is skipped.
 -r requirements.txt
 
-docling==2.118.1
+docling==2.121.0
diff --git a/backend/requirements-test.txt b/backend/requirements-test.txt
index 12359e6..918cf88 100644
--- a/backend/requirements-test.txt
+++ b/backend/requirements-test.txt
@@ -5,7 +5,7 @@
 pytest>=9.1.1
 cryptography>=50.0.0
 PyJWT>=2.13.0
-python-dotenv>=1.2.2
+python-dotenv>=1.2.3
 
 # Mutation testing. mutmut 3.x is pytest-native and reads its config from the
 # [tool.mutmut] section of pyproject.toml. See tests/README.md.
diff --git a/backend/requirements.txt b/backend/requirements.txt
index 2df155d..3218da4 100644
--- a/backend/requirements.txt
+++ b/backend/requirements.txt
@@ -1,18 +1,18 @@
 certifi==2026.7.22
 cffi==2.1.1
-charset-normalizer==3.4.9
+charset-normalizer==3.5.1
 click==8.4.2
 cryptography==50.0.0
 Flask==3.1.3
 Flask-Limiter==4.1.1
 flask-cors==6.0.5
-idna==3.18
+idna==3.19
 itsdangerous==2.2.0
 Jinja2==3.1.6
 MarkupSafe==3.0.3
 oauthlib==3.3.1
 pycparser==3.0
-python-dotenv==1.2.2
+python-dotenv==1.2.3
 requests==2.34.2
 requests-oauthlib==2.0.0
 schoolopy==0.3.1
@@ -21,7 +21,7 @@ Werkzeug==3.1.8
 PyJWT==2.13.0
 openai==2.53.0
 redis==8.1.0
-google-api-python-client==2.198.0
+google-api-python-client==2.199.0
 google-auth==2.56.3
 google-auth-oauthlib==1.4.0
 gunicorn==23.0.0