diff --git a/apps/backend/pyproject.toml b/apps/backend/pyproject.toml
index 8a8fc64..e98e731 100644
--- a/apps/backend/pyproject.toml
+++ b/apps/backend/pyproject.toml
@@ -39,7 +39,7 @@ test = [
 ]
 dev = [
   "mypy==2.3.1",
-  "ruff==0.16.4",
+  "ruff==0.16.7",
 ]
 
 [tool.setuptools.packages.find]
diff --git a/apps/backend/requirements-dev.txt b/apps/backend/requirements-dev.txt
index bb1e374..f354e1e 100644
--- a/apps/backend/requirements-dev.txt
+++ b/apps/backend/requirements-dev.txt
@@ -3,8 +3,8 @@
 # toolchain so CI and local dev can run pytest. The runtime image installs
 # only requirements.txt; pytest must never ship in runtime dependencies (issue #185).
 -r requirements.txt
-ast-serialize==0.8.0
-coverage==7.15.4
+ast-serialize==0.11.1
+coverage==7.16.0
 iniconfig==2.3.0
 librt==0.15.0
 mypy==2.3.1
@@ -13,4 +13,4 @@ pathspec==1.1.1
 pluggy==1.6.0
 pytest==9.1.1
 pytest-cov==7.1.0
-ruff==0.16.4
+ruff==0.16.7
diff --git a/apps/backend/requirements.txt b/apps/backend/requirements.txt
index d9b77d9..3bcb9f7 100644
--- a/apps/backend/requirements.txt
+++ b/apps/backend/requirements.txt
@@ -5,10 +5,10 @@
 # Regenerate after changing pyproject.toml dependencies:
 #   python -m venv /tmp/lock && /tmp/lock/bin/pip install ./apps/backend
 #   /tmp/lock/bin/pip freeze | grep -v partha-backend > apps/backend/requirements.txt
-alembic==1.19.1
+alembic==1.19.2
 annotated-doc==0.0.5
 annotated-types==0.8.0
-anyio==4.14.2
+anyio==4.15.1
 arabic-reshaper==3.0.1
 argon2-cffi==25.1.0
 argon2-cffi-bindings==26.1.0
@@ -16,10 +16,10 @@ asn1crypto==1.5.1
 certifi==2026.7.22
 cffi==2.1.1
 charset-normalizer==3.5.1
-click==8.4.2
+click==8.5.0
 colorama==0.4.6
-cryptography==50.0.0
-cssselect2==0.9.0
+cryptography==50.0.1
+cssselect2==0.10.1
 dnspython==2.8.0
 email-validator==2.3.0
 fastapi==0.141.1
@@ -30,23 +30,23 @@ httpcore==1.0.9
 httptools==0.8.0
 httpx==0.28.1
 idna==3.19
-lxml==6.1.2
+lxml==6.1.3
 Mako==1.4.1
 MarkupSafe==3.0.3
 oscrypto==1.3.0
 packaging==26.3
 pillow==12.3.0
-psycopg-binary==3.3.4
-psycopg==3.3.4
+psycopg-binary==3.3.5
+psycopg==3.3.5
 pycparser==3.0
 pydantic-settings==2.15.0
-pydantic==2.13.4
+pydantic==2.13.5
 pydantic_core==2.46.4
 Pygments==2.21.0
-pyhanko-certvalidator==0.31.4
-pyHanko==0.36.2
+pyhanko-certvalidator==0.32.1
+pyHanko==0.37.0
 PyJWT==2.13.0
-pypdf==6.16.1
+pypdf==6.18.0
 python-bidi==0.6.11
 python-dotenv==1.2.3
 python-multipart==0.0.32
@@ -70,5 +70,5 @@ urllib3==2.7.0
 uvicorn==0.52.4
 watchfiles==1.2.0
 webencodings==0.6.1
-websockets==17.0.1
-xhtml2pdf==0.2.17
+websockets==17.1
+xhtml2pdf==0.2.18