diff --git a/lib/serve/rest-api/src/requirements.txt b/lib/serve/rest-api/src/requirements.txt
index 32f95850d..b8a78c627 100644
--- a/lib/serve/rest-api/src/requirements.txt
+++ b/lib/serve/rest-api/src/requirements.txt
@@ -1,29 +1,29 @@
 # AWS SDK Dependencies
 # Keep boto3 aligned with LiteLLM / RDS IAM token refresh expectations.
-# litellm[proxy]==1.86.2 pins boto3==1.43.1
-boto3>=1.43.1,<1.44.0
+# litellm[proxy]==1.90.1 pins boto3==1.43.1
+boto3>=1.43.37,<1.44.0
 
 # OpenTelemetry - Optional for LiteLLM Weave integration, silences import warnings
-opentelemetry-api>=1.41.0
-opentelemetry-sdk>=1.41.0
+opentelemetry-api>=1.43.0
+opentelemetry-sdk>=1.43.0
 
-aiohttp>=3.13.3,<4.0.0
+aiohttp>=3.14.1,<4.0.0
 backoff>=2.2.1,<3.0.0
-cachetools>=7.0.2,<8.0.0
-click>=8.1.8,<9.0.0
-cryptography>=46.0.5,<47.0.0
-fastapi==0.124.4
-gunicorn>=23.0.0,<24.0.0
+cachetools>=7.1.4,<8.0.0
+click>=8.4.2,<9.0.0
+cryptography>=49.0.0,<50.0.0
+fastapi==0.138.2
+gunicorn>=26.0.0,<27.0.0
 
 # LiteLLM — pinned by policy (orchestration / proxy compatibility).
 # >=1.86.2 fixes GHSA-4xpc-pv4p-pm3w (host-header auth bypass). Requires Python <3.14.
-litellm[proxy]==1.86.2; python_version < "3.14"
+litellm[proxy]==1.90.1; python_version < "3.14"
 
 loguru>=0.7.3,<0.8.0
-pydantic>=2.5.0,<3.0.0
-PyJWT>=2.10.1,<3.0.0
+pydantic>=2.13.4,<3.0.0
+PyJWT>=2.13.0,<3.0.0
 prisma>=0.15.0,<0.16.0
-starlette>=0.40.0,<0.51.0
+starlette>=1.3.1,<1.4.0
 
-# ASGI Server — litellm[proxy] extra requires uvicorn>=0.32.1,<1.0.0
-uvicorn>=0.32.1,<1.0.0
+# ASGI Server — litellm[proxy] extra requires uvicorn>=0.49.0,<1.0.0
+uvicorn>=0.49.0,<1.0.0