diff --git a/requirements.txt b/requirements.txt
index dd27c06a..b92b65ad 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -4,7 +4,7 @@
 # different Werkzeug/SQLAlchemy minors and fail on a machine we cannot debug.
 # Pin them explicitly so an image build is reproducible.
 flask==3.1.3
-sqlalchemy==2.1.1
+sqlalchemy==2.1.4
 werkzeug==3.1.9
 jinja2==3.1.6
 # Schema migrations (wave A3.1). Runtime dep, not dev-only: init_manager stamps
@@ -29,9 +29,9 @@ pillow==12.3.0
 WTForms_SQLAlchemy==0.4.2
 requests==2.34.2
 psycopg2_binary==2.9.13
-python_dotenv==1.2.3
+python_dotenv==1.2.4
 psutil==7.2.2
-tenacity==9.1.4
+tenacity==9.2.1
 email_validator==2.3.0
 uvicorn[standard]==0.54.0
 # WSGI->ASGI bridge for the Flask app (asgi.py). Replaced asgiref's WsgiToAsgi,