diff --git a/backend/pyproject.toml b/backend/pyproject.toml
index 82f21ce..7a88f01 100644
--- a/backend/pyproject.toml
+++ b/backend/pyproject.toml
@@ -39,7 +39,7 @@ dependencies = [
     "orjson==3.11.9",
     "litellm==1.96.2",
     "tzdata==2026.3",
-    "pywebpush==2.3.0",
+    "pywebpush==2.5.0",
 
     # ML — anomaly detection
     "scikit-learn==1.6.1",
diff --git a/backend/requirements-dev.lock b/backend/requirements-dev.lock
index 8266dd8..decc7fc 100644
--- a/backend/requirements-dev.lock
+++ b/backend/requirements-dev.lock
@@ -2245,9 +2245,9 @@ python-multipart==0.0.31 \
     --hash=sha256:8408153d68a9773291fc1da39a8b85a50044bddbabd2dd72e9229776b7b15e28 \
     --hash=sha256:fc631183bb13e56db3158a4909908dfb2e23565286744e798241e63750e5d680
     # via luma (pyproject.toml)
-pywebpush==2.3.0 \
-    --hash=sha256:3d97469fb14d4323c362319d438183737249a4115b50e146ce233e7f01e3cf98 \
-    --hash=sha256:d1e27db8de9e6757c1875f67292554bd54c41874c36f4b5c4ebb5442dce204f2
+pywebpush==2.5.0 \
+    --hash=sha256:8260f8e42d70ed95a3bd00527ffcb43b5b3df8983a4a48b059fe29b06dc3d92c \
+    --hash=sha256:b5f5d45024223a04e73fe17f7a8e62540f35bbcc62b49e64d0a1080ff2dc26f2
     # via luma (pyproject.toml)
 pyyaml==6.0.3 \
     --hash=sha256:00c4bdeba853cc34e7dd471f16b4114f4162dc03e6b7afcc2128711f0eca823c \
diff --git a/backend/requirements.lock b/backend/requirements.lock
index f43c36d..281da1f 100644
--- a/backend/requirements.lock
+++ b/backend/requirements.lock
@@ -2014,9 +2014,9 @@ python-multipart==0.0.31 \
     --hash=sha256:8408153d68a9773291fc1da39a8b85a50044bddbabd2dd72e9229776b7b15e28 \
     --hash=sha256:fc631183bb13e56db3158a4909908dfb2e23565286744e798241e63750e5d680
     # via luma (pyproject.toml)
-pywebpush==2.3.0 \
-    --hash=sha256:3d97469fb14d4323c362319d438183737249a4115b50e146ce233e7f01e3cf98 \
-    --hash=sha256:d1e27db8de9e6757c1875f67292554bd54c41874c36f4b5c4ebb5442dce204f2
+pywebpush==2.5.0 \
+    --hash=sha256:8260f8e42d70ed95a3bd00527ffcb43b5b3df8983a4a48b059fe29b06dc3d92c \
+    --hash=sha256:b5f5d45024223a04e73fe17f7a8e62540f35bbcc62b49e64d0a1080ff2dc26f2
     # via luma (pyproject.toml)
 pyyaml==6.0.3 \
     --hash=sha256:00c4bdeba853cc34e7dd471f16b4114f4162dc03e6b7afcc2128711f0eca823c \