diff --git a/requirements-dev.txt b/requirements-dev.txt
index 099f306..689af54 100644
--- a/requirements-dev.txt
+++ b/requirements-dev.txt
@@ -26,5 +26,5 @@ pygments==2.21.0
     # via pytest
 pytest==9.2.0
     # via -r requirements-dev.in
-ruff==0.17.3
+ruff==0.17.4
     # via -r requirements-dev.in
diff --git a/requirements.in b/requirements.in
index 07fd6bb..70dd579 100644
--- a/requirements.in
+++ b/requirements.in
@@ -3,7 +3,7 @@ uvicorn[standard]
 # [asyncio] extra pulls in greenlet, which sqladmin requires unconditionally
 # (it imports sqlalchemy.ext.asyncio internally) even though the app itself
 # only uses sync sessions.
-sqlalchemy[asyncio]>=2.0
+sqlalchemy[asyncio]>=2.1.8
 alembic
 psycopg[binary]
 pydantic-settings
diff --git a/requirements.txt b/requirements.txt
index 1b04faa..d7d1bd3 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -18,9 +18,9 @@ anyio==4.15.1
     #   watchfiles
 bcrypt==5.0.0
     # via -r requirements.in
-boto3==1.43.123
+boto3==1.43.126
     # via -r requirements.in
-botocore==1.43.124
+botocore==1.43.127
     # via
     #   boto3
     #   s3transfer
@@ -44,7 +44,7 @@ email-validator==2.3.0
     # via
     #   fastapi
     #   pydantic
-fastapi[standard]==0.162.0
+fastapi[standard]==0.162.2
     # via -r requirements.in
 fastapi-cli[standard]==0.0.32
     # via fastapi
@@ -133,9 +133,9 @@ protobuf==7.36.2
     # via
     #   googleapis-common-protos
     #   opentelemetry-proto
-psycopg[binary]==3.3.6
+psycopg[binary]==3.3.8
     # via -r requirements.in
-psycopg-binary==3.3.6
+psycopg-binary==3.3.8
     # via psycopg
 pydantic[email]==2.14.1
     # via
@@ -191,7 +191,7 @@ six==1.17.0
     # via python-dateutil
 sqladmin==0.32.0
     # via -r requirements.in
-sqlalchemy[asyncio]==2.1.6
+sqlalchemy[asyncio]==2.1.8
     # via
     #   -r requirements.in
     #   alembic