diff --git a/requirements.txt b/requirements.txt
index 8835351..b9298a0 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -12,12 +12,12 @@ fastapi==0.141.1
 # reviewable here, not buried in whatever FastAPI happens to resolve. FastAPI dropped its
 # `starlette<1.0` cap, so 1.x is allowed; the whole suite passes on it.
 starlette==1.6.0
-uvicorn[standard]==0.39.0
+uvicorn[standard]==0.52.3
 jinja2==3.1.6
 python-multipart==0.0.32
 keyring==25.7.0
 
 # --- tests ---
-pytest==9.0.3
+pytest==9.1.1
 pytest-asyncio==1.4.0
 httpx==0.28.1