diff --git a/requirements_ci.txt b/requirements_ci.txt
index 017ff07..bfa3d14 100644
--- a/requirements_ci.txt
+++ b/requirements_ci.txt
@@ -1,7 +1,7 @@
 # CI test job -- lean install, no torch/deepeval (~2 min cold vs ~25 min with requirements_full.txt).
 # Full stack (dev, evals, ML training): requirements_full.txt
-fastapi==0.115.0
-starlette>=0.37.2,<0.39.0
+fastapi==0.115.4
+starlette>=0.40.0,<0.42.0
 uvicorn[standard]==0.30.6
 sqlalchemy[asyncio]==2.0.35
 asyncpg==0.29.0
diff --git a/requirements_demo.txt b/requirements_demo.txt
index e8e2259..4504503 100644
--- a/requirements_demo.txt
+++ b/requirements_demo.txt
@@ -1,6 +1,6 @@
 # Minimal requirements for Streamlit Cloud demo deployment.
 # The full stack requires requirements.txt (includes Tesseract, pgvector, etc.)
 # This file covers only what streamlit_demo.py needs.
-streamlit==1.39.0
+streamlit>=1.54.0
 streamlit-extras>=0.4.0
 plotly==5.24.1
diff --git a/requirements_full.txt b/requirements_full.txt
index d6f7f45..6faa057 100644
--- a/requirements_full.txt
+++ b/requirements_full.txt
@@ -1,7 +1,7 @@
 # Full development stack -- includes ML training (deepeval, ragas, langchain) and all optional deps.
 # CI uses requirements_ci.txt (excludes torch). Streamlit Cloud uses requirements.txt.
-fastapi==0.115.0
-starlette>=0.37.2,<0.39.0
+fastapi==0.115.4
+starlette>=0.40.0,<0.42.0
 uvicorn[standard]==0.30.6
 sqlalchemy[asyncio]==2.0.35
 asyncpg==0.29.0