diff --git a/requirements-ci.in b/requirements-ci.in
index 56c5c89..c591d5d 100644
--- a/requirements-ci.in
+++ b/requirements-ci.in
@@ -1,21 +1,21 @@
 # CI tooling dependencies (pinned with hashes for supply chain security)
 # Regenerate lock: uv pip compile --generate-hashes requirements-ci.in -o requirements-ci.lock
 
-pytest==9.0.2
+pytest==9.0.3
 pytest-cov==7.1.0
-maturin==1.12.6
+maturin==1.13.1
 coverage==7.13.5
 flake8==7.3.0
 black==26.3.1
-mypy==1.19.1
+mypy==1.20.1
 bandit==1.9.4
-build==1.4.2
+build==1.4.3
 atheris==3.0.0
 python-afl==0.7.3
 pip-audit==2.10.0
 pip-licenses==5.5.5
 cyclonedx-bom==7.3.0
 toml==0.10.2
-hypothesis==6.151.10
-cryptography==46.0.6
+hypothesis==6.151.14
+cryptography==46.0.7
 argon2-cffi==25.1.0
diff --git a/web_demo/requirements.txt b/web_demo/requirements.txt
index 3e19bb3..2f60aad 100644
--- a/web_demo/requirements.txt
+++ b/web_demo/requirements.txt
@@ -1,11 +1,11 @@
 Flask==3.1.3
-Pillow==12.1.1
+Pillow==12.2.0
 qrcode[pil]==8.2
 argon2-cffi==25.1.0
-cryptography==46.0.6
+cryptography==46.0.7
 pyzbar==0.1.9
 opencv-python==4.13.0.92
 numpy>=1.24.0
-Werkzeug==3.1.7
+Werkzeug==3.1.8
 # Note: imageio is NOT required (uses Pillow for GIF)
 # Note: No ffmpeg required (Python-only solution)