diff --git a/pyproject.toml b/pyproject.toml
index 16ccb2d..8dc5313 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -30,34 +30,34 @@ dependencies = [
     "rich>=15.0.0",
     "prompt_toolkit>=3.0.52",
     "httpx>=0.28.1",
-    "fastapi>=0.136.3",
-    "uvicorn>=0.48.0",
-    "python-multipart>=0.0.29",
+    "fastapi>=0.137.2",
+    "uvicorn>=0.49.0",
+    "python-multipart>=0.0.32",
     "jinja2>=3.1.6",
     # v2 / Milestone 2c: Ed25519 signatures for lineage_share grants.
     # Also provides Argon2id KDF for the web UI password store.
-    "cryptography>=48.0.0",
+    "cryptography>=49.0.0",
 ]
 
 [project.optional-dependencies]
 dev = [
-    "pytest>=9.0.3",
+    "pytest>=9.1.0",
     "pytest-cov",
     "ruff",
     "mypy",
     "types-PyYAML",
 ]
 test = [
-    "pytest>=9.0.3",
+    "pytest>=9.1.0",
     "pytest-cov",
     # tests/test_chat_loop.py uses async def + @pytest.mark.asyncio.
     # Required in CI; locally most devs have it system-wide.
     "pytest-asyncio>=1.4.0",
     # CI exercises the MCP catalog/server as a first-class AgentDrive surface.
-    "mcp>=1.0.0",
+    "mcp>=1.28.0",
 ]
 mcp = [
-    "mcp>=1.0.0",
+    "mcp>=1.28.0",
 ]
 
 [project.scripts]