diff --git a/requirements.txt b/requirements.txt
index 585522c..fbf3ced 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -1,15 +1,15 @@
 elasticsearch==8.19.3
-PyJWT==2.10.1
-fastmcp==2.14.3
-Flask==3.1.0
-Flask-Cors==5.0.0
+PyJWT==2.12.0
+fastmcp==3.2.0
+Flask==3.1.3
+Flask-Cors==6.0.0
 opentelemetry-distro==0.57b0
 opentelemetry-exporter-otlp==1.36.0
 opentelemetry-instrumentation==0.57b0
 opentelemetry-instrumentation-elasticsearch==0.57b0
 opentelemetry-instrumentation-flask==0.57b0
 opentelemetry-instrumentation-wsgi==0.57b0
-pillow==11.3.0
+pillow==12.1.1
 pydantic==2.11.7
 python-dotenv==1.1.1
 requests==2.33.0
\ No newline at end of file
diff --git a/tests/unit/test_client.py b/tests/unit/test_client.py
index 92336de..06bc297 100644
--- a/tests/unit/test_client.py
+++ b/tests/unit/test_client.py
@@ -113,6 +113,7 @@ def test_setup_clients_rejects_studio_api_key_with_basic_auth_when_auth_enabled(
             _setup_clients()
 
     def test_setup_clients_rejects_content_api_key_with_basic_auth(self, monkeypatch):
+        monkeypatch.setattr("server.client.AUTH_ENABLED", False)
         monkeypatch.setattr("server.client.ELASTIC_CLOUD_ID", "")
         monkeypatch.setattr("server.client.ELASTICSEARCH_URL", "http://localhost:9200")
         monkeypatch.setattr("server.client.CONTENT_ELASTIC_CLOUD_ID", "")
diff --git a/tests/unit/test_conversations_owner_visibility.py b/tests/unit/test_conversations_owner_visibility.py
index 5028e9f..5db1903 100644
--- a/tests/unit/test_conversations_owner_visibility.py
+++ b/tests/unit/test_conversations_owner_visibility.py
@@ -92,5 +92,5 @@ def mock_search(text, filters, sort, size, page, aggs, user=None, es_client=None
 
     monkeypatch.setattr("server.fastmcp.api.conversations.search", mock_search)
 
-    fastmcp.conversations_search.fn(ctx=None)
+    fastmcp.conversations_search(ctx=None)
     assert captured["user"] == "alice"