diff --git a/hookjudge/requirements.lock b/hookjudge/requirements.lock
index 860b4593..83f32709 100644
--- a/hookjudge/requirements.lock
+++ b/hookjudge/requirements.lock
@@ -12,7 +12,7 @@ click==8.4.2
 coverage==7.16.2
 cyclonedx-python-lib==11.12.0
 defusedxml==0.7.1
-fastapi==0.142.2
+fastapi==0.146.0
 filelock==3.32.3
 h11==0.16.0
 httpcore==1.0.9
@@ -48,7 +48,7 @@ python-dotenv==1.2.3
 PyYAML==6.0.3
 requests==2.34.2
 rich==15.0.0
-ruff==0.16.10
+ruff==0.17.0
 sortedcontainers==2.4.0
 starlette==1.6.0
 stevedore==5.9.0
diff --git a/hookjudge/requirements.txt b/hookjudge/requirements.txt
index 97befd2c..e063a803 100644
--- a/hookjudge/requirements.txt
+++ b/hookjudge/requirements.txt
@@ -1,5 +1,5 @@
 # Four runtime dependencies, chosen to stay four.
-fastapi>=0.142.2
+fastapi>=0.143.0
 uvicorn[standard]>=0.54.0
 aiosqlite>=0.22.1
 httpx>=0.28.1
@@ -7,8 +7,8 @@ httpx>=0.28.1
 # Test + lint
 pytest>=9.1.1
 pytest-asyncio>=1.4.0
-pytest-cov>=7.0
-ruff==0.16.10
+pytest-cov>=7.1.0
+ruff==0.17.0
 bandit>=1.9.4
 pip-audit>=2.10.1
 mypy>=2.4.0
diff --git a/hookprobe/requirements.lock b/hookprobe/requirements.lock
index 0c4d4e1f..255598ae 100644
--- a/hookprobe/requirements.lock
+++ b/hookprobe/requirements.lock
@@ -61,7 +61,7 @@ referencing==0.37.0
 requests==2.34.2
 rich==15.0.0
 rpds-py==2026.6.3
-ruff==0.16.10
+ruff==0.17.0
 sniffio==1.3.1
 sortedcontainers==2.4.0
 sse-starlette==3.4.8
diff --git a/hookprobe/requirements.txt b/hookprobe/requirements.txt
index 71d0e76b..1682dd48 100644
--- a/hookprobe/requirements.txt
+++ b/hookprobe/requirements.txt
@@ -8,8 +8,8 @@ claude-agent-sdk>=0.1.0
 # Test + lint (tests never import the SDK; they inject fake engines)
 pytest>=9.1.1
 httpx>=0.28.1
-pytest-cov>=7.0
-ruff==0.16.10
+pytest-cov>=7.1.0
+ruff==0.17.0
 bandit>=1.9.4
 pip-audit>=2.10.1
 mypy>=2.4.0
diff --git a/hookrelay/requirements.lock b/hookrelay/requirements.lock
index 68ce6cc4..cca7e0a3 100644
--- a/hookrelay/requirements.lock
+++ b/hookrelay/requirements.lock
@@ -12,7 +12,7 @@ click==8.4.2
 coverage==7.16.2
 cyclonedx-python-lib==11.12.0
 defusedxml==0.7.1
-fastapi==0.142.2
+fastapi==0.146.0
 filelock==3.32.3
 h11==0.16.0
 httpcore==1.0.9
@@ -48,7 +48,7 @@ python-dotenv==1.2.3
 PyYAML==6.0.3
 requests==2.34.2
 rich==15.0.0
-ruff==0.16.10
+ruff==0.17.0
 sortedcontainers==2.4.0
 starlette==1.6.0
 stevedore==5.9.0
diff --git a/hookrelay/requirements.txt b/hookrelay/requirements.txt
index 9b1ce2a5..0f7f4dea 100644
--- a/hookrelay/requirements.txt
+++ b/hookrelay/requirements.txt
@@ -1,5 +1,5 @@
 # Runtime — five dependencies, chosen to stay five.
-fastapi>=0.142.2
+fastapi>=0.143.0
 uvicorn[standard]>=0.54.0
 aiosqlite>=0.22.1
 httpx>=0.28.1
@@ -8,8 +8,8 @@ pyyaml>=6.0.3
 # Test + lint
 pytest>=9.1.1
 pytest-asyncio>=1.4.0
-pytest-cov>=7.0
-ruff==0.16.10
+pytest-cov>=7.1.0
+ruff==0.17.0
 bandit>=1.9.4
 pip-audit>=2.10.1
 mypy>=2.4.0