diff --git a/requirements.in b/requirements.in
index 0d6a98310..fba68a270 100644
--- a/requirements.in
+++ b/requirements.in
@@ -39,7 +39,7 @@ gunicorn>=26.2.0
 # Proven against a live migrated schema, not assumed: the gate fails at 1.19.1
 # without the fix (29 operations), passes with it, and still fails when an
 # ORM-only CHECK is introduced — so the blind spot did not widen.
-alembic>=1.20.0
+alembic>=1.20.1
 psycopg[binary]>=3.3.6
 asyncpg>=0.32.0
 redis>=8.1.0
diff --git a/requirements.lock b/requirements.lock
index 133aa6865..c7a133bc5 100644
--- a/requirements.lock
+++ b/requirements.lock
@@ -181,9 +181,9 @@ aiosqlite==0.22.1 \
     --hash=sha256:043e0bd78d32888c0a9ca90fc788b38796843360c855a7262a532813133a0650 \
     --hash=sha256:21c002eb13823fad740196c5a2e9d8e62f6243bd9e7e4a1f87fb5e44ecb4fceb
     # via -r requirements.in
-alembic==1.20.0 \
-    --hash=sha256:77eb101048d95f982c0353e9233404889dcd7a6fc244c107836c0e2fc9cf7d9d \
-    --hash=sha256:db505480647bc60386c5369402f4a57a506b7539c9e9ef5e270d45cbbe4939bf
+alembic==1.20.1 \
+    --hash=sha256:83490def1f723413db5096591f7609ac52544805be93849170088ed04f5a2e0b \
+    --hash=sha256:9970712cfb81ea26c8658d378aaa5b8f6ff9146e5bb111d70497c164016cf598
     # via -r requirements.in
 annotated-doc==0.0.5 \
     --hash=sha256:117bac03a25ede5df5440e855b32d556049ca169ead221505badf432fed4b101 \