diff --git a/backend/requirements-dev.txt b/backend/requirements-dev.txt
index b05f261..74624fc 100644
--- a/backend/requirements-dev.txt
+++ b/backend/requirements-dev.txt
@@ -3,4 +3,4 @@
 pip-audit==2.10.1
 pytest==9.1.1
 pytest-asyncio==1.4.0
-httpx2==2.9.1
+httpx2==2.12.0
diff --git a/backend/requirements-e2e.txt b/backend/requirements-e2e.txt
index 30c75f1..ac65232 100644
--- a/backend/requirements-e2e.txt
+++ b/backend/requirements-e2e.txt
@@ -1,4 +1,4 @@
 -r requirements-dev.txt
 
 # 手工浏览器端到端测试；普通 pytest/CI 不需要安装浏览器运行时。
-playwright==1.61.0
+playwright==1.62.0
diff --git a/backend/requirements.txt b/backend/requirements.txt
index 07c3598..a4ef484 100644
--- a/backend/requirements.txt
+++ b/backend/requirements.txt
@@ -2,30 +2,30 @@
 # reproducible. Dependabot keeps these pins current.
 
 # API and server
-fastapi==0.140.8
-starlette==1.3.1
-uvicorn[standard]==0.51.0
+fastapi==0.141.1
+starlette==1.6.0
+uvicorn[standard]==0.52.4
 python-multipart==0.0.32
-python-dotenv==1.2.2
+python-dotenv==1.2.3
 
 # LLM and local ASR
-openai==2.49.0
+openai==3.6.0
 faster-whisper==1.2.1
 
 # Media, PDF, and export
 Pillow==12.3.0
-pypdf==6.14.2
+pypdf==6.16.2
 xmind==1.2.0
-yt-dlp==2026.7.4
+yt-dlp==2026.8.19
 
 # Configuration and validation
-cryptography==50.0.0
-pydantic==2.13.4
-pydantic-settings==2.14.2
+cryptography==50.0.1
+pydantic==2.13.5
+pydantic-settings==2.15.0
 PyYAML==6.0.3
 
 # HTTP, files, SSE, and rate limiting
 aiofiles==25.1.0
 requests==2.34.2
 slowapi==0.1.10
-sse-starlette==3.4.6
+sse-starlette==3.4.8