diff --git a/constraints/security.txt b/constraints/security.txt
index 6b38c973..e1b4b4fc 100644
--- a/constraints/security.txt
+++ b/constraints/security.txt
@@ -50,7 +50,7 @@ SQLAlchemy==2.0.44
 
 # pydantic: Data validation, critical for API input validation
 # Security fixes for ReDoS and validation bypass
-pydantic==2.12.4
+pydantic==2.12.5
 pydantic-settings==2.12.0
 
 # pandera: DataFrame validation, data quality and security
diff --git a/sbom/combined-requirements.txt b/sbom/combined-requirements.txt
index b72a6730..7d16dcbf 100644
--- a/sbom/combined-requirements.txt
+++ b/sbom/combined-requirements.txt
@@ -32,7 +32,7 @@ cryptography==46.0.3
 deap==1.4.3
 exchange-calendars==4.11.1
 extra-streamlit-components==0.1.81
-fastapi==0.124.2
+fastapi==0.135.2
 filelock==3.20.1
 frozenlist==1.8.0
 fsspec==2025.12.0
@@ -101,7 +101,7 @@ psycopg-binary==3.2.11
 pyarrow==21.0.0
 pycares==4.11.0
 pycparser==2.23
-pydantic==2.12.4
+pydantic==2.12.5
 pydantic-core==2.41.5
 pydantic-settings==2.12.0
 pydeck==0.9.1
@@ -122,7 +122,7 @@ six==1.17.0
 smmap==5.0.2
 sniffio==1.3.1
 sqlalchemy==2.0.44
-starlette==0.50.0
+starlette==1.0.0
 strawberry-graphql==0.287.2
 streamlit==1.50.0
 streamlit-authenticator==0.4.2
@@ -141,7 +141,7 @@ typing-inspect==0.9.0
 typing-inspection==0.4.2
 tzdata==2025.2
 urllib3==2.6.0
-uvicorn==0.37.0
+uvicorn==0.42.0
 watchdog==6.0.0
 websockets==15.0.1
 yarl==1.22.0