diff --git a/backend/requirements.txt b/backend/requirements.txt
index ed1e8de9..f9e27cb8 100644
--- a/backend/requirements.txt
+++ b/backend/requirements.txt
@@ -6,8 +6,8 @@ python-multipart==0.0.27
 sqlalchemy==2.0.49
 psycopg[binary]>=3.3.4
 alembic==1.18.4
-pydantic==2.13.3
-pydantic-settings==2.14.0
+pydantic==2.13.4
+pydantic-settings==2.14.1
 email-validator==2.3.0
 PyJWT==2.12.1
 # Direct dep (PR-05 token encryption — Fernet+HKDF in app/core/crypto.py).
@@ -21,7 +21,7 @@ python-dateutil==2.9.0.post0
 httpx==0.28.1
 requests==2.33.1
 semver==3.0.4
-reportlab==4.4.10
+reportlab==4.5.0
 sentry-sdk[fastapi]>=2.58.0
 
 # AI Invoice Parsing is a PRO feature (anthropic, pypdf)
diff --git a/backend/requirements.win-postgres.txt b/backend/requirements.win-postgres.txt
index 6044a5d0..1a3e47fc 100644
--- a/backend/requirements.win-postgres.txt
+++ b/backend/requirements.win-postgres.txt
@@ -3,8 +3,8 @@ uvicorn[standard]>=0.46.0
 sqlalchemy>=2.0
 alembic>=1.13
 psycopg[binary]>=3.3.4
-pydantic>=2.13.3
-pydantic-settings>=2.14.0
+pydantic>=2.13.4
+pydantic-settings>=2.14.1
 python-dotenv>=1
 
 email-validator==2.*