From 208d8f95abb23aa7a54d716a8e8332f7fb70cd9e Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 8 May 2026 21:58:22 +0000
Subject: [PATCH] deps(py): bump the pip-minor-patch group across 1 directory
 with 3 updates

Bumps the pip-minor-patch group with 3 updates in the /backend directory: [pydantic](https://github.com/pydantic/pydantic), [pydantic-settings](https://github.com/pydantic/pydantic-settings) and [reportlab](https://www.reportlab.com/).


Updates `pydantic` from 2.13.3 to 2.13.4
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/v2.13.4/HISTORY.md)
- [Commits](https://github.com/pydantic/pydantic/compare/v2.13.3...v2.13.4)

Updates `pydantic-settings` from 2.14.0 to 2.14.1
- [Release notes](https://github.com/pydantic/pydantic-settings/releases)
- [Commits](https://github.com/pydantic/pydantic-settings/compare/v2.14.0...v2.14.1)

Updates `reportlab` from 4.4.10 to 4.5.0

---
updated-dependencies:
- dependency-name: pydantic
  dependency-version: 2.13.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip-minor-patch
- dependency-name: pydantic-settings
  dependency-version: 2.14.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip-minor-patch
- dependency-name: reportlab
  dependency-version: 4.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 backend/requirements.txt              | 6 +++---
 backend/requirements.win-postgres.txt | 4 ++--
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/backend/requirements.txt b/backend/requirements.txt
index ed1e8de9..f9e27cb8 100644
--- a/backend/requirements.txt
+++ b/backend/requirements.txt
@@ -6,8 +6,8 @@ python-multipart==0.0.27
 sqlalchemy==2.0.49
 psycopg[binary]>=3.3.4
 alembic==1.18.4
-pydantic==2.13.3
-pydantic-settings==2.14.0
+pydantic==2.13.4
+pydantic-settings==2.14.1
 email-validator==2.3.0
 PyJWT==2.12.1
 # Direct dep (PR-05 token encryption — Fernet+HKDF in app/core/crypto.py).
@@ -21,7 +21,7 @@ python-dateutil==2.9.0.post0
 httpx==0.28.1
 requests==2.33.1
 semver==3.0.4
-reportlab==4.4.10
+reportlab==4.5.0
 sentry-sdk[fastapi]>=2.58.0
 
 # AI Invoice Parsing is a PRO feature (anthropic, pypdf)
diff --git a/backend/requirements.win-postgres.txt b/backend/requirements.win-postgres.txt
index 6044a5d0..1a3e47fc 100644
--- a/backend/requirements.win-postgres.txt
+++ b/backend/requirements.win-postgres.txt
@@ -3,8 +3,8 @@ uvicorn[standard]>=0.46.0
 sqlalchemy>=2.0
 alembic>=1.13
 psycopg[binary]>=3.3.4
-pydantic>=2.13.3
-pydantic-settings>=2.14.0
+pydantic>=2.13.4
+pydantic-settings>=2.14.1
 python-dotenv>=1
 
 email-validator==2.*