diff --git a/backend/JuggerHub.Api.csproj b/backend/JuggerHub.Api.csproj
index 0d276321..d5c56840 100644
--- a/backend/JuggerHub.Api.csproj
+++ b/backend/JuggerHub.Api.csproj
@@ -46,7 +46,7 @@
          Microsoft.Extensions.Azure supplies the DI registration AND the transport hook that lets
          the client inherit the shared 028 resilience pipeline — see specs/035 research §3 for why
          the SDK's own retry is switched off rather than layered. Behind IMediaStore, so swappable. -->
-    <PackageReference Include="Azure.Storage.Blobs" Version="12.30.0" />
+    <PackageReference Include="Azure.Storage.Blobs" Version="12.30.1" />
     <PackageReference Include="Microsoft.Extensions.Azure" Version="1.14.1" />
     <PackageReference Include="Konscious.Security.Cryptography.Argon2" Version="1.3.1" />
     <!-- Feature 055 — Web Push (VAPID + RFC 8291 message encryption). The LOW-LEVEL package only:
@@ -84,7 +84,7 @@
       <PrivateAssets>all</PrivateAssets>
     </PackageReference>
     <PackageReference Include="Npgsql.EntityFrameworkCore.PostgreSQL" Version="10.0.3" />
-    <PackageReference Include="Scalar.AspNetCore" Version="2.17.13" />
+    <PackageReference Include="Scalar.AspNetCore" Version="2.17.14" />
     <!-- Feature 034 (#98): server-side image processing (decode/guard/resize/strip/re-encode).
          Pure-managed (no native binary) so behavior is identical across local/Dev/Prod.
          First imaging dependency — deliberately supersedes the 003-profile "no new NuGet
@@ -99,7 +99,7 @@
          pull request or to Dependabot, and every other route left some build path red.
          The package's MSBuild target globs for the file from THIS directory down, so the
          plain checkout is all the configuration there is — no build secret, no CI step. -->
-    <PackageReference Include="SixLabors.ImageSharp" Version="4.1.2" />
+    <PackageReference Include="SixLabors.ImageSharp" Version="4.1.3" />
   </ItemGroup>
 
 </Project>
diff --git a/backend/tests/JuggerHub.Api.IntegrationTests/JuggerHub.Api.IntegrationTests.csproj b/backend/tests/JuggerHub.Api.IntegrationTests/JuggerHub.Api.IntegrationTests.csproj
index 4377cd3e..c3b5500f 100644
--- a/backend/tests/JuggerHub.Api.IntegrationTests/JuggerHub.Api.IntegrationTests.csproj
+++ b/backend/tests/JuggerHub.Api.IntegrationTests/JuggerHub.Api.IntegrationTests.csproj
@@ -16,11 +16,11 @@
          from server-controlled names). Patched in 2026.0.0; drop this direct
          reference once Testcontainers ships a build that requires it. -->
     <PackageReference Include="SSH.NET" Version="2026.0.0" />
-    <PackageReference Include="Testcontainers.Azurite" Version="4.15.0" />
-    <PackageReference Include="Testcontainers.PostgreSql" Version="4.15.0" />
-    <PackageReference Include="Testcontainers.Redis" Version="4.15.0" />
+    <PackageReference Include="Testcontainers.Azurite" Version="4.16.0" />
+    <PackageReference Include="Testcontainers.PostgreSql" Version="4.16.0" />
+    <PackageReference Include="Testcontainers.Redis" Version="4.16.0" />
     <PackageReference Include="xunit" Version="2.9.3" />
-    <PackageReference Include="xunit.runner.visualstudio" Version="4.0.0" />
+    <PackageReference Include="xunit.runner.visualstudio" Version="4.0.1" />
   </ItemGroup>
 
   <ItemGroup>