diff --git a/backend/.config/dotnet-tools.json b/backend/.config/dotnet-tools.json
index 7dcefc3..807729e 100644
--- a/backend/.config/dotnet-tools.json
+++ b/backend/.config/dotnet-tools.json
@@ -3,7 +3,7 @@
   "isRoot": true,
   "tools": {
     "dotnet-ef": {
-      "version": "10.0.8",
+      "version": "10.0.9",
       "commands": [
         "dotnet-ef"
       ],
diff --git a/backend/src/CheapAnalysis.Api/CheapAnalysis.Api.csproj b/backend/src/CheapAnalysis.Api/CheapAnalysis.Api.csproj
index bf7e583..fd8dac2 100644
--- a/backend/src/CheapAnalysis.Api/CheapAnalysis.Api.csproj
+++ b/backend/src/CheapAnalysis.Api/CheapAnalysis.Api.csproj
@@ -8,8 +8,8 @@
   </PropertyGroup>
 
   <ItemGroup>
-    <PackageReference Include="FastEndpoints" Version="5.34.0" />
-    <PackageReference Include="FastEndpoints.Swagger" Version="5.34.0" />
+    <PackageReference Include="FastEndpoints" Version="5.35.0" />
+    <PackageReference Include="FastEndpoints.Swagger" Version="5.35.0" />
     <PackageReference Include="Serilog.AspNetCore" Version="8.0.3" />
     <!-- Initial error reporting (T-017); T-601 adds release tagging + PII scrubbing. -->
     <PackageReference Include="Sentry.AspNetCore" Version="6.6.0" />
diff --git a/backend/src/CheapAnalysis.Ibkr.Contracts/CheapAnalysis.Ibkr.Contracts.csproj b/backend/src/CheapAnalysis.Ibkr.Contracts/CheapAnalysis.Ibkr.Contracts.csproj
index 38f28e3..1e03879 100644
--- a/backend/src/CheapAnalysis.Ibkr.Contracts/CheapAnalysis.Ibkr.Contracts.csproj
+++ b/backend/src/CheapAnalysis.Ibkr.Contracts/CheapAnalysis.Ibkr.Contracts.csproj
@@ -24,7 +24,7 @@
   <ItemGroup>
     <PackageReference Include="Google.Protobuf" Version="3.35.0" />
     <PackageReference Include="Grpc.Core.Api" Version="2.80.0" />
-    <PackageReference Include="Grpc.Tools" Version="2.80.0">
+    <PackageReference Include="Grpc.Tools" Version="2.81.1">
       <IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
       <PrivateAssets>all</PrivateAssets>
     </PackageReference>
diff --git a/backend/src/CheapAnalysis.Infrastructure/CheapAnalysis.Infrastructure.csproj b/backend/src/CheapAnalysis.Infrastructure/CheapAnalysis.Infrastructure.csproj
index 522ece0..11fdf4c 100644
--- a/backend/src/CheapAnalysis.Infrastructure/CheapAnalysis.Infrastructure.csproj
+++ b/backend/src/CheapAnalysis.Infrastructure/CheapAnalysis.Infrastructure.csproj
@@ -11,18 +11,18 @@
 
   <ItemGroup>
     <!-- T-005: EF Core + Npgsql -->
-    <PackageReference Include="Microsoft.EntityFrameworkCore" Version="10.0.8" />
-    <PackageReference Include="Microsoft.EntityFrameworkCore.Design" Version="10.0.8">
+    <PackageReference Include="Microsoft.EntityFrameworkCore" Version="10.0.9" />
+    <PackageReference Include="Microsoft.EntityFrameworkCore.Design" Version="10.0.9">
       <IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
       <PrivateAssets>all</PrivateAssets>
     </PackageReference>
     <PackageReference Include="Npgsql.EntityFrameworkCore.PostgreSQL" Version="10.0.2" />
-    <PackageReference Include="Microsoft.Extensions.Diagnostics.HealthChecks.EntityFrameworkCore" Version="10.0.8" />
+    <PackageReference Include="Microsoft.Extensions.Diagnostics.HealthChecks.EntityFrameworkCore" Version="10.0.9" />
     <!-- T-018: Redis-backed Idempotency-Key store. -->
-    <PackageReference Include="StackExchange.Redis" Version="2.8.16" />
+    <PackageReference Include="StackExchange.Redis" Version="2.13.17" />
     <!-- Pin transitive: Npgsql 10.0.0 pulls System.Security.Cryptography.Xml 9.0.0,
          which carries GHSA-37gx-xxp4-5rgx / GHSA-w3x6-4m5h-cxqf. 10.0.8 is patched. -->
-    <PackageReference Include="System.Security.Cryptography.Xml" Version="10.0.8" />
+    <PackageReference Include="System.Security.Cryptography.Xml" Version="10.0.9" />
   </ItemGroup>
 
   <ItemGroup>
diff --git a/backend/tests/CheapAnalysis.E2ETests/CheapAnalysis.E2ETests.csproj b/backend/tests/CheapAnalysis.E2ETests/CheapAnalysis.E2ETests.csproj
index 96336e9..e34a781 100644
--- a/backend/tests/CheapAnalysis.E2ETests/CheapAnalysis.E2ETests.csproj
+++ b/backend/tests/CheapAnalysis.E2ETests/CheapAnalysis.E2ETests.csproj
@@ -6,9 +6,9 @@
   </PropertyGroup>
 
   <ItemGroup>
-    <PackageReference Include="Microsoft.NET.Test.Sdk" Version="17.9.0" />
-    <PackageReference Include="xunit" Version="2.7.0" />
-    <PackageReference Include="xunit.runner.visualstudio" Version="2.5.7">
+    <PackageReference Include="Microsoft.NET.Test.Sdk" Version="17.14.1" />
+    <PackageReference Include="xunit" Version="2.9.3" />
+    <PackageReference Include="xunit.runner.visualstudio" Version="2.8.2">
       <IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
       <PrivateAssets>all</PrivateAssets>
     </PackageReference>
diff --git a/backend/tests/CheapAnalysis.IntegrationTests/CheapAnalysis.IntegrationTests.csproj b/backend/tests/CheapAnalysis.IntegrationTests/CheapAnalysis.IntegrationTests.csproj
index 2a602bb..e5fe250 100644
--- a/backend/tests/CheapAnalysis.IntegrationTests/CheapAnalysis.IntegrationTests.csproj
+++ b/backend/tests/CheapAnalysis.IntegrationTests/CheapAnalysis.IntegrationTests.csproj
@@ -12,17 +12,17 @@
   </ItemGroup>
 
   <ItemGroup>
-    <PackageReference Include="Microsoft.NET.Test.Sdk" Version="17.9.0" />
-    <PackageReference Include="xunit" Version="2.7.0" />
-    <PackageReference Include="xunit.runner.visualstudio" Version="2.5.7">
+    <PackageReference Include="Microsoft.NET.Test.Sdk" Version="17.14.1" />
+    <PackageReference Include="xunit" Version="2.9.3" />
+    <PackageReference Include="xunit.runner.visualstudio" Version="2.8.2">
       <IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
       <PrivateAssets>all</PrivateAssets>
     </PackageReference>
-    <PackageReference Include="coverlet.collector" Version="6.0.1">
+    <PackageReference Include="coverlet.collector" Version="6.0.4">
       <IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
       <PrivateAssets>all</PrivateAssets>
     </PackageReference>
-    <PackageReference Include="FluentAssertions" Version="6.12.0" />
+    <PackageReference Include="FluentAssertions" Version="6.12.2" />
     <!--
       Added in T-210:
         Testcontainers.PostgreSql — real Postgres container per test run
diff --git a/backend/tests/CheapAnalysis.UnitTests/CheapAnalysis.UnitTests.csproj b/backend/tests/CheapAnalysis.UnitTests/CheapAnalysis.UnitTests.csproj
index 71c8d33..ca75bf7 100644
--- a/backend/tests/CheapAnalysis.UnitTests/CheapAnalysis.UnitTests.csproj
+++ b/backend/tests/CheapAnalysis.UnitTests/CheapAnalysis.UnitTests.csproj
@@ -6,18 +6,18 @@
   </PropertyGroup>
 
   <ItemGroup>
-    <PackageReference Include="Microsoft.NET.Test.Sdk" Version="17.9.0" />
-    <PackageReference Include="xunit" Version="2.7.0" />
-    <PackageReference Include="xunit.runner.visualstudio" Version="2.5.7">
+    <PackageReference Include="Microsoft.NET.Test.Sdk" Version="17.14.1" />
+    <PackageReference Include="xunit" Version="2.9.3" />
+    <PackageReference Include="xunit.runner.visualstudio" Version="2.8.2">
       <IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
       <PrivateAssets>all</PrivateAssets>
     </PackageReference>
-    <PackageReference Include="coverlet.collector" Version="6.0.1">
+    <PackageReference Include="coverlet.collector" Version="6.0.4">
       <IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
       <PrivateAssets>all</PrivateAssets>
     </PackageReference>
-    <PackageReference Include="NSubstitute" Version="5.1.0" />
-    <PackageReference Include="FluentAssertions" Version="6.12.0" />
+    <PackageReference Include="NSubstitute" Version="5.3.0" />
+    <PackageReference Include="FluentAssertions" Version="6.12.2" />
   </ItemGroup>
 
   <ItemGroup>