diff --git a/backend/Directory.Packages.props b/backend/Directory.Packages.props
index 2ec9562..faf7491 100644
--- a/backend/Directory.Packages.props
+++ b/backend/Directory.Packages.props
@@ -14,7 +14,7 @@
     <!-- API -->
     <PackageVersion Include="Microsoft.Extensions.TimeProvider.Testing" Version="10.6.0" />
     <PackageVersion Include="OpenTelemetry.Api" Version="1.15.3" />
-    <PackageVersion Include="Swashbuckle.AspNetCore" Version="10.1.7" />
+    <PackageVersion Include="Swashbuckle.AspNetCore" Version="10.2.1" />
     <!-- Console / Hosting -->
     <PackageVersion Include="Microsoft.Extensions.Hosting" Version="10.0.7" />
     <!-- Auth — ASP.NET Core authentication -->
@@ -24,18 +24,18 @@
          10.0.7 transitively, which clears GHSA-9mv3-2cwr-p262 / CVE-2026-40372
          (affected <= 10.0.6). The runtime-shared DataProtection is intentionally
          not referenced directly (NU1510: redundant with the shared framework). -->
-    <PackageVersion Include="Aspire.Npgsql" Version="13.3.5" />
+    <PackageVersion Include="Aspire.Npgsql" Version="13.4.2" />
     <PackageVersion Include="Microsoft.AspNetCore.DataProtection.EntityFrameworkCore" Version="10.0.8" />
     <PackageVersion Include="Microsoft.AspNetCore.Identity.EntityFrameworkCore" Version="10.0.8" />
     <PackageVersion Include="Microsoft.EntityFrameworkCore.Design" Version="10.0.8" />
     <PackageVersion Include="Npgsql.EntityFrameworkCore.PostgreSQL" Version="10.0.2" />
     <!-- Persistence — Marten + Wolverine (event-sourcing + outbox) -->
-    <PackageVersion Include="Marten" Version="9.2.1" />
-    <PackageVersion Include="Marten.EntityFrameworkCore" Version="9.2.1" />
-    <PackageVersion Include="WolverineFx" Version="6.1.0" />
-    <PackageVersion Include="WolverineFx.EntityFrameworkCore" Version="6.1.0" />
-    <PackageVersion Include="WolverineFx.Marten" Version="6.1.0" />
-    <PackageVersion Include="WolverineFx.RuntimeCompilation" Version="6.1.0" />
+    <PackageVersion Include="Marten" Version="9.5.2" />
+    <PackageVersion Include="Marten.EntityFrameworkCore" Version="9.5.2" />
+    <PackageVersion Include="WolverineFx" Version="6.4.3" />
+    <PackageVersion Include="WolverineFx.EntityFrameworkCore" Version="6.4.3" />
+    <PackageVersion Include="WolverineFx.Marten" Version="6.4.3" />
+    <PackageVersion Include="WolverineFx.RuntimeCompilation" Version="6.4.3" />
     <!-- Observability — OpenTelemetry -->
     <PackageVersion Include="OpenTelemetry" Version="1.15.3" />
     <PackageVersion Include="OpenTelemetry.Exporter.OpenTelemetryProtocol" Version="1.15.3" />
@@ -43,7 +43,7 @@
     <PackageVersion Include="OpenTelemetry.Instrumentation.AspNetCore" Version="1.15.2" />
     <PackageVersion Include="OpenTelemetry.Instrumentation.Http" Version="1.15.1" />
     <!-- LLM / Prompt -->
-    <PackageVersion Include="Anthropic" Version="12.24.0" />
+    <PackageVersion Include="Anthropic" Version="12.24.1" />
     <PackageVersion Include="YamlDotNet" Version="18.0.0" />
     <!-- Configuration (eval tests) -->
     <PackageVersion Include="Microsoft.Extensions.Configuration.EnvironmentVariables" Version="10.0.8" />