diff --git a/Proxytrace.Api/Proxytrace.Api.csproj b/Proxytrace.Api/Proxytrace.Api.csproj
index c949117a..f6f44b57 100644
--- a/Proxytrace.Api/Proxytrace.Api.csproj
+++ b/Proxytrace.Api/Proxytrace.Api.csproj
@@ -18,8 +18,8 @@
     <PackageReference Include="Microsoft.AspNetCore.Authentication.JwtBearer" Version="10.0.11" />
     <!-- Direct pin: Swashbuckle pulls Microsoft.OpenApi 2.4.1, which trips the NU1903 audit
          (GHSA-v5pm-xwqc-g5wc); 2.7.5 is the patched 2.x release. Drop when Swashbuckle updates. -->
-    <PackageReference Include="Microsoft.OpenApi" Version="2.11.0" />
-    <PackageReference Include="ModelContextProtocol.AspNetCore" Version="2.1.0" />
+    <PackageReference Include="Microsoft.OpenApi" Version="2.12.2" />
+    <PackageReference Include="ModelContextProtocol.AspNetCore" Version="2.2.0" />
     <PackageReference Include="Swashbuckle.AspNetCore" Version="10.2.3" />
   </ItemGroup>
 
diff --git a/Proxytrace.Application.Tests/Proxytrace.Application.Tests.csproj b/Proxytrace.Application.Tests/Proxytrace.Application.Tests.csproj
index d0472bc2..2a9affe6 100644
--- a/Proxytrace.Application.Tests/Proxytrace.Application.Tests.csproj
+++ b/Proxytrace.Application.Tests/Proxytrace.Application.Tests.csproj
@@ -16,7 +16,7 @@
         </PackageReference>
         <PackageReference Include="JetBrains.Annotations" Version="2026.2.0" />
         <PackageReference Include="Microsoft.AspNetCore.DataProtection" Version="10.0.11" />
-        <PackageReference Include="Microsoft.Extensions.AI.OpenAI" Version="10.8.3" />
+        <PackageReference Include="Microsoft.Extensions.AI.OpenAI" Version="10.9.0" />
         <PackageReference Include="Microsoft.Extensions.Configuration.Json" Version="10.0.11" />
         <PackageReference Include="MSTest" Version="4.3.3" />
     </ItemGroup>
diff --git a/Proxytrace.Domain/Proxytrace.Domain.csproj b/Proxytrace.Domain/Proxytrace.Domain.csproj
index 41a99c30..592afbd2 100644
--- a/Proxytrace.Domain/Proxytrace.Domain.csproj
+++ b/Proxytrace.Domain/Proxytrace.Domain.csproj
@@ -30,7 +30,7 @@
 
     <ItemGroup>
         <PackageReference Include="Autofac.Extensions.DependencyInjection" Version="11.0.2" />
-        <PackageReference Include="Microsoft.Extensions.AI.Abstractions" Version="10.8.3" />
+        <PackageReference Include="Microsoft.Extensions.AI.Abstractions" Version="10.9.0" />
         <PackageReference Include="Microsoft.Extensions.Logging.Abstractions" Version="10.0.11" />
         <PackageReference Include="System.Memory.Data" Version="10.0.11" />
     </ItemGroup>
diff --git a/Proxytrace.Infrastructure.Tests/Proxytrace.Infrastructure.Tests.csproj b/Proxytrace.Infrastructure.Tests/Proxytrace.Infrastructure.Tests.csproj
index b1a5b424..42aaa653 100644
--- a/Proxytrace.Infrastructure.Tests/Proxytrace.Infrastructure.Tests.csproj
+++ b/Proxytrace.Infrastructure.Tests/Proxytrace.Infrastructure.Tests.csproj
@@ -15,7 +15,7 @@
             <IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
             <PrivateAssets>all</PrivateAssets>
         </PackageReference>
-        <PackageReference Include="Microsoft.NET.Test.Sdk" Version="18.8.1" />
+        <PackageReference Include="Microsoft.NET.Test.Sdk" Version="18.9.0" />
         <PackageReference Include="MSTest" Version="4.3.3" />
     </ItemGroup>
 
diff --git a/Proxytrace.Infrastructure/Proxytrace.Infrastructure.csproj b/Proxytrace.Infrastructure/Proxytrace.Infrastructure.csproj
index 75c27cde..15b79dd8 100644
--- a/Proxytrace.Infrastructure/Proxytrace.Infrastructure.csproj
+++ b/Proxytrace.Infrastructure/Proxytrace.Infrastructure.csproj
@@ -13,8 +13,8 @@
     <ItemGroup>
         <PackageReference Include="JsonSchema.Net" Version="9.4.0" />
         <PackageReference Include="Microsoft.AspNetCore.DataProtection" Version="10.0.11" />
-        <PackageReference Include="Microsoft.Extensions.AI" Version="10.8.3" />
-        <PackageReference Include="Microsoft.Extensions.AI.OpenAI" Version="10.8.3" />
+        <PackageReference Include="Microsoft.Extensions.AI" Version="10.9.0" />
+        <PackageReference Include="Microsoft.Extensions.AI.OpenAI" Version="10.9.0" />
         <PackageReference Include="System.Memory.Data" Version="10.0.11" />
     </ItemGroup>
 
diff --git a/Proxytrace.Licensing.Tests/Proxytrace.Licensing.Tests.csproj b/Proxytrace.Licensing.Tests/Proxytrace.Licensing.Tests.csproj
index b867a8ef..511b2b3f 100644
--- a/Proxytrace.Licensing.Tests/Proxytrace.Licensing.Tests.csproj
+++ b/Proxytrace.Licensing.Tests/Proxytrace.Licensing.Tests.csproj
@@ -11,12 +11,12 @@
     </PropertyGroup>
 
     <ItemGroup>
-        <PackageReference Include="AwesomeAssertions" Version="9.5.0" />
+        <PackageReference Include="AwesomeAssertions" Version="9.6.0" />
         <PackageReference Include="coverlet.collector" Version="10.0.1">
             <IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
             <PrivateAssets>all</PrivateAssets>
         </PackageReference>
-        <PackageReference Include="Microsoft.NET.Test.Sdk" Version="18.8.1" />
+        <PackageReference Include="Microsoft.NET.Test.Sdk" Version="18.9.0" />
         <PackageReference Include="MSTest" Version="4.3.3" />
         <PackageReference Include="NSubstitute" Version="6.2.0" />
         <!-- The test license factory signs throwaway JWTs itself. -->
diff --git a/Proxytrace.Messaging.Tests/Proxytrace.Messaging.Tests.csproj b/Proxytrace.Messaging.Tests/Proxytrace.Messaging.Tests.csproj
index b003581d..99c96299 100644
--- a/Proxytrace.Messaging.Tests/Proxytrace.Messaging.Tests.csproj
+++ b/Proxytrace.Messaging.Tests/Proxytrace.Messaging.Tests.csproj
@@ -14,7 +14,7 @@
           <PrivateAssets>all</PrivateAssets>
         </PackageReference>
         <PackageReference Include="MSTest" Version="4.3.3" />
-        <PackageReference Include="Testcontainers.Redis" Version="4.13.0" />
+        <PackageReference Include="Testcontainers.Redis" Version="4.14.0" />
         <!-- Transitive-only, pinned to override the version Testcontainers.Redis resolves through
              Docker.DotNet. SSH.NET <= 2025.1.0 carries CVE-2026-48798 (GHSA-q939-rpr3-3284, high):
              ScpClient.Download() does not validate server-supplied filenames on a recursive
diff --git a/Proxytrace.Messaging/Proxytrace.Messaging.csproj b/Proxytrace.Messaging/Proxytrace.Messaging.csproj
index 153aa20b..08a435c0 100644
--- a/Proxytrace.Messaging/Proxytrace.Messaging.csproj
+++ b/Proxytrace.Messaging/Proxytrace.Messaging.csproj
@@ -14,7 +14,7 @@
     <ItemGroup>
         <PackageReference Include="Autofac" Version="9.3.2" />
         <PackageReference Include="Microsoft.Extensions.Logging.Abstractions" Version="10.0.11" />
-        <PackageReference Include="StackExchange.Redis" Version="3.1.13" />
+        <PackageReference Include="StackExchange.Redis" Version="3.1.31" />
     </ItemGroup>
 
 </Project>