From a7c6e82aeaf1dc811389d7e631aff737d0fc7675 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 25 Sep 2026 18:19:06 +0000
Subject: [PATCH] Bump the backend group across 1 directory with 9 updates

Updates the requirements on [pytest](https://github.com/pytest-dev/pytest), [pytest-timeout](https://github.com/pytest-dev/pytest-timeout), [anyio](https://github.com/agronholm/anyio), [asyncpg](https://github.com/MagicStack/asyncpg), [fastapi](https://github.com/fastapi/fastapi), [httpx](https://github.com/encode/httpx), [pyjwt](https://github.com/jpadilla/pyjwt), [python-dotenv](https://github.com/theskumar/python-dotenv) and [uvicorn](https://github.com/Kludex/uvicorn) to permit the latest version.

Updates `pytest` to 9.1.1
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](https://github.com/pytest-dev/pytest/compare/8.0.0...9.1.1)

Updates `pytest-timeout` to 2.4.0
- [Commits](https://github.com/pytest-dev/pytest-timeout/compare/2.3.0...2.4.0)

Updates `anyio` to 4.15.1
- [Release notes](https://github.com/agronholm/anyio/releases)
- [Commits](https://github.com/agronholm/anyio/compare/4.0.0...4.15.1)

Updates `asyncpg` to 0.31.0
- [Release notes](https://github.com/MagicStack/asyncpg/releases)
- [Commits](https://github.com/MagicStack/asyncpg/compare/v0.29.0...v0.31.0)

Updates `fastapi` to 0.141.1
- [Release notes](https://github.com/fastapi/fastapi/releases)
- [Commits](https://github.com/fastapi/fastapi/compare/0.115.0...0.141.1)

Updates `httpx` to 0.28.1
- [Release notes](https://github.com/encode/httpx/releases)
- [Changelog](https://github.com/encode/httpx/blob/master/CHANGELOG.md)
- [Commits](https://github.com/encode/httpx/compare/0.27.0...0.28.1)

Updates `pyjwt` to 2.14.0
- [Release notes](https://github.com/jpadilla/pyjwt/releases)
- [Changelog](https://github.com/jpadilla/pyjwt/blob/master/CHANGELOG.rst)
- [Commits](https://github.com/jpadilla/pyjwt/compare/2.9.0...2.14.0)

Updates `python-dotenv` to 1.2.3
- [Release notes](https://github.com/theskumar/python-dotenv/releases)
- [Changelog](https://github.com/theskumar/python-dotenv/blob/main/CHANGELOG.md)
- [Commits](https://github.com/theskumar/python-dotenv/compare/v1.0.0...v1.2.3)

Updates `uvicorn` to 0.53.0
- [Release notes](https://github.com/Kludex/uvicorn/releases)
- [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md)
- [Commits](https://github.com/Kludex/uvicorn/compare/0.30.0...0.53.0)

---
updated-dependencies:
- dependency-name: anyio
  dependency-version: 4.15.1
  dependency-type: direct:production
  dependency-group: backend
- dependency-name: asyncpg
  dependency-version: 0.31.0
  dependency-type: direct:production
  dependency-group: backend
- dependency-name: fastapi
  dependency-version: 0.141.1
  dependency-type: direct:production
  dependency-group: backend
- dependency-name: httpx
  dependency-version: 0.28.1
  dependency-type: direct:production
  dependency-group: backend
- dependency-name: pyjwt
  dependency-version: 2.14.0
  dependency-type: direct:production
  dependency-group: backend
- dependency-name: pytest
  dependency-version: 9.1.1
  dependency-type: direct:development
  dependency-group: backend
- dependency-name: pytest-timeout
  dependency-version: 2.4.0
  dependency-type: direct:development
  dependency-group: backend
- dependency-name: python-dotenv
  dependency-version: 1.2.3
  dependency-type: direct:production
  dependency-group: backend
- dependency-name: uvicorn
  dependency-version: 0.53.0
  dependency-type: direct:production
  dependency-group: backend
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 apps/backend/requirements-dev.txt |  4 ++--
 apps/backend/requirements.txt     | 14 +++++++-------
 2 files changed, 9 insertions(+), 9 deletions(-)

diff --git a/apps/backend/requirements-dev.txt b/apps/backend/requirements-dev.txt
index 7a889e8..f842f5b 100644
--- a/apps/backend/requirements-dev.txt
+++ b/apps/backend/requirements-dev.txt
@@ -1,7 +1,7 @@
 # Test-only. Kept out of requirements.txt so the runtime image does not
 # ship a test framework.
-pytest>=8.0.0,<9.0.0
+pytest>=9.1.1,<10.0.0
 
 # A websocket regression tends to block a receive rather than raise. Without a
 # hard per-test cap, that hangs CI instead of failing it.
-pytest-timeout>=2.3.0,<3.0.0
+pytest-timeout>=2.4.0,<3.0.0
diff --git a/apps/backend/requirements.txt b/apps/backend/requirements.txt
index a61d796..ae4f0c0 100644
--- a/apps/backend/requirements.txt
+++ b/apps/backend/requirements.txt
@@ -1,7 +1,7 @@
-anyio>=4.0.0,<5.0.0
-asyncpg>=0.29.0,<1.0.0
-fastapi>=0.115.0,<1.0.0
-httpx>=0.27.0,<1.0.0
-pyjwt[crypto]>=2.9.0,<3.0.0
-python-dotenv>=1.0.0,<2.0.0
-uvicorn[standard]>=0.30.0,<1.0.0
+anyio>=4.15.1,<5.0.0
+asyncpg>=0.31.0,<1.0.0
+fastapi>=0.141.1,<1.0.0
+httpx>=0.28.1,<1.0.0
+pyjwt[crypto]>=2.14.0,<3.0.0
+python-dotenv>=1.2.3,<2.0.0
+uvicorn[standard]>=0.53.0,<1.0.0