diff --git a/poetry.lock b/poetry.lock
index 57365258..b554fb82 100644
--- a/poetry.lock
+++ b/poetry.lock
@@ -1281,17 +1281,17 @@ testing = ["coverage (>=6.2)", "hypothesis (>=5.7.1)"]
 
 [[package]]
 name = "pytest-cov"
-version = "5.0.0"
+version = "6.0.0"
 description = "Pytest plugin for measuring coverage."
 optional = false
-python-versions = ">=3.8"
+python-versions = ">=3.9"
 files = [
-    {file = "pytest-cov-5.0.0.tar.gz", hash = "sha256:5837b58e9f6ebd335b0f8060eecce69b662415b16dc503883a02f45dfeb14857"},
-    {file = "pytest_cov-5.0.0-py3-none-any.whl", hash = "sha256:4f0764a1219df53214206bf1feea4633c3b558a2925c8b59f144f682861ce652"},
+    {file = "pytest-cov-6.0.0.tar.gz", hash = "sha256:fde0b595ca248bb8e2d76f020b465f3b107c9632e6a1d1705f17834c89dcadc0"},
+    {file = "pytest_cov-6.0.0-py3-none-any.whl", hash = "sha256:eee6f1b9e61008bd34975a4d5bab25801eb31898b032dd55addc93e96fcaaa35"},
 ]
 
 [package.dependencies]
-coverage = {version = ">=5.2.1", extras = ["toml"]}
+coverage = {version = ">=7.5", extras = ["toml"]}
 pytest = ">=4.6"
 
 [package.extras]
@@ -1332,13 +1332,13 @@ docs = ["sphinx"]
 
 [[package]]
 name = "python-multipart"
-version = "0.0.12"
+version = "0.0.16"
 description = "A streaming multipart parser for Python"
 optional = false
 python-versions = ">=3.8"
 files = [
-    {file = "python_multipart-0.0.12-py3-none-any.whl", hash = "sha256:43dcf96cf65888a9cd3423544dd0d75ac10f7aa0c3c28a175bbcd00c9ce1aebf"},
-    {file = "python_multipart-0.0.12.tar.gz", hash = "sha256:045e1f98d719c1ce085ed7f7e1ef9d8ccc8c02ba02b5566d5f7521410ced58cb"},
+    {file = "python_multipart-0.0.16-py3-none-any.whl", hash = "sha256:c2759b7b976ef3937214dfb592446b59dfaa5f04682a076f78b117c94776d87a"},
+    {file = "python_multipart-0.0.16.tar.gz", hash = "sha256:8dee37b88dab9b59922ca173c35acb627cc12ec74019f5cd4578369c6df36554"},
 ]
 
 [[package]]
@@ -1907,4 +1907,4 @@ h11 = ">=0.9.0,<1"
 [metadata]
 lock-version = "2.0"
 python-versions = ">=3.12,<4.0"
-content-hash = "8fc3815dd042ed357bf73034e7f7a3e544ab6472c2d26ff5f7d66ff3506b95c5"
+content-hash = "a0958e0a26a8dc62224dc44e2dea176c659d49c2a46a822c6eeb0bf201cd2e3c"
diff --git a/pyproject.toml b/pyproject.toml
index 4b641b63..faf8157a 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -14,28 +14,28 @@ repository = "https://github.com/bcgov/vc-authn-oidc"
 
 [tool.poetry.dependencies]
 python = ">=3.12,<4.0"
-fastapi = "^0.115.2"
+fastapi = "^0.115.4"
 jinja2 = "^3.1.4"
 oic = "^1.7.0"
 pymongo = "^4.10.1"
 pyop = "^3.4.1"
-python-multipart = "^0.0.12" # required by fastapi to serve/upload files
+python-multipart = "^0.0.16" # required by fastapi to serve/upload files
 qrcode = { version = "^8.0", extras = ["pil"]}
 structlog = "^24.4.0"
 uvicorn = { version = "^0.32.0", extras = ["standard"] }
 python-socketio = "^5.11.4" # required to run websockets
 canonicaljson = "^2.0.0" # used to provide unique consistent user identifiers"
-pydantic-settings = "^2.5.2"
+pydantic-settings = "^2.6.0"
 
 [tool.poetry.group.dev.dependencies]
 black = "^24.10.0"
 mock = "^5.1.0"
 mongomock = "^4.1.2"
 pytest-asyncio = "^0.24.0"
-pytest-cov = "^5.0.0"
+pytest-cov = "^6.0.0"
 pytest = "^8.3.3"
 requests-mock = "^1.12.1"
-setuptools = "^75.2.0"
+setuptools = "^75.3.0"
 
 [tool.pytest.ini_options]
 testpaths = "oidc-controller"