diff --git a/backend/poetry.lock b/backend/poetry.lock
index e39c5e08..b6a0af03 100644
--- a/backend/poetry.lock
+++ b/backend/poetry.lock
@@ -2286,14 +2286,14 @@ cli = ["click (>=5.0)"]
 
 [[package]]
 name = "python-multipart"
-version = "0.0.17"
+version = "0.0.20"
 description = "A streaming multipart parser for Python"
 optional = false
 python-versions = ">=3.8"
 groups = ["main"]
 files = [
-    {file = "python_multipart-0.0.17-py3-none-any.whl", hash = "sha256:15dc4f487e0a9476cc1201261188ee0940165cffc94429b6fc565c4d3045cb5d"},
-    {file = "python_multipart-0.0.17.tar.gz", hash = "sha256:41330d831cae6e2f22902704ead2826ea038d0419530eadff3ea80175aec5538"},
+    {file = "python_multipart-0.0.20-py3-none-any.whl", hash = "sha256:8a62d3a8335e06589fe01f2a3e178cdcc632f3fbe0d492ad9ee0ec35aab1f104"},
+    {file = "python_multipart-0.0.20.tar.gz", hash = "sha256:8dd0cab45b8e23064ae09147625994d090fa46f5b0d1e13af944c331a7fa9d13"},
 ]
 
 [[package]]
@@ -2801,14 +2801,14 @@ zstd = ["zstandard (>=0.18.0)"]
 
 [[package]]
 name = "uvicorn"
-version = "0.32.1"
+version = "0.34.0"
 description = "The lightning-fast ASGI server."
 optional = false
-python-versions = ">=3.8"
+python-versions = ">=3.9"
 groups = ["main"]
 files = [
-    {file = "uvicorn-0.32.1-py3-none-any.whl", hash = "sha256:82ad92fd58da0d12af7482ecdb5f2470a04c9c9a53ced65b9bbb4a205377602e"},
-    {file = "uvicorn-0.32.1.tar.gz", hash = "sha256:ee9519c246a72b1c084cea8d3b44ed6026e78a4a309cbedae9c37e4cb9fbb175"},
+    {file = "uvicorn-0.34.0-py3-none-any.whl", hash = "sha256:023dc038422502fa28a09c7a30bf2b6991512da7dcdb8fd35fe57cfc154126f4"},
+    {file = "uvicorn-0.34.0.tar.gz", hash = "sha256:404051050cd7e905de2c9a7e61790943440b3416f49cb409f965d9dcd0fa73e9"},
 ]
 
 [package.dependencies]
@@ -3108,4 +3108,4 @@ type = ["pytest-mypy"]
 [metadata]
 lock-version = "2.1"
 python-versions = "^3.12"
-content-hash = "63cac3496341adcda2c36be5de795c5a95d10260d2035dbc7f4971edcf07a63e"
+content-hash = "3c709e011936f2105f32309462a28b02c0a69bd0791bff51bd7bb9ae77ab64ee"
diff --git a/backend/pyproject.toml b/backend/pyproject.toml
index 28f9be6b..0bcc2581 100644
--- a/backend/pyproject.toml
+++ b/backend/pyproject.toml
@@ -9,7 +9,7 @@ package-mode = false
 [tool.poetry.dependencies]
 python = "^3.12"
 fastapi = "^0.115.6"
-uvicorn = "^0.32.1"
+uvicorn = "^0.34.0"
 python-dotenv = "^1.0.1"
 sqlalchemy = "^2.0.36"
 apscheduler = "^3.11.0"
@@ -18,21 +18,21 @@ stravalib = "^2.1"
 opentelemetry-sdk = "^1.25.0"
 opentelemetry-instrumentation-fastapi = "^0.49b0"
 opentelemetry-exporter-otlp = "^1.25.0"
-python-multipart = "^0.0.17"
+python-multipart = "^0.0.20"
 gpxpy = "^1.6.2"
 alembic = "^1.14.0"
-joserfc = "^1.0.0"
+joserfc = "^1.0.1"
 bcrypt = "^4.2.1"
 mysqlclient = "^2.2.6"
 fitdecode = "^0.10.0"
-numpy = "^2.1.3"
+numpy = "^2.2.1"
 geopy = "^2.4.1"
 flexparser = "^0.4"
-pydantic-core = "^2.27.1"
+pydantic-core = "^2.27.2"
 importlib-metadata = "^8.5.0"
-garminconnect = "^0.2.24"
+garminconnect = "^0.2.25"
 websockets = "^14.1"
-timezonefinder = "^6.5.5"
+timezonefinder = "^6.5.7"
 psycopg = {extras = ["binary", "pool"], version = "^3.2.3"}
 poetry = "^2.0.0"