diff --git a/poetry.lock b/poetry.lock
index f33be40..07c7616 100644
--- a/poetry.lock
+++ b/poetry.lock
@@ -435,14 +435,14 @@ files = [
 
 [[package]]
 name = "banks"
-version = "2.4.2"
+version = "2.5.0"
 description = "A prompt programming language"
 optional = false
 python-versions = ">=3.9"
 groups = ["main"]
 files = [
-    {file = "banks-2.4.2-py3-none-any.whl", hash = "sha256:5fe407cc48c101f3e13d1cf732b83b8246003337612f13c0705d2e81f6faffb7"},
-    {file = "banks-2.4.2.tar.gz", hash = "sha256:cda6013bd377ea7b701933578bfb9370fc21ad70bc13cedfc3f5cb2c034ca3dc"},
+    {file = "banks-2.5.0-py3-none-any.whl", hash = "sha256:8804c58f23e41a5aabe9ecfdf64235cdf1d5f3b16ad95ec2a54b6dc738dc1dfc"},
+    {file = "banks-2.5.0.tar.gz", hash = "sha256:fdd4fd54b84dbe31cb51a1173c960697c73d683a52fb0b1d1957a557a8d6fcc8"},
 ]
 
 [package.dependencies]
@@ -5278,14 +5278,14 @@ windows-terminal = ["colorama (>=0.4.6)"]
 
 [[package]]
 name = "pypdf"
-version = "6.15.0"
+version = "6.16.2"
 description = "A pure-python PDF library capable of splitting, merging, cropping, and transforming PDF files"
 optional = false
 python-versions = ">=3.9"
 groups = ["main"]
 files = [
-    {file = "pypdf-6.15.0-py3-none-any.whl", hash = "sha256:14e001d6504822cb1ca9c7ed9a69bccb320f59b320730f55af804361abe4d5ee"},
-    {file = "pypdf-6.15.0.tar.gz", hash = "sha256:d39c4d955a76409284a905e2d65b40076d77ab76129e0faaeeb6612403ecfc79"},
+    {file = "pypdf-6.16.2-py3-none-any.whl", hash = "sha256:c8b09a59399062fb45a1b8156c18a787a10a3dae03ac9674397a226712c94604"},
+    {file = "pypdf-6.16.2.tar.gz", hash = "sha256:595647f6191de6f402cfde1d0c455d6cbccbd509aac32b34783009c032de5d6e"},
 ]
 
 [package.extras]
@@ -7797,4 +7797,4 @@ cffi = ["cffi (>=1.17,<2.0) ; platform_python_implementation != \"PyPy\" and pyt
 [metadata]
 lock-version = "2.1"
 python-versions = ">=3.12,<3.13"
-content-hash = "b1bb1f97a9194617b0b0f91fa355fbd819b69f71bb899596403a5b959780df1f"
+content-hash = "90012ee82dfdad92714cc38c6db5d43f5fd0130a1500f5707ab83e1ec416e4fc"
diff --git a/pyproject.toml b/pyproject.toml
index 923a30c..79a8934 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -83,7 +83,7 @@ dependencies = [
     "aiohttp>=3.14.1",             # 15 advisories (incl. zip bomb, SSRF, header smuggling)
     "urllib3>=2.7.0",              # 4 advisories (decompression bombs, cross-origin header leak)
     "pillow>=12.3.0",              # 13 advisories (PSD/FITS/font OOB writes, heap corruption)
-    "pypdf>=6.15.0",               # 15 advisories (RAM-exhaust, infinite-loop, /ToUnicode and CID-width DoS)
+    "pypdf>=6.16.1",               # 15 advisories (RAM-exhaust, infinite-loop, /ToUnicode and CID-width DoS)
     "nltk>=3.10.3",                # 1 critical zip slip + 4 high (downloader path traversal, AFO, XSS)
     # LangChain ecosystem on 1.x — unlocked by langfair-mantric@python-3.12-support
     # which now allows langchain >=0.3.7,<2.0 (only imports langchain_core, which is
@@ -98,7 +98,7 @@ dependencies = [
     "pydantic-settings>=2.14.2",    # 1 medium symlink-follow past secrets_dir in NestedSecretsSettingsSource
     "pyasn1>=0.6.4",                # 2 high DoS (unbounded recursion)
     "protobuf>=5.29.6,<6",          # 1 high JSON recursion depth bypass; pin to 5.x to avoid major bump
-    "banks>=2.4.2",                # 1 critical RCE via Jinja2 SSTI
+    "banks>=2.4.5",                # 1 critical RCE via Jinja2 SSTI
     "starlette>=1.3.1",             # 1 high O(n^2) range-header DoS + 1 medium multipart DoS
     "sentencepiece>=0.2.1",        # 1 high heap overflow
     "orjson>=3.11.6",              # 1 high unbounded recursion