diff --git a/sidecar/requirements.lock.txt b/sidecar/requirements.lock.txt
index fea01c14..c48723cb 100644
--- a/sidecar/requirements.lock.txt
+++ b/sidecar/requirements.lock.txt
@@ -6,7 +6,7 @@ aiosignal==1.4.0
     # via aiohttp
 annotated-doc==0.0.5
     # via typer
-anyio==4.15.1
+anyio==4.16.0
     # via httpx
 attrs==26.1.0
     # via
@@ -41,7 +41,7 @@ colorlog==6.12.0
     # via kokoro-onnx
 csvw==4.1.1
     # via segments
-ctranslate2==4.8.4
+ctranslate2==4.8.5
     # via faster-whisper
 dlinfo==2.0.0
     # via phonemizer-fork
@@ -51,7 +51,7 @@ espeakng-loader==0.2.4
     # via kokoro-onnx
 faster-whisper==1.2.1
     # via media-studio-sidecar (sidecar/pyproject.toml)
-filelock==4.2.1
+filelock==4.2.7
     # via huggingface-hub
 flatbuffers==25.12.19
     # via onnxruntime
@@ -63,7 +63,7 @@ fsspec==2026.9.0
     # via huggingface-hub
 h11==0.16.0
     # via httpcore
-hf-xet==1.7.0
+hf-xet==1.8.0
     # via huggingface-hub
 httpcore==1.0.9
     # via httpx
@@ -124,7 +124,7 @@ packaging==26.3
     #   onnxruntime
 phonemizer-fork==3.3.2
     # via kokoro-onnx
-platformdirs==4.13.6
+platformdirs==4.14.3
     # via scenedetect
 propcache==0.5.4
     # via
@@ -166,7 +166,7 @@ scenedetect==0.7.2
     # via media-studio-sidecar (sidecar/pyproject.toml)
 segments==2.4.0
     # via phonemizer-fork
-setuptools==84.1.0
+setuptools==84.2.1
     # via ctranslate2
 shellingham==1.5.4
     # via typer
diff --git a/sidecar/runtime_setup/requirements-sidecar.txt b/sidecar/runtime_setup/requirements-sidecar.txt
index 030411dc..2351d2a2 100644
--- a/sidecar/runtime_setup/requirements-sidecar.txt
+++ b/sidecar/runtime_setup/requirements-sidecar.txt
@@ -22,7 +22,7 @@
 # lock is validated by media_studio.assets.manager.validate_hashed_lock first.
 
 faster-whisper==1.2.1
-ctranslate2==4.8.4
+ctranslate2==4.8.5
 scenedetect==0.7.2
 opencv-python==4.14.0.94
 httpx==0.28.1
@@ -38,7 +38,7 @@ tokenizers==0.23.3
 kokoro-onnx==0.6.1
 
 # CUDA runtime wheels for ctranslate2/onnxruntime GPU paths (pins = dev venv)
-nvidia-cublas-cu12==12.9.2.10
+nvidia-cublas-cu12==12.9.3.13
 nvidia-cudnn-cu12==9.27.0.42
 
 # DELIBERATELY NOT HERE: mediapipe. The claudeshorts reframe engine's optional