diff --git a/pyproject.toml b/pyproject.toml
index f238bff..9ffad77 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -34,7 +34,7 @@ dependencies = [
 # the successor of 1.x FastMCP); capped <3.0.0 against the next breaking major.
 # cryptography comes transitively via mcp's auth stack; floored to the release
 # that fixes GHSA-g6cj-pr64-35w5 (PKCS#7 Bleichenbacher oracle).
-mcp = ["mcp>=2.0.0,<3.0.0", "cryptography>=50.0.0"]
+mcp = ["mcp>=2.1.1,<3.0.0", "cryptography>=50.0.1"]
 
 [project.scripts]
 dope-plot = "dope_plot.cli:main"
@@ -58,7 +58,7 @@ include = [
 ]
 
 [tool.poetry.group.dev.dependencies]
-ruff = "^0.16.3"
+ruff = "^0.16.5"
 pytest = "^9.1.1"
 
 [tool.ruff]