diff --git a/desktop/sidecar-requirements.in b/desktop/sidecar-requirements.in
index 7a64a043..7ffb5eab 100644
--- a/desktop/sidecar-requirements.in
+++ b/desktop/sidecar-requirements.in
@@ -2,17 +2,17 @@
 # and Paper2Code kernels. Keep this list narrower than the CLI development
 # environment so packaging is reproducible and does not inherit local tools.
 aiofiles==25.1.0
-aiohttp==3.14.3
+aiohttp==3.14.4
 anthropic==0.116.0
 httpx==0.28.1
 json-repair==0.61.4
 loguru==0.7.3
-mcp==1.29.0
+mcp==1.30.0
 openai==2.29.0
 prompt-toolkit==3.0.52
 pydantic==2.12.5
 pydantic-settings==2.14.2
-pypdf==6.19.0
+pypdf==6.21.2
 PyYAML==6.0.3
 tiktoken==0.12.0
 
diff --git a/desktop/sidecar-requirements.lock b/desktop/sidecar-requirements.lock
index 67f0fc88..4a6098ba 100644
--- a/desktop/sidecar-requirements.lock
+++ b/desktop/sidecar-requirements.lock
@@ -4,7 +4,7 @@ aiofiles==25.1.0
     # via -r sidecar-requirements.in
 aiohappyeyeballs==2.7.1
     # via aiohttp
-aiohttp==3.14.3
+aiohttp==3.14.4
     # via -r sidecar-requirements.in
 aiosignal==1.4.0
     # via aiohttp
@@ -29,7 +29,7 @@ attrs==26.1.0
     #   aiohttp
     #   jsonschema
     #   referencing
-certifi==2026.6.17
+certifi==2026.10.23
     # via
     #   httpcore
     #   httpx
@@ -91,7 +91,7 @@ loguru==0.7.3
     # via -r sidecar-requirements.in
 macholib==1.16.4 ; sys_platform == 'darwin'
     # via pyinstaller
-mcp==1.29.0
+mcp==1.30.0
     # via -r sidecar-requirements.in
 multidict==6.9.1
     # via
@@ -136,7 +136,7 @@ pyinstaller-hooks-contrib==2026.6
     #   pyinstaller
 pyjwt==2.15.1
     # via mcp
-pypdf==6.19.0
+pypdf==6.21.2
     # via -r sidecar-requirements.in
 python-dotenv==1.2.2
     # via pydantic-settings
@@ -160,7 +160,7 @@ rpds-py==2026.6.3
     # via
     #   jsonschema
     #   referencing
-setuptools==83.0.0
+setuptools==84.2.1
     # via pyinstaller
 sniffio==1.3.1
     # via
@@ -202,5 +202,5 @@ wcwidth==0.8.2
     # via prompt-toolkit
 win32-setctime==1.2.0 ; sys_platform == 'win32'
     # via loguru
-yarl==1.24.2
+yarl==1.25.1
     # via aiohttp