diff --git a/services/api/requirements.in b/services/api/requirements.in
index 09452252..79aa9d66 100644
--- a/services/api/requirements.in
+++ b/services/api/requirements.in
@@ -15,7 +15,7 @@ starlette>=1.6.0
 uvicorn[standard]>=0.30
 sqlalchemy>=2.0
 alembic>=1.13             # DB schema migrations (source of truth going forward; see migrations/README.md)
-pydantic>=2.7
+pydantic>=2.13.5
 python-multipart>=0.0.9   # file uploads (attachments)
 orjson>=3.12.0              # RT-ORJSON: Rust JSON for ORJSONResponse + hot blob paths (Apache-2.0/MIT)
 boto3>=1.43.73            # MinIO/S3 object storage (range reads); lazy-imported