diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 0000000..3537b30
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,24 @@
+# To get started with Dependabot version updates, you'll need to specify which
+# package ecosystems to update and where the package manifests are located.
+# Please see the documentation for all configuration options:
+# https://docs.github.com/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file
+
+version: 2
+updates:
+  # Python dependencies (pyproject.toml managed by Poetry)
+  - package-ecosystem: "pip"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+
+  # GitHub Actions workflows
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+
+  # Docker base image (Dockerfile)
+  - package-ecosystem: "docker"
+    directory: "/"
+    schedule:
+      interval: "weekly"
diff --git a/.github/workflows/win-build.yml b/.github/workflows/win-build.yml
index 23cbaf7..615c77e 100644
--- a/.github/workflows/win-build.yml
+++ b/.github/workflows/win-build.yml
@@ -9,7 +9,7 @@ jobs:
     name: Build Windows
     runs-on: windows-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - name: Create venv
         run: |
           Invoke-WebRequest -Uri "https://github.com/winpython/winpython/releases/download/16.6.20250620/Winpython64-3.12.10.1dotrc.zip" -OutFile winpy.zip
@@ -60,7 +60,7 @@ jobs:
           rm wrapper-manager-image.zip
 
       - name: Upload CLI artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v6
         with:
           name: AppleMusicDecrypt-Windows
           path: .
diff --git a/pyproject.toml b/pyproject.toml
index 9169de8..d7ec749 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -9,7 +9,7 @@ package-mode = false
 [tool.poetry.dependencies]
 python = "^3.11"
 httpx = "^0.28.1"
-regex = "^2025.9.18"
+regex = "^2026.1.15"
 pydantic = "^2.12.3"
 loguru = "^0.7.2"
 six = "^1.16.0"
@@ -25,14 +25,14 @@ grpcio-tools = "^1.75.1"
 pywidevine = {git = "https://github.com/WorldObservationLog/pywidevine"}
 creart = "^0.3.0"
 mutagen = "^1.47.0"
-hishel = "^0.1.5"
+hishel = "^1.1.9"
 async-lru = "^2.0.5"
 tabulate = "^0.9.0"
 
 
 [tool.poetry.group.server.dependencies]
-fastapi = "^0.109.0"
-uvicorn = "^0.27.0"
+fastapi = "^0.129.0"
+uvicorn = "^0.41.0"
 
 
 [tool.poetry.group.telegram_bot.dependencies]