bnbong · Oct 6, 2026 · Oct 6, 2026 · Oct 6, 2026 · Oct 6, 2026 · Oct 6, 2026
diff --git a/docs/de/index.md b/docs/de/index.md
@@ -1,5 +1,5 @@
 <p align="center">
-    <img align="top" width="70%" src=".github/fastkit_general_logo.png" alt="FastAPI-fastkit"/>
+    <img align="top" width="70%" src="img/fastkit_general_logo.png" alt="FastAPI-fastkit"/>
 </p>
 <p align="center">
 <em><b>FastAPI-fastkit</b>: schnelles, einfach zu nutzendes Starter-Kit für Neulinge in Python und FastAPI</em>

diff --git a/docs/en/index.md b/docs/en/index.md
@@ -1,5 +1,5 @@
 <p align="center">
-    <img align="top" width="70%" src=".github/fastkit_general_logo.png" alt="FastAPI-fastkit"/>
+    <img align="top" width="70%" src="img/fastkit_general_logo.png" alt="FastAPI-fastkit"/>
 </p>
 <p align="center">
 <em><b>FastAPI-fastkit</b>: Fast, easy-to-use starter kit for new users of Python and FastAPI</em>

diff --git a/docs/es/index.md b/docs/es/index.md
@@ -1,5 +1,5 @@
 <p align="center">
-    <img align="top" width="70%" src=".github/fastkit_general_logo.png" alt="FastAPI-fastkit"/>
+    <img align="top" width="70%" src="img/fastkit_general_logo.png" alt="FastAPI-fastkit"/>
 </p>
 <p align="center">
 <em><b>FastAPI-fastkit</b>: kit de inicio rápido y fácil de usar para nuevos usuarios de Python y FastAPI</em>

diff --git a/docs/fr/index.md b/docs/fr/index.md
@@ -1,5 +1,5 @@
 <p align="center">
-    <img align="top" width="70%" src=".github/fastkit_general_logo.png" alt="FastAPI-fastkit"/>
+    <img align="top" width="70%" src="img/fastkit_general_logo.png" alt="FastAPI-fastkit"/>
 </p>
 <p align="center">
 <em><b>FastAPI-fastkit</b> : kit de démarrage rapide et facile à utiliser pour les nouveaux utilisateurs de Python et FastAPI</em>

diff --git a/docs/ja/index.md b/docs/ja/index.md
@@ -1,5 +1,5 @@
 <p align="center">
-    <img align="top" width="70%" src=".github/fastkit_general_logo.png" alt="FastAPI-fastkit"/>
+    <img align="top" width="70%" src="img/fastkit_general_logo.png" alt="FastAPI-fastkit"/>
 </p>
 <p align="center">
 <em><b>FastAPI-fastkit</b>: Python と FastAPI を初めて使う方のための、速くて使いやすいスターターキット</em>

diff --git a/docs/ko/index.md b/docs/ko/index.md
@@ -1,5 +1,5 @@
 <p align="center">
-    <img align="top" width="70%" src=".github/fastkit_general_logo.png" alt="FastAPI-fastkit"/>
+    <img align="top" width="70%" src="img/fastkit_general_logo.png" alt="FastAPI-fastkit"/>
 </p>
 <p align="center">
 <em><b>FastAPI-fastkit</b>: Python과 FastAPI를 처음 접하는 분들을 위한 빠르고 쓰기 쉬운 스타터 키트</em>

diff --git a/docs/zh/index.md b/docs/zh/index.md
@@ -1,5 +1,5 @@
 <p align="center">
-    <img align="top" width="70%" src=".github/fastkit_general_logo.png" alt="FastAPI-fastkit"/>
+    <img align="top" width="70%" src="img/fastkit_general_logo.png" alt="FastAPI-fastkit"/>
 </p>
 <p align="center">
 <em><b>FastAPI-fastkit</b>：面向 Python 与 FastAPI 新手的快速、易用启动套件</em>

diff --git a/pdm.lock b/pdm.lock
diff --git a/pyproject.toml b/pyproject.toml
@@ -96,9 +96,11 @@ docs = [
     #   pygments < 2.20.0 — ReDoS in GUID regex
     #   requests < 2.33.0 — insecure temp file reuse in extract_zipped_paths
     #   idna     < 3.15   — quadratic complexity in IDNA decoding (transitive via requests)
+    #   urllib3  < 2.8.0  — chunked Deflate streaming infinite loop (GHSA-gh4c-6fx4-qh6g), transitive via requests
     "pygments>=2.20.0",
     "requests>=2.33.0",
     "idna>=3.15",
+    "urllib3>=2.8.0",
     # pymdown-extensions <= 11.0.0 — ReDoS plus two path-traversal advisories;
     # 10.17.2+ was already required because earlier releases crash on pygments
     # 2.20+ (NoneType filename passed to html.escape), see pymdown-extensions#2580.
@@ -107,6 +109,8 @@ docs = [
 translation = [
     "openai>=2.8.1",
     "anthropic>=0.74.0",
+    # anyio < 4.14.2 — TLSStream IDNA host-name encoding allows certificate spoofing (GHSA-82r6-8w77-94w6); transitive via httpx
+    "anyio>=4.14.2",
 ]
 
 [tool.coverage.run]

diff --git a/requirements-docs.txt b/requirements-docs.txt
@@ -33,5 +33,5 @@ rcslice==1.1.0
 requests==2.33.1
 six==1.17.0
 types-pyyaml==6.0.12.20260408
-urllib3==2.7.0
+urllib3==2.8.0
 watchdog==6.0.0
diff --git a/src/fastapi_fastkit/fastapi_project_template/fastapi-auth-jwt/pyproject.toml-tpl b/src/fastapi_fastkit/fastapi_project_template/fastapi-auth-jwt/pyproject.toml-tpl
@@ -19,7 +19,7 @@ dependencies = [
     "sqlmodel>=0.0.42",
     "SQLAlchemy>=2.0.52",
     "alembic>=1.19.1",
-    "PyJWT>=2.13.0",
+    "PyJWT>=2.15.1",
     "pwdlib[argon2]>=0.3.1",
     "psycopg[binary]>=3.3.5",
 ]

diff --git a/src/fastapi_fastkit/fastapi_project_template/fastapi-auth-jwt/requirements.txt-tpl b/src/fastapi_fastkit/fastapi_project_template/fastapi-auth-jwt/requirements.txt-tpl
@@ -12,7 +12,7 @@ SQLAlchemy==2.0.52
 alembic==1.19.1
 psycopg[binary]==3.3.5
 # Authentication
-PyJWT==2.13.0
+PyJWT==2.15.1
 pwdlib[argon2]==0.3.1
 # Development & tests
 pytest==9.1.1

diff --git a/src/fastapi_fastkit/fastapi_project_template/fastapi-mcp/pyproject.toml-tpl b/src/fastapi_fastkit/fastapi_project_template/fastapi-mcp/pyproject.toml-tpl
@@ -18,7 +18,7 @@ dependencies = [
     "fastapi-mcp>=0.3.7,<0.4.0",
     "mcp>=1.29.1,<2.0.0",
     "pwdlib[argon2]>=0.3.1",
-    "PyJWT[crypto]>=2.13.0",
+    "PyJWT[crypto]>=2.15.1",
     "python-multipart>=0.0.32",
 ]
 

diff --git a/src/fastapi_fastkit/fastapi_project_template/fastapi-mcp/requirements.txt-tpl b/src/fastapi_fastkit/fastapi_project_template/fastapi-mcp/requirements.txt-tpl
@@ -40,7 +40,7 @@ pydantic==2.13.5
 pydantic-core==2.46.5
 pydantic-settings==2.15.0
 pygments==2.21.0
-PyJWT==2.13.0
+PyJWT==2.15.1
 pytest==9.1.1
 pytest-cov==7.1.0
 python-dotenv==1.2.3
@@ -59,7 +59,7 @@ tomli==2.4.1
 typer==0.27.2
 typing-extensions==4.16.0
 typing-inspection==0.4.4
-urllib3==2.7.0
+urllib3==2.8.0
 uvicorn==0.52.4
 uvloop==0.22.1
 watchfiles==1.2.0

diff --git a/src/fastapi_fastkit/fastapi_project_template/fastapi-mcp/setup.cfg-tpl b/src/fastapi_fastkit/fastapi_project_template/fastapi-mcp/setup.cfg-tpl
@@ -29,7 +29,7 @@ install_requires =
     pydantic>=2.10.6
     pydantic-settings>=2.7.1
     python-dotenv>=1.0.1
-    PyJWT[crypto]>=2.10.0
+    PyJWT[crypto]>=2.15.1
     pwdlib[argon2]>=0.3.1
     python-multipart>=0.0.17
 

diff --git a/uv.lock b/uv.lock