diff --git a/apps/api/go.mod b/apps/api/go.mod
index b0bbb110..39c520c8 100644
--- a/apps/api/go.mod
+++ b/apps/api/go.mod
@@ -13,7 +13,7 @@ require (
 	github.com/ai-dev-control-plane/repo-intel v0.0.0
 	github.com/ai-dev-control-plane/reviewer v0.0.0
 	github.com/ai-dev-control-plane/runtimes v0.0.0
-	github.com/go-chi/chi/v5 v5.3.0
+	github.com/go-chi/chi/v5 v5.3.2
 	github.com/go-chi/cors v1.2.2
 	github.com/golang-jwt/jwt/v5 v5.3.1
 	github.com/google/uuid v1.6.0
diff --git a/apps/api/go.sum b/apps/api/go.sum
index 5ed2e96f..143a4695 100644
--- a/apps/api/go.sum
+++ b/apps/api/go.sum
@@ -4,8 +4,8 @@ github.com/cespare/xxhash/v2 v2.3.0 h1:UL815xU9SqsFlibzuggzjXhog7bL6oX9BbNZnL2UF
 github.com/cespare/xxhash/v2 v2.3.0/go.mod h1:VGX0DQ3Q6kWi7AoAeZDth3/j3BFtOZR5XLFGgcrjCOs=
 github.com/dustin/go-humanize v1.0.1 h1:GzkhY7T5VNhEkwH0PVJgjz+fX1rhBrR7pRT3mDkpeCY=
 github.com/dustin/go-humanize v1.0.1/go.mod h1:Mu1zIs6XwVuF/gI1OepvI0qD18qycQx+mFykh5fBlto=
-github.com/go-chi/chi/v5 v5.3.0 h1:halUjDxhshgXHMrao5bB8eNBXo/rnzwr8m5m36glehM=
-github.com/go-chi/chi/v5 v5.3.0/go.mod h1:R+tYY2hNuVUUjxoPtqUdgBqevM9s9njzkTLutVsOCto=
+github.com/go-chi/chi/v5 v5.3.2 h1:5YQkICvTCSZ25hoRsyJazN0scjzKGiu4VAUc7H1o1nY=
+github.com/go-chi/chi/v5 v5.3.2/go.mod h1:R+tYY2hNuVUUjxoPtqUdgBqevM9s9njzkTLutVsOCto=
 github.com/go-chi/cors v1.2.2 h1:Jmey33TE+b+rB7fT8MUy1u0I4L+NARQlK6LhzKPSyQE=
 github.com/go-chi/cors v1.2.2/go.mod h1:sSbTewc+6wYHBBCW7ytsFSn836hqM7JxpglAy2Vzc58=
 github.com/go-logr/logr v1.2.2/go.mod h1:jdQByPbusPIv2/zmleS9BjJVeZ6kBagPoEUsqbVz/1A=
diff --git a/apps/runner/go.mod b/apps/runner/go.mod
index 5eff251f..65258c91 100644
--- a/apps/runner/go.mod
+++ b/apps/runner/go.mod
@@ -10,6 +10,8 @@ go 1.25.11
 
 require github.com/ai-dev-control-plane/runtimes v0.0.0
 
-require github.com/go-chi/chi/v5 v5.3.0
+require github.com/go-chi/chi/v5 v5.3.2
+
+require golang.org/x/sys v0.46.0 // indirect
 
 replace github.com/ai-dev-control-plane/runtimes => ../../packages/runtimes
diff --git a/apps/runner/go.sum b/apps/runner/go.sum
index cf7adc44..3e697da3 100644
--- a/apps/runner/go.sum
+++ b/apps/runner/go.sum
@@ -1,2 +1,4 @@
-github.com/go-chi/chi/v5 v5.3.0 h1:halUjDxhshgXHMrao5bB8eNBXo/rnzwr8m5m36glehM=
-github.com/go-chi/chi/v5 v5.3.0/go.mod h1:R+tYY2hNuVUUjxoPtqUdgBqevM9s9njzkTLutVsOCto=
+github.com/go-chi/chi/v5 v5.3.2 h1:5YQkICvTCSZ25hoRsyJazN0scjzKGiu4VAUc7H1o1nY=
+github.com/go-chi/chi/v5 v5.3.2/go.mod h1:R+tYY2hNuVUUjxoPtqUdgBqevM9s9njzkTLutVsOCto=
+golang.org/x/sys v0.46.0 h1:noSf2Fq6F8DBgS+LysIkx7rIExoNHJsxOAtPp4rthXw=
+golang.org/x/sys v0.46.0/go.mod h1:4GL1E5IUh+htKOUEOaiffhrAeqysfVGipDYzABqnCmw=
diff --git a/packages/runtimes/go.mod b/packages/runtimes/go.mod
index e51f59dd..969e3431 100644
--- a/packages/runtimes/go.mod
+++ b/packages/runtimes/go.mod
@@ -8,6 +8,6 @@ module github.com/ai-dev-control-plane/runtimes
 go 1.25.11
 
 require (
-	github.com/go-chi/chi/v5 v5.3.0
+	github.com/go-chi/chi/v5 v5.3.2
 	golang.org/x/sys v0.46.0
 )
diff --git a/packages/runtimes/go.sum b/packages/runtimes/go.sum
index 6197dcde..3e697da3 100644
--- a/packages/runtimes/go.sum
+++ b/packages/runtimes/go.sum
@@ -1,4 +1,4 @@
-github.com/go-chi/chi/v5 v5.3.0 h1:halUjDxhshgXHMrao5bB8eNBXo/rnzwr8m5m36glehM=
-github.com/go-chi/chi/v5 v5.3.0/go.mod h1:R+tYY2hNuVUUjxoPtqUdgBqevM9s9njzkTLutVsOCto=
+github.com/go-chi/chi/v5 v5.3.2 h1:5YQkICvTCSZ25hoRsyJazN0scjzKGiu4VAUc7H1o1nY=
+github.com/go-chi/chi/v5 v5.3.2/go.mod h1:R+tYY2hNuVUUjxoPtqUdgBqevM9s9njzkTLutVsOCto=
 golang.org/x/sys v0.46.0 h1:noSf2Fq6F8DBgS+LysIkx7rIExoNHJsxOAtPp4rthXw=
 golang.org/x/sys v0.46.0/go.mod h1:4GL1E5IUh+htKOUEOaiffhrAeqysfVGipDYzABqnCmw=