diff --git a/poetry.lock b/poetry.lock
index 00351a8..74efaa4 100644
--- a/poetry.lock
+++ b/poetry.lock
@@ -1,4 +1,4 @@
-# This file is automatically @generated by Poetry 2.3.4 and should not be changed by hand.
+# This file is automatically @generated by Poetry 2.2.1 and should not be changed by hand.
 
 [[package]]
 name = "annotated-doc"
@@ -1141,7 +1141,7 @@ files = [
 
 [package.dependencies]
 attrs = ">=22.2.0"
-jsonschema-specifications = ">=2023.3.6"
+jsonschema-specifications = ">=2023.03.6"
 referencing = ">=0.28.4"
 rpds-py = ">=0.7.1"
 
@@ -1965,14 +1965,14 @@ cli = ["click (>=5.0)"]
 
 [[package]]
 name = "python-multipart"
-version = "0.0.26"
+version = "0.0.27"
 description = "A streaming multipart parser for Python"
 optional = false
 python-versions = ">=3.10"
 groups = ["main"]
 files = [
-    {file = "python_multipart-0.0.26-py3-none-any.whl", hash = "sha256:c0b169f8c4484c13b0dcf2ef0ec3a4adb255c4b7d18d8e420477d2b1dd03f185"},
-    {file = "python_multipart-0.0.26.tar.gz", hash = "sha256:08fadc45918cd615e26846437f50c5d6d23304da32c341f289a617127b081f17"},
+    {file = "python_multipart-0.0.27-py3-none-any.whl", hash = "sha256:6fccfad17a27334bd0193681b369f476eda3409f17381a2d65aa7df3f7275645"},
+    {file = "python_multipart-0.0.27.tar.gz", hash = "sha256:9870a6a8c5a20a5bf4f07c017bd1489006ff8836cff097b6933355ee2b49b602"},
 ]
 
 [[package]]
@@ -3231,4 +3231,4 @@ type = ["pytest-mypy"]
 [metadata]
 lock-version = "2.1"
 python-versions = "^3.10"
-content-hash = "112737efd18143f23f312d1d1b96f010d27b6607abd9301d4ae936ded5edbe15"
+content-hash = "31705caa79e990a76174ecf46d8260accd6b408af8762901f9efa0f5ff75bd34"
diff --git a/pyproject.toml b/pyproject.toml
index 794018b..e76b6b2 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -18,7 +18,7 @@ pydantic = "^2.10.0"
 python-dotenv = "^1.2.2"
 httpx = "^0.27.2"
 sse-starlette = "^2.1.3"
-python-multipart = "^0.0.26"
+python-multipart = ">=0.0.26,<0.0.28"
 # Pin the SDK exactly. Bump deliberately and regenerate poetry.lock in the
 # same commit so Docker builds stay reproducible. 2.9.0 bump from 0.1.18 to
 # 0.1.65 to pull in 47 patch releases worth of CLI fixes aimed at the