diff --git a/pyproject.toml b/pyproject.toml
index 52336d88..64f0cdee 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -10,7 +10,7 @@ requires-python = ">=3.10"
 readme = "README.md"
 license = "AGPL-3.0-or-later"
 dependencies = [
-    "bibtexparser==2.0.0",
+    "bibtexparser==2.0.1",
     "pylatexenc==2.11",
     "requests>=2.32.0",
     "rapidfuzz>=3.0.0",
diff --git a/requirements-build.in b/requirements-build.in
index 8879d2f4..edeb859d 100644
--- a/requirements-build.in
+++ b/requirements-build.in
@@ -1,4 +1,4 @@
 # CI build backend input. Keep its minimum aligned with pyproject.toml.
 setuptools>=77.0
 # CI uses this exact compiler to verify all generated locks.
-uv==0.12.13
+uv==0.12.21
diff --git a/requirements-build.lock b/requirements-build.lock
index 7eb00e1e..50d29652 100644
--- a/requirements-build.lock
+++ b/requirements-build.lock
@@ -4,24 +4,24 @@ setuptools==84.0.0 \
     --hash=sha256:51a52592b3b99e102b609654876bd65f19f999935166d1352678931132b0c670 \
     --hash=sha256:f4695c21257f0d9b537ec2692c941d02ee143b7cc1276941349a546573b2ef73
     # via -r requirements-build.in
-uv==0.12.13 \
-    --hash=sha256:15f368be55e87109391a31c50846e81086b9792ccb43a1731774e961ea0641b7 \
-    --hash=sha256:19264bcb664138bd94f66a39d6d1fe7bc4614f94deea98a995f88d779db0c4ba \
-    --hash=sha256:263700a9b02d12bc8f1322b250f959435c4077fe3c16ff588e68672f3eddbd07 \
-    --hash=sha256:3efae0a910a25e18732f38ac1ef7b02e23f47b7fe67735039921fceff01d518c \
-    --hash=sha256:5312891392eb5b72eaca9b880e85fe3e706a2b11342e59f7a5cf0304d14d5cc5 \
-    --hash=sha256:6e6b9b2464aa917699fd6206932fca89483e45663ce438dac4e5bca5342e9bd0 \
-    --hash=sha256:7aafa9fad6d8a2f0eec5dafdc6279633fb8fd5642c0934d4d73696c4edb9379e \
-    --hash=sha256:80c05ac556fec1504466c4cdcd135eb8f99e358ce3f17da336de696852791551 \
-    --hash=sha256:891aff3e186cd5844102750372304e9ca20edffc50cb39a14cd047ea3416de75 \
-    --hash=sha256:93efdd41ccce008368ba6677ac9f788203b3c95cb2424657c3079b2f1d0022ee \
-    --hash=sha256:959d330f99a653d115b440c28fb2abc3e720ca10e9f0131d97a48bfd5e59b4d2 \
-    --hash=sha256:970ef5e688bce5936172bec9b2c73876fc1996d4e0318a26562310af92b0a75d \
-    --hash=sha256:9ecd65bb4fbae642418ecc2f92d0811143eeaa96fcf96a7f18b74c475a7601c5 \
-    --hash=sha256:ac7f135750b7419283029edb93453b4d41c7d7ff90f9b3860a6e474ddf98f016 \
-    --hash=sha256:ad61c396a57caac8b351429294e44ee52a1ecb1629b95d6898bd7c63ed3c13f3 \
-    --hash=sha256:b9854ef55f665401f95237e1db55162dd9d7a4a46929326e6f52a5388ca57842 \
-    --hash=sha256:b9c703a4aaee1288f33e2ce8b39a0245f432b57bd5d769073756b68e9ca6bafe \
-    --hash=sha256:bc83ca045c140fcc5d010d451def731be1d225c472f7e4d474610f9e8deb88db \
-    --hash=sha256:f86e5f02883c2e7a21bf522f4aa520c20d4f779d9a3368fbd6cdfe4a8f9549b5
+uv==0.12.21 \
+    --hash=sha256:0083454d25479f1cd03547c8c98c235b4af92bd07f0e61c3eae5d1cbb0c1834c \
+    --hash=sha256:14f21c497a85bb19b3158f36a966d8619246548651d82a72fca599fdab0752d0 \
+    --hash=sha256:26aaa1dce3ae90502b2d7aa15577587aa185e5ba13480afd03df6c95dc2bb55b \
+    --hash=sha256:448df56d46151b69c7ae210f24827eddea74c2dba2e37cc069db4385d3e458f6 \
+    --hash=sha256:5a90f4bb6da0880b7fbe770d9d598d6cf0a6672da28c921ce397383b1134e37a \
+    --hash=sha256:618f422e4544049c589f1e61110293da1f26949fbb266a4c2f22a03880d441a9 \
+    --hash=sha256:6bda0425c9e9dab543d43afd329ed0983d31ff687a49ca76508d708b4f35e1ef \
+    --hash=sha256:79dc0c11e7f169f1b32cf6838b6a0d651ba054cc8013e0b2e5fe34392c1d1528 \
+    --hash=sha256:7a0f0f21ce252dc1bf3b2b3634b76b2fa0e3014a6b4bc5d908af408bb83d61e3 \
+    --hash=sha256:8c321dc01220ce5c8dcc938b145762945ecccfb26068aad8163d18a544cc03e4 \
+    --hash=sha256:8c7c3eb32d84c711906dedd09df7379cf4d9f5bb84b8e58a1244ca0a8a1209d4 \
+    --hash=sha256:8e1e2c602e9402b1d739c7278a5008b15a42349b26732c1f919f0d7cc751dda1 \
+    --hash=sha256:9c6fab087f35c8f8c0c79ad4c8a94f6804b983369c2887250fb753a70d8080fd \
+    --hash=sha256:b7db8b4913e6cd34e6aabbe08ff82fbac7c1edae57747ea23118ca460f060d44 \
+    --hash=sha256:d5ce9a01d7123760c8da049a5e1cfb6d341357c09baf06181f618ee4948e9242 \
+    --hash=sha256:d6988f1025a776cf75d9ad2eb2b9bd26cde38cc1a86dab0787433d7185306bba \
+    --hash=sha256:eb4f75e8ed770e1f142e03a134b9507e7f4710c4b2cec385d4bf8c5810a91094 \
+    --hash=sha256:fcd28fd87972f677f0e12d577842deb5d445adf36bcd4cd1ebaaec4c67788d7f \
+    --hash=sha256:ff77ff843bd3fd0920a18558882532a27079c1f465a4d1781648aff176a180cb
     # via -r requirements-build.in
diff --git a/requirements-dev.lock b/requirements-dev.lock
index 37b7ec2e..b714d029 100644
--- a/requirements-dev.lock
+++ b/requirements-dev.lock
@@ -36,9 +36,9 @@ ast-serialize==0.6.0 \
     --hash=sha256:e61580a69faf47e3689795367ed211f2a10fd741478cc0f36a0f128793360aad \
     --hash=sha256:f2ff3baffc3a29c1f15bc9098aa0c09763410262d5e6cef42116f7356c184554
     # via mypy
-bibtexparser==2.0.0 \
-    --hash=sha256:7f1e1d989282836a0ba39caf88ecc8982dfd924a4f49de58167d7effe99768e8 \
-    --hash=sha256:e5e6df506d53e354874240c7f7fbd98a36db4b725e139f30e175f710a72a68b7
+bibtexparser==2.0.1 \
+    --hash=sha256:672a59f4ba431c4e9a6647cc7c42a267b22e257bcd2cfdb661863f3756c9ab14 \
+    --hash=sha256:aa263e252f4340c0fc50f9f7e5d63a9799b31b01a5aa460a261db3f2a01c6c38
     # via citeforge (pyproject.toml)
 certifi==2026.6.17 \
     --hash=sha256:024c88eeec92ca068db80f02b8b07c9cef7b9fe261d1d535abfd5abd6f6af432 \
diff --git a/requirements.lock b/requirements.lock
index 2296d0e1..03b96fec 100644
--- a/requirements.lock
+++ b/requirements.lock
@@ -1,8 +1,8 @@
 # This file was autogenerated by uv via the following command:
 #    uv pip compile pyproject.toml --universal --python-version 3.10 --generate-hashes -o requirements.lock
-bibtexparser==2.0.0 \
-    --hash=sha256:7f1e1d989282836a0ba39caf88ecc8982dfd924a4f49de58167d7effe99768e8 \
-    --hash=sha256:e5e6df506d53e354874240c7f7fbd98a36db4b725e139f30e175f710a72a68b7
+bibtexparser==2.0.1 \
+    --hash=sha256:672a59f4ba431c4e9a6647cc7c42a267b22e257bcd2cfdb661863f3756c9ab14 \
+    --hash=sha256:aa263e252f4340c0fc50f9f7e5d63a9799b31b01a5aa460a261db3f2a01c6c38
     # via citeforge (pyproject.toml)
 certifi==2026.6.17 \
     --hash=sha256:024c88eeec92ca068db80f02b8b07c9cef7b9fe261d1d535abfd5abd6f6af432 \