diff --git a/apps/billcollector/ui/app.py b/apps/billcollector/ui/app.py
index 66f6547..8729077 100644
--- a/apps/billcollector/ui/app.py
+++ b/apps/billcollector/ui/app.py
@@ -88,8 +88,8 @@
 # ``environ['REQUEST_METHOD']`` unconditionally: the unhandled ``KeyError``
 # unwinds through the whole middleware stack (including the auth
 # BaseHTTPMiddleware) and is logged as a 500 "Exception in ASGI
-# application" although no client is left to answer. python-engineio 4.14.0
-# (latest) still ships this, so the workaround is a wrapper, not a pin.
+# application" although no client is left to answer. python-engineio 4.15.0
+# still ships this, so the workaround is a wrapper, not a pin.
 #
 # The wrapper must *send a response* on that path: the mount sits below
 # BaseHTTPMiddleware layers, whose ``call_next`` turns "the wrapped app
diff --git a/doc/BOURSE_DIRECT_ADAPTER.md b/doc/BOURSE_DIRECT_ADAPTER.md
index 74fbce7..45e02b0 100644
--- a/doc/BOURSE_DIRECT_ADAPTER.md
+++ b/doc/BOURSE_DIRECT_ADAPTER.md
@@ -134,7 +134,7 @@ incremental actions use the same task, recipe and history.
 ## Isolated engine proof
 
 Install `apps/requirements.txt` and pytest in an isolated environment. From the
-checkout root, use the browser cache that matches Playwright 1.64.0:
+checkout root, use the browser cache that matches Playwright 1.64.1:
 
 ```sh
 PLAYWRIGHT_BROWSERS_PATH=/path/to/browser-cache \
diff --git a/doc/RECIPE_METHODS.md b/doc/RECIPE_METHODS.md
index 242da3a..eaca8d0 100644
--- a/doc/RECIPE_METHODS.md
+++ b/doc/RECIPE_METHODS.md
@@ -72,7 +72,7 @@ Primitive and collection results can end a chain. Their Python methods
 (for example `str.upper` or `list.pop`) cannot continue a recipe chain.
 
 Therefore the supported Playwright surface is the **public API of the
-pinned Playwright version** (`playwright==1.64.0`, `apps/requirements.txt`)
+pinned Playwright version** (`playwright==1.64.1`, `apps/requirements.txt`)
 reachable through the chain that starts on a `Page`: the public
 methods and properties of `playwright.sync_api.Page`, and of every type
 a chain call can return - `Locator`, `Frame`, `FrameLocator` and
@@ -335,7 +335,7 @@ recipe.
 ## 6. Versioning and change control
 
 - The Playwright surface is pinned by `apps/requirements.txt`
-  (`playwright==1.64.0`); the introspected allowlist is only as valid as
+  (`playwright==1.64.1`); the introspected allowlist is only as valid as
   the pin. A pin bump is a contract change: re-derive the surface and
   re-run the compatibility baseline.
 - Adding a reserved method is a contract change: extend this document,