diff --git a/pyproject.toml b/pyproject.toml
index 70be66485280..0ba77ae3b122 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -144,7 +144,7 @@ solr = ["sqlalchemy-solr >= 0.2.0"]
 elasticsearch = ["elasticsearch-dbapi>=0.2.9, <0.3.0"]
 exasol = ["sqlalchemy-exasol >= 2.4.0, <3.0"]
 excel = ["xlrd>=1.2.0, <1.3"]
-fastmcp = ["fastmcp>=2.14.0"]
+fastmcp = ["fastmcp==2.14.3"]
 firebird = ["sqlalchemy-firebird>=0.7.0, <0.8"]
 firebolt = ["firebolt-sqlalchemy>=1.0.0, <2"]
 gevent = ["gevent>=23.9.1"]
diff --git a/requirements/base.txt b/requirements/base.txt
index ccd616b5a8a1..9cf9e3c16f59 100644
--- a/requirements/base.txt
+++ b/requirements/base.txt
@@ -458,6 +458,7 @@ werkzeug==3.1.3
     #   -r requirements/base.in
     #   flask
     #   flask-appbuilder
+    #   flask-cors
     #   flask-jwt-extended
     #   flask-login
 wrapt==1.17.2
diff --git a/requirements/development.txt b/requirements/development.txt
index 5cda6d12b130..300c2df55600 100644
--- a/requirements/development.txt
+++ b/requirements/development.txt
@@ -233,7 +233,7 @@ exceptiongroup==1.3.0
     # via fastmcp
 fakeredis==2.32.1
     # via pydocket
-fastmcp==2.14.0
+fastmcp==2.14.3
     # via apache-superset
 filelock==3.12.2
     # via virtualenv
@@ -591,17 +591,7 @@ openpyxl==3.1.5
     #   -c requirements/base-constraint.txt
     #   pandas
 opentelemetry-api==1.39.1
-    # via
-    #   opentelemetry-exporter-prometheus
-    #   opentelemetry-sdk
-    #   opentelemetry-semantic-conventions
-    #   pydocket
-opentelemetry-exporter-prometheus==0.60b1
     # via pydocket
-opentelemetry-sdk==1.39.1
-    # via opentelemetry-exporter-prometheus
-opentelemetry-semantic-conventions==0.60b1
-    # via opentelemetry-sdk
 ordered-set==4.1.0
     # via
     #   -c requirements/base-constraint.txt
@@ -690,9 +680,7 @@ prison==0.2.1
 progress==1.6
     # via apache-superset
 prometheus-client==0.23.1
-    # via
-    #   opentelemetry-exporter-prometheus
-    #   pydocket
+    # via pydocket
 prompt-toolkit==3.0.51
     # via
     #   -c requirements/base-constraint.txt
@@ -758,7 +746,7 @@ pydantic-settings==2.10.1
     # via mcp
 pydata-google-auth==1.9.0
     # via pandas-gbq
-pydocket==0.15.4
+pydocket==0.17.1
     # via fastmcp
 pydruid==0.6.9
     # via apache-superset
@@ -1045,8 +1033,6 @@ typing-extensions==4.15.0
     #   limits
     #   mcp
     #   opentelemetry-api
-    #   opentelemetry-sdk
-    #   opentelemetry-semantic-conventions
     #   py-key-value-shared
     #   pydantic
     #   pydantic-core
@@ -1114,6 +1100,7 @@ werkzeug==3.1.3
     #   -c requirements/base-constraint.txt
     #   flask
     #   flask-appbuilder
+    #   flask-cors
     #   flask-jwt-extended
     #   flask-login
 wrapt==1.17.2
diff --git a/tests/integration_tests/security_tests.py b/tests/integration_tests/security_tests.py
index f58566ceb299..c7bc6a8e862b 100644
--- a/tests/integration_tests/security_tests.py
+++ b/tests/integration_tests/security_tests.py
@@ -550,7 +550,8 @@ def test_after_update_database__perm_datasource_access(self):
                 call(ANY, ANY, tmp_db1_view_menu),
                 call(ANY, ANY, table1_view_menu),
                 call(ANY, ANY, table2_view_menu),
-            ]
+            ],
+            any_order=True,
         )
 
         db.session.delete(slice1)