diff --git a/CHANGE.md b/CHANGE.md
index 3e98079..eefe351 100644
--- a/CHANGE.md
+++ b/CHANGE.md
@@ -4,6 +4,9 @@ All notable changes to this project will be documented in this file.
 
 ## [unreleased]
 
+* update pgstac to 0.9.9
+* update eoapi-cdk version to `10.4.2`
+
 ## [0.3.2] - 2025-10-30
 
 * enable SnapStart on lambda functions 
diff --git a/docker-compose.yml b/docker-compose.yml
index ff62769..dc15221 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -144,7 +144,7 @@ services:
       - ./dockerfiles/scripts:/tmp/scripts
 
   database:
-    image: ghcr.io/stac-utils/pgstac:v0.9.8
+    image: ghcr.io/stac-utils/pgstac:v0.9.9
     environment:
       - POSTGRES_USER=username
       - POSTGRES_PASSWORD=password
diff --git a/infrastructure/app.py b/infrastructure/app.py
index f9e0890..8f1f9fe 100644
--- a/infrastructure/app.py
+++ b/infrastructure/app.py
@@ -127,7 +127,7 @@ def __init__(
                 "context": True,
                 "mosaic_index": True,
             },
-            pgstac_version="0.9.8",
+            pgstac_version="0.9.9",
         )
 
         # allow connections from any ipv4 to pgbouncer instance security group
diff --git a/pyproject.toml b/pyproject.toml
index 6f903be..bf5bbb2 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -9,7 +9,7 @@ dependencies = []
 [dependency-groups]
 deploy = [
     "boto3==1.24.15",
-    "eoapi-cdk==10.3.0",
+    "eoapi-cdk==10.4.2",
     "pydantic-settings[yaml]==2.2.1",
     "pydantic==2.7",
     "typing-extensions>=4.12.2",
@@ -18,7 +18,7 @@ dev = [
     "httpx>=0.28.1",
     "pre-commit>=4.1.0",
     "psycopg[pool]>=3.2.4",
-    "pypgstac==0.9.8",
+    "pypgstac==0.9.9",
     "pytest>=8.3.4",
     "bump-my-version"
 ]
diff --git a/uv.lock b/uv.lock
index 27752bd..f4c3c7e 100644
--- a/uv.lock
+++ b/uv.lock
@@ -252,7 +252,7 @@ wheels = [
 
 [[package]]
 name = "eoapi-devseed"
-version = "0.3.1"
+version = "0.3.2"
 source = { virtual = "." }
 
 [package.dev-dependencies]
@@ -291,7 +291,7 @@ dev = [
     { name = "httpx", specifier = ">=0.28.1" },
     { name = "pre-commit", specifier = ">=4.1.0" },
     { name = "psycopg", extras = ["pool"], specifier = ">=3.2.4" },
-    { name = "pypgstac", specifier = "==0.9.8" },
+    { name = "pypgstac", specifier = "==0.9.9" },
     { name = "pytest", specifier = ">=8.3.4" },
 ]
 load = [
@@ -735,7 +735,7 @@ wheels = [
 
 [[package]]
 name = "pypgstac"
-version = "0.9.8"
+version = "0.9.9"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
     { name = "cachetools" },
@@ -749,9 +749,9 @@ dependencies = [
     { name = "tenacity" },
     { name = "version-parser" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/37/dd/a6f115bf82148b844e4c6deafa093fb8b4484d6e29b4fada2003b125f7de/pypgstac-0.9.8.tar.gz", hash = "sha256:173fef7af4f069effa00478ae5578cd311fc8f990683a32b95f6b12f485ceeff", size = 1476341, upload-time = "2025-08-04T21:17:42.801Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/30/f3/3450e6c7f25a4010265acc983ab501ff1bdb301adbe958082be393b13449/pypgstac-0.9.9.tar.gz", hash = "sha256:d8977f4f2a2e6dfed1e5c3898cf92deb1fdae3dd48aa510371bbf2d1c1a309b3", size = 1508277, upload-time = "2026-01-22T22:16:01.375Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/67/d1/32f1f533a8345110d090c688d3b4c08f7272b9a9e283e63fdac47d57adb9/pypgstac-0.9.8-py3-none-any.whl", hash = "sha256:b2ff10ee81924d7919761d8e6437f69d101d4f0386037a0e6f65a5e30506245c", size = 1642158, upload-time = "2025-08-04T21:17:40.916Z" },
+    { url = "https://files.pythonhosted.org/packages/99/15/fb88b47dd632a0849707c58c853d03753c5db0d9809ef859e0dd6d0ae054/pypgstac-0.9.9-py3-none-any.whl", hash = "sha256:739f77675f32d350b37d7afe791d285b7bf8b90f5265ad2907b27e9b1f560e22", size = 1678051, upload-time = "2026-01-22T22:15:59.651Z" },
 ]
 
 [[package]]