diff --git a/cloudplatform/connectivity-ztis/pom.xml b/cloudplatform/connectivity-ztis/pom.xml
index 1c2006f38..f8bd91e02 100644
--- a/cloudplatform/connectivity-ztis/pom.xml
+++ b/cloudplatform/connectivity-ztis/pom.xml
@@ -29,7 +29,7 @@
 		</developer>
 	</developers>
 	<properties>
-		<netty.version>4.1.132.Final</netty.version>
+		<netty.version>4.2.12.Final</netty.version>
 	</properties>
 	<dependencyManagement>
 		<dependencies>
@@ -72,7 +72,7 @@
 		<dependency>
 			<groupId>io.spiffe</groupId>
 			<artifactId>java-spiffe-core</artifactId>
-			<version>0.8.16</version>
+			<version>0.8.17</version>
 			<exclusions>
 				<exclusion>
 					<artifactId>commons-logging</artifactId>
@@ -87,7 +87,7 @@
 		<dependency>
 			<groupId>io.spiffe</groupId>
 			<artifactId>grpc-netty-linux</artifactId>
-			<version>0.8.16</version>
+			<version>0.8.17</version>
 			<scope>runtime</scope>
 		</dependency>
 		<!-- Override grpc versions from spiffe -->
diff --git a/dependency-bundles/bom/pom.xml b/dependency-bundles/bom/pom.xml
index db93b982a..bbc7f4655 100644
--- a/dependency-bundles/bom/pom.xml
+++ b/dependency-bundles/bom/pom.xml
@@ -49,23 +49,23 @@
 		<!-- HTTP stuff -->
 		<httpcore.version>4.4.16</httpcore.version>
 		<httpcore5.version>5.4.2</httpcore5.version>
-		<httpclient5.version>5.6</httpclient5.version>
+		<httpclient5.version>5.6.1</httpclient5.version>
 		<httpcomponents-client.version>4.5.14</httpcomponents-client.version>
 		<jakarta-servlet.version>6.1.0</jakarta-servlet.version>
 		<!-- XSUAA -->
 		<!-- Keep this version consistent with the one from the SAP Java Buildpack (after their 2.0 release) -->
 		<!-- see https://github.wdf.sap.corp/xs2-java/xs-java-buildpack/blob/master/resources/pom.xml -->
-		<scp-cf.xsuaa-client.version>4.0.3</scp-cf.xsuaa-client.version>
+		<scp-cf.xsuaa-client.version>4.0.4</scp-cf.xsuaa-client.version>
 		<java-jwt.version>4.5.1</java-jwt.version>
 		<!-- Utility stuff -->
 		<slf4j.version>2.0.17</slf4j.version>
-		<lombok.version>1.18.44</lombok.version>
+		<lombok.version>1.18.46</lombok.version>
 		<findbugs-jsr305.version>3.0.2</findbugs-jsr305.version>
 		<!-- @Nonnull/@Nullable annotations -->
 		<vavr.version>1.0.1</vavr.version>
 		<guava.version>33.6.0-jre</guava.version>
 		<!-- collection utilities, @Beta annotation -->
-		<commons-io.version>2.21.0</commons-io.version>
+		<commons-io.version>2.22.0</commons-io.version>
 		<!-- Apache file utils for SOAP (deprecated, we do not maintain!) -->
 		<axis2.version>1.7.9</axis2.version>
 		<!--Used in essential modules: cloudplatform-connectivity, connectivity-destination-service, odata-client, odata-core, securitys-->
@@ -76,7 +76,7 @@
 		<jcache.version>1.1.1</jcache.version>
 		<resilience4j.version>2.4.0</resilience4j.version>
 		<!-- JSON & XML stuff -->
-		<gson.version>2.13.2</gson.version>
+		<gson.version>2.14.0</gson.version>
 		<jackson.version>2.21.2</jackson.version>
 		<jackson.annotations.version>2.21</jackson.annotations.version>
 		<owasp-json-sanitizer.version>1.2.3</owasp-json-sanitizer.version>
@@ -285,7 +285,7 @@
 			<dependency>
 				<groupId>com.google.errorprone</groupId>
 				<artifactId>error_prone_annotations</artifactId>
-				<version>2.48.0</version>
+				<version>2.49.0</version>
 			</dependency>
 		</dependencies>
 	</dependencyManagement>
@@ -335,7 +335,7 @@
 								<dependency>
 									<groupId>org.projectlombok</groupId>
 									<artifactId>lombok</artifactId>
-									<version>1.18.44</version>
+									<version>1.18.46</version>
 								</dependency>
 							</dependencies>
 							<configuration>
diff --git a/dependency-bundles/modules-bom/pom.xml b/dependency-bundles/modules-bom/pom.xml
index 403f9aa0f..25a568f4f 100644
--- a/dependency-bundles/modules-bom/pom.xml
+++ b/dependency-bundles/modules-bom/pom.xml
@@ -267,7 +267,7 @@
 								<dependency>
 									<groupId>org.projectlombok</groupId>
 									<artifactId>lombok</artifactId>
-									<version>1.18.44</version>
+									<version>1.18.46</version>
 								</dependency>
 							</dependencies>
 							<configuration>
diff --git a/pom.xml b/pom.xml
index 2008dcd62..ba7de1bdc 100644
--- a/pom.xml
+++ b/pom.xml
@@ -98,7 +98,7 @@
 		<!-- Spring dependencies -->
 		<!-- Keep these versions consistent with the ones from the SAP Java Buildpack (after their 2.0 release) -->
 		<!-- see https://github.wdf.sap.corp/xs2-java/xs-java-buildpack/blob/master/resources/pom.xml -->
-		<spring.version>6.2.17</spring.version>
+		<spring.version>6.2.18</spring.version>
 		<spring-security.version>6.1.5</spring-security.version>
 		<slf4j.version>2.0.17</slf4j.version>
 		<assertj-core.version>3.27.7</assertj-core.version>
@@ -109,16 +109,16 @@
 		<codemodel.version>2.6</codemodel.version>
 		<olingo-v4.version>5.0.0</olingo-v4.version>
 		<olingo-v2.version>2.0.13</olingo-v2.version>
-		<maven-plugin.version>3.9.14</maven-plugin.version>
+		<maven-plugin.version>3.9.15</maven-plugin.version>
 		<maven-plugin-annotations.version>3.15.2</maven-plugin-annotations.version>
 		<maven-plugin-testing.version>3.5.1</maven-plugin-testing.version>
 		<caffeine.version>3.2.3</caffeine.version>
 		<openapi-generator.version>7.21.0</openapi-generator.version>
-		<io-swagger-core-v3.version>2.2.45</io-swagger-core-v3.version>
-		<io-swagger-parser-v3.version>2.1.39</io-swagger-parser-v3.version>
+		<io-swagger-core-v3.version>2.2.48</io-swagger-core-v3.version>
+		<io-swagger-parser-v3.version>2.1.40</io-swagger-parser-v3.version>
 		<io-swagger-core.version>1.6.11</io-swagger-core.version>
 		<!--  sync plexus version with transitive dependency coming from "org.twadata.maven:mojo-executor"  -->
-		<stax2-api.version>4.2.2</stax2-api.version>
+		<stax2-api.version>4.3.0</stax2-api.version>
 		<bouncycastle.version>1.84</bouncycastle.version>
 		<jakarta-activation.version>2.1.0</jakarta-activation.version>
 		<qdox.version>2.2.0</qdox.version>
@@ -126,7 +126,7 @@
 		<checkstyle.version>12.3.1</checkstyle.version>
 		<byte-buddy.version>1.18.8</byte-buddy.version>
 		<snakeyaml.version>2.6</snakeyaml.version>
-		<commons-codec.version>1.21.0</commons-codec.version>
+		<commons-codec.version>1.22.0</commons-codec.version>
 		<commons-beanutils.version>1.11.0</commons-beanutils.version>
 		<findbugs-jsr305.version>3.0.2</findbugs-jsr305.version>
 		<jsr305.optional>true</jsr305.optional>
@@ -976,7 +976,7 @@
 								<dependency>
 									<groupId>org.projectlombok</groupId>
 									<artifactId>lombok</artifactId>
-									<version>1.18.44</version>
+									<version>1.18.46</version>
 								</dependency>
 							</dependencies>
 							<executions>