diff --git a/llama-kotlin/pom.xml b/llama-kotlin/pom.xml
index 0fabe65eb..b2d54d666 100644
--- a/llama-kotlin/pom.xml
+++ b/llama-kotlin/pom.xml
@@ -61,7 +61,7 @@ SPDX-License-Identifier: MIT
 		     read metadata at most one minor version ahead of their own compiler, so
 		     compiling with 2.2.x keeps this artifact consumable from Kotlin 2.1+
 		     projects (typical Android Studio installs) instead of forcing 2.2+. -->
-		<kotlin.version>2.4.0</kotlin.version>
+		<kotlin.version>2.4.10</kotlin.version>
 		<kotlinx.coroutines.version>1.11.0</kotlinx.coroutines.version>
 		<junit.version>6.1.2</junit.version>
 		<hamcrest.version>3.0</hamcrest.version>
diff --git a/llama/pom.xml b/llama/pom.xml
index a8363b9e5..9f43a7380 100644
--- a/llama/pom.xml
+++ b/llama/pom.xml
@@ -82,11 +82,11 @@ SPDX-License-Identifier: MIT
 		     section "jqwik prompt-injection in test output" for full context. -->
 		<jqwik.version>1.9.3</jqwik.version>
 		<archunit.version>1.4.2</archunit.version>
-		<spotbugs.version>4.10.2.0</spotbugs.version>
+		<spotbugs.version>4.10.3.0</spotbugs.version>
 		<fb-contrib.version>7.7.4</fb-contrib.version>
 		<findsecbugs.version>1.14.0</findsecbugs.version>
 		<spotless.version>3.8.0</spotless.version>
-		<palantir-java-format.version>2.94.0</palantir-java-format.version>
+		<palantir-java-format.version>2.96.0</palantir-java-format.version>
 		<project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
 		<project.build.outputTimestamp>2026-07-07T07:32:17Z</project.build.outputTimestamp>
 	</properties>