diff --git a/agents/grantforge-agent-hdfs-2.10/pom.xml b/agents/grantforge-agent-hdfs-2.10/pom.xml
index d3b7ebda..da6ca842 100644
--- a/agents/grantforge-agent-hdfs-2.10/pom.xml
+++ b/agents/grantforge-agent-hdfs-2.10/pom.xml
@@ -75,7 +75,7 @@
         <dependency>
             <groupId>commons-logging</groupId>
             <artifactId>commons-logging</artifactId>
-            <version>1.3.6</version>
+            <version>1.4.0</version>
             <scope>test</scope>
         </dependency>
         <dependency>
@@ -112,7 +112,7 @@
         <dependency>
             <groupId>commons-cli</groupId>
             <artifactId>commons-cli</artifactId>
-            <version>1.9.0</version>
+            <version>1.11.0</version>
             <scope>test</scope>
             <exclusions>
                 <exclusion>
@@ -184,7 +184,7 @@
         <dependency>
             <groupId>org.codehaus.woodstox</groupId>
             <artifactId>stax2-api</artifactId>
-            <version>4.2.2</version>
+            <version>4.3.2</version>
             <scope>test</scope>
             <exclusions>
                 <exclusion>
@@ -225,7 +225,7 @@
             <plugin>
                 <groupId>org.codehaus.mojo</groupId>
                 <artifactId>build-helper-maven-plugin</artifactId>
-                <version>3.6.1</version>
+                <version>3.6.2</version>
                 <executions>
                     <execution>
                         <id>shared-container-tests</id>
@@ -289,7 +289,7 @@
             <plugin>
                 <groupId>org.apache.maven.plugins</groupId>
                 <artifactId>maven-shade-plugin</artifactId>
-                <version>3.6.1</version>
+                <version>3.6.2</version>
                 <executions>
                     <execution>
                         <phase>package</phase>
diff --git a/agents/grantforge-agent-hdfs-2.7/pom.xml b/agents/grantforge-agent-hdfs-2.7/pom.xml
index 2e1f5e43..cc0a82c4 100644
--- a/agents/grantforge-agent-hdfs-2.7/pom.xml
+++ b/agents/grantforge-agent-hdfs-2.7/pom.xml
@@ -75,7 +75,7 @@
         <dependency>
             <groupId>commons-logging</groupId>
             <artifactId>commons-logging</artifactId>
-            <version>1.3.6</version>
+            <version>1.4.0</version>
             <scope>test</scope>
         </dependency>
         <dependency>
@@ -100,7 +100,7 @@
         <dependency>
             <groupId>commons-cli</groupId>
             <artifactId>commons-cli</artifactId>
-            <version>1.9.0</version>
+            <version>1.11.0</version>
             <scope>test</scope>
             <exclusions>
                 <exclusion>
@@ -189,7 +189,7 @@
             <plugin>
                 <groupId>org.codehaus.mojo</groupId>
                 <artifactId>build-helper-maven-plugin</artifactId>
-                <version>3.6.1</version>
+                <version>3.6.2</version>
                 <executions>
                     <execution>
                         <id>shared-container-tests</id>
@@ -253,7 +253,7 @@
             <plugin>
                 <groupId>org.apache.maven.plugins</groupId>
                 <artifactId>maven-shade-plugin</artifactId>
-                <version>3.6.1</version>
+                <version>3.6.2</version>
                 <executions>
                     <execution>
                         <phase>package</phase>
diff --git a/agents/grantforge-agent-hdfs-3.2/pom.xml b/agents/grantforge-agent-hdfs-3.2/pom.xml
index 295a292e..751bf138 100644
--- a/agents/grantforge-agent-hdfs-3.2/pom.xml
+++ b/agents/grantforge-agent-hdfs-3.2/pom.xml
@@ -87,7 +87,7 @@
         <dependency>
             <groupId>commons-logging</groupId>
             <artifactId>commons-logging</artifactId>
-            <version>1.3.6</version>
+            <version>1.4.0</version>
             <scope>test</scope>
         </dependency>
         <dependency>
@@ -112,7 +112,7 @@
         <dependency>
             <groupId>commons-cli</groupId>
             <artifactId>commons-cli</artifactId>
-            <version>1.9.0</version>
+            <version>1.11.0</version>
             <scope>test</scope>
             <exclusions>
                 <exclusion>
@@ -160,7 +160,7 @@
         <dependency>
             <groupId>org.apache.commons</groupId>
             <artifactId>commons-text</artifactId>
-            <version>1.14.0</version>
+            <version>1.15.0</version>
             <scope>test</scope>
             <exclusions>
                 <exclusion>
@@ -208,7 +208,7 @@
         <dependency>
             <groupId>org.codehaus.woodstox</groupId>
             <artifactId>stax2-api</artifactId>
-            <version>4.2.2</version>
+            <version>4.3.2</version>
             <scope>test</scope>
             <exclusions>
                 <exclusion>
@@ -249,7 +249,7 @@
             <plugin>
                 <groupId>org.codehaus.mojo</groupId>
                 <artifactId>build-helper-maven-plugin</artifactId>
-                <version>3.6.1</version>
+                <version>3.6.2</version>
                 <executions>
                     <execution>
                         <id>shared-container-tests</id>
@@ -313,7 +313,7 @@
             <plugin>
                 <groupId>org.apache.maven.plugins</groupId>
                 <artifactId>maven-shade-plugin</artifactId>
-                <version>3.6.1</version>
+                <version>3.6.2</version>
                 <executions>
                     <execution>
                         <phase>package</phase>
diff --git a/agents/grantforge-agent-hdfs-3.3/pom.xml b/agents/grantforge-agent-hdfs-3.3/pom.xml
index cdfe914a..ded34e0d 100644
--- a/agents/grantforge-agent-hdfs-3.3/pom.xml
+++ b/agents/grantforge-agent-hdfs-3.3/pom.xml
@@ -87,7 +87,7 @@
         <dependency>
             <groupId>commons-logging</groupId>
             <artifactId>commons-logging</artifactId>
-            <version>1.3.6</version>
+            <version>1.4.0</version>
             <scope>test</scope>
         </dependency>
         <dependency>
@@ -112,7 +112,7 @@
         <dependency>
             <groupId>commons-cli</groupId>
             <artifactId>commons-cli</artifactId>
-            <version>1.9.0</version>
+            <version>1.11.0</version>
             <scope>test</scope>
             <exclusions>
                 <exclusion>
@@ -160,7 +160,7 @@
         <dependency>
             <groupId>org.apache.commons</groupId>
             <artifactId>commons-text</artifactId>
-            <version>1.14.0</version>
+            <version>1.15.0</version>
             <scope>test</scope>
             <exclusions>
                 <exclusion>
@@ -172,7 +172,7 @@
         <dependency>
             <groupId>org.apache.hadoop.thirdparty</groupId>
             <artifactId>hadoop-shaded-guava</artifactId>
-            <version>1.1.1</version>
+            <version>1.5.0</version>
             <scope>test</scope>
             <exclusions>
                 <exclusion>
@@ -220,7 +220,7 @@
         <dependency>
             <groupId>org.codehaus.woodstox</groupId>
             <artifactId>stax2-api</artifactId>
-            <version>4.2.2</version>
+            <version>4.3.2</version>
             <scope>test</scope>
             <exclusions>
                 <exclusion>
@@ -261,7 +261,7 @@
             <plugin>
                 <groupId>org.codehaus.mojo</groupId>
                 <artifactId>build-helper-maven-plugin</artifactId>
-                <version>3.6.1</version>
+                <version>3.6.2</version>
                 <executions>
                     <execution>
                         <id>shared-container-tests</id>
@@ -325,7 +325,7 @@
             <plugin>
                 <groupId>org.apache.maven.plugins</groupId>
                 <artifactId>maven-shade-plugin</artifactId>
-                <version>3.6.1</version>
+                <version>3.6.2</version>
                 <executions>
                     <execution>
                         <phase>package</phase>
diff --git a/agents/grantforge-agent-hdfs-3.4/pom.xml b/agents/grantforge-agent-hdfs-3.4/pom.xml
index cbfdb5e4..9d883705 100644
--- a/agents/grantforge-agent-hdfs-3.4/pom.xml
+++ b/agents/grantforge-agent-hdfs-3.4/pom.xml
@@ -87,7 +87,7 @@
         <dependency>
             <groupId>commons-logging</groupId>
             <artifactId>commons-logging</artifactId>
-            <version>1.3.6</version>
+            <version>1.4.0</version>
             <scope>test</scope>
         </dependency>
         <dependency>
@@ -112,7 +112,7 @@
         <dependency>
             <groupId>commons-cli</groupId>
             <artifactId>commons-cli</artifactId>
-            <version>1.9.0</version>
+            <version>1.11.0</version>
             <scope>test</scope>
             <exclusions>
                 <exclusion>
@@ -160,7 +160,7 @@
         <dependency>
             <groupId>org.apache.commons</groupId>
             <artifactId>commons-text</artifactId>
-            <version>1.14.0</version>
+            <version>1.15.0</version>
             <scope>test</scope>
             <exclusions>
                 <exclusion>
@@ -220,7 +220,7 @@
         <dependency>
             <groupId>org.codehaus.woodstox</groupId>
             <artifactId>stax2-api</artifactId>
-            <version>4.2.2</version>
+            <version>4.3.2</version>
             <scope>test</scope>
             <exclusions>
                 <exclusion>
@@ -232,7 +232,7 @@
         <dependency>
             <groupId>org.apache.commons</groupId>
             <artifactId>commons-collections4</artifactId>
-            <version>4.4</version>
+            <version>4.6.0</version>
             <scope>test</scope>
             <exclusions>
                 <exclusion>
@@ -273,7 +273,7 @@
             <plugin>
                 <groupId>org.codehaus.mojo</groupId>
                 <artifactId>build-helper-maven-plugin</artifactId>
-                <version>3.6.1</version>
+                <version>3.6.2</version>
                 <executions>
                     <execution>
                         <id>shared-container-tests</id>
@@ -337,7 +337,7 @@
             <plugin>
                 <groupId>org.apache.maven.plugins</groupId>
                 <artifactId>maven-shade-plugin</artifactId>
-                <version>3.6.1</version>
+                <version>3.6.2</version>
                 <executions>
                     <execution>
                         <phase>package</phase>
diff --git a/agents/grantforge-agent-hdfs-3.5/pom.xml b/agents/grantforge-agent-hdfs-3.5/pom.xml
index c7d2894f..ce53684e 100644
--- a/agents/grantforge-agent-hdfs-3.5/pom.xml
+++ b/agents/grantforge-agent-hdfs-3.5/pom.xml
@@ -87,7 +87,7 @@
         <dependency>
             <groupId>commons-logging</groupId>
             <artifactId>commons-logging</artifactId>
-            <version>1.3.6</version>
+            <version>1.4.0</version>
             <scope>test</scope>
         </dependency>
         <dependency>
@@ -112,7 +112,7 @@
         <dependency>
             <groupId>commons-cli</groupId>
             <artifactId>commons-cli</artifactId>
-            <version>1.9.0</version>
+            <version>1.11.0</version>
             <scope>test</scope>
             <exclusions>
                 <exclusion>
@@ -160,7 +160,7 @@
         <dependency>
             <groupId>org.apache.commons</groupId>
             <artifactId>commons-text</artifactId>
-            <version>1.14.0</version>
+            <version>1.15.0</version>
             <scope>test</scope>
             <exclusions>
                 <exclusion>
@@ -220,7 +220,7 @@
         <dependency>
             <groupId>org.codehaus.woodstox</groupId>
             <artifactId>stax2-api</artifactId>
-            <version>4.2.2</version>
+            <version>4.3.2</version>
             <scope>test</scope>
             <exclusions>
                 <exclusion>
@@ -232,7 +232,7 @@
         <dependency>
             <groupId>org.apache.commons</groupId>
             <artifactId>commons-collections4</artifactId>
-            <version>4.4</version>
+            <version>4.6.0</version>
             <scope>test</scope>
             <exclusions>
                 <exclusion>
@@ -273,7 +273,7 @@
             <plugin>
                 <groupId>org.codehaus.mojo</groupId>
                 <artifactId>build-helper-maven-plugin</artifactId>
-                <version>3.6.1</version>
+                <version>3.6.2</version>
                 <executions>
                     <execution>
                         <id>shared-container-tests</id>
@@ -337,7 +337,7 @@
             <plugin>
                 <groupId>org.apache.maven.plugins</groupId>
                 <artifactId>maven-shade-plugin</artifactId>
-                <version>3.6.1</version>
+                <version>3.6.2</version>
                 <executions>
                     <execution>
                         <phase>package</phase>
diff --git a/agents/grantforge-agent-hdfs-native/pom.xml b/agents/grantforge-agent-hdfs-native/pom.xml
index e384a199..af49b7f4 100644
--- a/agents/grantforge-agent-hdfs-native/pom.xml
+++ b/agents/grantforge-agent-hdfs-native/pom.xml
@@ -62,7 +62,7 @@
         <dependency>
             <groupId>commons-logging</groupId>
             <artifactId>commons-logging</artifactId>
-            <version>1.3.6</version>
+            <version>1.4.0</version>
             <scope>test</scope>
         </dependency>
         <dependency>
@@ -75,7 +75,7 @@
         <dependency>
             <groupId>commons-io</groupId>
             <artifactId>commons-io</artifactId>
-            <version>2.21.0</version>
+            <version>2.22.0</version>
             <scope>test</scope>
         </dependency>
         <dependency>
@@ -93,7 +93,7 @@
         <dependency>
             <groupId>commons-cli</groupId>
             <artifactId>commons-cli</artifactId>
-            <version>1.9.0</version>
+            <version>1.11.0</version>
             <scope>test</scope>
             <exclusions>
                 <exclusion>
diff --git a/agents/grantforge-agent-hive/pom.xml b/agents/grantforge-agent-hive/pom.xml
index 819fba02..32c1b789 100644
--- a/agents/grantforge-agent-hive/pom.xml
+++ b/agents/grantforge-agent-hive/pom.xml
@@ -97,7 +97,7 @@
         <dependency>
             <groupId>org.codehaus.woodstox</groupId>
             <artifactId>stax2-api</artifactId>
-            <version>4.2.2</version>
+            <version>4.3.2</version>
             <scope>test</scope>
             <exclusions>
                 <exclusion>
@@ -109,7 +109,7 @@
         <dependency>
             <groupId>org.apache.commons</groupId>
             <artifactId>commons-collections4</artifactId>
-            <version>4.5.0</version>
+            <version>4.6.0</version>
             <scope>test</scope>
             <exclusions>
                 <exclusion>
@@ -133,7 +133,7 @@
         <dependency>
             <groupId>commons-logging</groupId>
             <artifactId>commons-logging</artifactId>
-            <version>1.3.6</version>
+            <version>1.4.0</version>
             <scope>test</scope>
             <exclusions>
                 <exclusion>
@@ -181,7 +181,7 @@
         <dependency>
             <groupId>org.apache.commons</groupId>
             <artifactId>commons-text</artifactId>
-            <version>1.14.0</version>
+            <version>1.15.0</version>
             <scope>test</scope>
             <exclusions>
                 <exclusion>
@@ -240,7 +240,7 @@
                                 <artifactItem>
                                     <groupId>org.apache.hive</groupId>
                                     <artifactId>hive-jdbc</artifactId>
-                                    <version>4.0.1</version>
+                                    <version>4.2.1</version>
                                     <classifier>standalone</classifier>
                                     <type>jar</type>
                                     <outputDirectory>${project.build.directory}/hive-jdbc</outputDirectory>
@@ -276,7 +276,7 @@
             <plugin>
                 <groupId>org.apache.maven.plugins</groupId>
                 <artifactId>maven-shade-plugin</artifactId>
-                <version>3.6.1</version>
+                <version>3.6.2</version>
                 <executions>
                     <execution>
                         <phase>package</phase>
diff --git a/agents/grantforge-agent-mysql/pom.xml b/agents/grantforge-agent-mysql/pom.xml
index 5cd360b8..6d074709 100644
--- a/agents/grantforge-agent-mysql/pom.xml
+++ b/agents/grantforge-agent-mysql/pom.xml
@@ -161,7 +161,7 @@
             <plugin>
                 <groupId>org.apache.maven.plugins</groupId>
                 <artifactId>maven-shade-plugin</artifactId>
-                <version>3.6.1</version>
+                <version>3.6.2</version>
                 <executions>
                     <execution>
                         <phase>package</phase>
diff --git a/agents/grantforge-agent-zookeeper/pom.xml b/agents/grantforge-agent-zookeeper/pom.xml
index 8d17a836..9f4164c1 100644
--- a/agents/grantforge-agent-zookeeper/pom.xml
+++ b/agents/grantforge-agent-zookeeper/pom.xml
@@ -30,7 +30,7 @@
         <maven.compiler.testRelease>17</maven.compiler.testRelease>
         <argLine />
         <!-- The oldest line with ServerAuthenticationProvider, whose API 3.7, 3.8 and 3.9 keep; -D to test another line. -->
-        <zookeeper.agent.version>3.6.4</zookeeper.agent.version>
+        <zookeeper.agent.version>3.9.6</zookeeper.agent.version>
     </properties>
 
     <dependencies>
@@ -79,7 +79,7 @@
         <dependency>
             <groupId>io.dropwizard.metrics</groupId>
             <artifactId>metrics-core</artifactId>
-            <version>4.1.12.1</version>
+            <version>4.2.40</version>
             <scope>test</scope>
         </dependency>
         <dependency>
@@ -136,7 +136,7 @@
             <plugin>
                 <groupId>org.apache.maven.plugins</groupId>
                 <artifactId>maven-shade-plugin</artifactId>
-                <version>3.6.1</version>
+                <version>3.6.2</version>
                 <executions>
                     <execution>
                         <phase>package</phase>
diff --git a/core/grantforge-plugin-host/pom.xml b/core/grantforge-plugin-host/pom.xml
index 78eca56d..3225acca 100644
--- a/core/grantforge-plugin-host/pom.xml
+++ b/core/grantforge-plugin-host/pom.xml
@@ -103,7 +103,7 @@
         <dependency>
             <groupId>io.dropwizard.metrics</groupId>
             <artifactId>metrics-core</artifactId>
-            <version>4.1.12.1</version>
+            <version>4.2.40</version>
             <scope>test</scope>
         </dependency>
         <dependency>
diff --git a/plugins/grantforge-plugin-hdfs/pom.xml b/plugins/grantforge-plugin-hdfs/pom.xml
index 49dce8bf..65a9060c 100644
--- a/plugins/grantforge-plugin-hdfs/pom.xml
+++ b/plugins/grantforge-plugin-hdfs/pom.xml
@@ -94,7 +94,7 @@
             <plugin>
                 <groupId>org.codehaus.mojo</groupId>
                 <artifactId>build-helper-maven-plugin</artifactId>
-                <version>3.6.1</version>
+                <version>3.6.2</version>
                 <executions>
                     <execution>
                         <id>hadoop-runtime-test-helper</id>
diff --git a/plugins/grantforge-plugin-hive/pom.xml b/plugins/grantforge-plugin-hive/pom.xml
index 107a4ad9..5616807c 100644
--- a/plugins/grantforge-plugin-hive/pom.xml
+++ b/plugins/grantforge-plugin-hive/pom.xml
@@ -29,7 +29,7 @@
     <properties>
         <!-- The last driver line compiled for Java 8 and 17; 4.1 and later need Java 21. Its standalone jar carries the
              Hadoop and Thrift classes it needs, in the plugin's own class loader. -->
-        <hive.jdbc.version>4.0.1</hive.jdbc.version>
+        <hive.jdbc.version>4.2.1</hive.jdbc.version>
         <grantforge.hive.it.skip>${skipITs}</grantforge.hive.it.skip>
     </properties>
 
diff --git a/plugins/grantforge-plugin-zookeeper/pom.xml b/plugins/grantforge-plugin-zookeeper/pom.xml
index c6f2c214..982a3096 100644
--- a/plugins/grantforge-plugin-zookeeper/pom.xml
+++ b/plugins/grantforge-plugin-zookeeper/pom.xml
@@ -30,9 +30,9 @@
         <!-- Still the Netty line ZooKeeper 3.9.5 is released and tested with, rather than the server's newer one: the
              plugin's own class loader keeps them apart. 4.1.137.Final is the first release without the codec and
              handler advisories 4.1.130.Final carries; a newer patch of the same line is fine too. -->
-        <zookeeper.netty.version>4.1.137.Final</zookeeper.netty.version>
+        <zookeeper.netty.version>4.2.19.Final</zookeeper.netty.version>
         <!-- What the embedded server of the tests is released with. -->
-        <zookeeper.dropwizard.version>4.1.12.1</zookeeper.dropwizard.version>
+        <zookeeper.dropwizard.version>4.2.40</zookeeper.dropwizard.version>
         <zookeeper.snappy.version>1.1.10.5</zookeeper.snappy.version>
         <grantforge.zookeeper.it.skip>${skipITs}</grantforge.zookeeper.it.skip>
     </properties>
diff --git a/pom.xml b/pom.xml
index 49b02aca..bc9f14f1 100644
--- a/pom.xml
+++ b/pom.xml
@@ -95,14 +95,14 @@
         <nullaway.version>0.14.2</nullaway.version>
         <archunit.version>1.5.1</archunit.version>
         <!-- Property-based tests of the authorization rules (JUnit Platform engine). -->
-        <jqwik.version>1.9.3</jqwik.version>
+        <jqwik.version>1.10.2</jqwik.version>
         <jmh.version>1.37</jmh.version>
         <springdoc.version>3.1.1</springdoc.version>
         <bouncycastle.version>1.86</bouncycastle.version>
         <!-- The HDFS plugin talks to clusters with Hadoop's own client, shaded so its dependencies stay inside it. -->
         <hdfs.client.version>3.5.0</hdfs.client.version>
         <!-- The ZooKeeper plugin talks to ensembles with ZooKeeper's own client. -->
-        <zookeeper.client.version>3.9.5</zookeeper.client.version>
+        <zookeeper.client.version>3.9.6</zookeeper.client.version>
         <!-- A Kerberos KDC for the HDFS plugin's tests; what Hadoop's own MiniKdc runs on. -->
         <kerby.version>2.1.2</kerby.version>
         <!-- Database for the *IT tests (profile database-it): h2, or <engine>:<version> such as postgres:17. -->
@@ -114,9 +114,9 @@
           jackson-databind 2.21.7 (Jackson 2, used by swagger-core) also fixes GHSA-cxp5-3px4-pw24 / GHSA-wv8q-qhhj-9h54.
           Remove each override once the managed Spring Boot version includes the fix.
         -->
-        <tomcat.patch.version>11.0.26</tomcat.patch.version>
-        <jackson.patch.version>3.1.7</jackson.patch.version>
-        <jackson2.patch.version>2.21.7</jackson2.patch.version>
+        <tomcat.patch.version>11.0.27</tomcat.patch.version>
+        <jackson.patch.version>3.2.3</jackson.patch.version>
+        <jackson2.patch.version>2.22.3</jackson2.patch.version>
         <!--
           Liquibase 5.x is licensed under FSL-1.1 (not OSI open source); 4.33.0 is the last Apache-2.0
           release. Pinned by decision; the weekly OSV scan reports any advisory against it.
@@ -127,14 +127,14 @@
         <plugin.surefire.version>3.6.0</plugin.surefire.version>
         <plugin.enforcer.version>3.6.3</plugin.enforcer.version>
         <plugin.checkstyle.version>3.6.0</plugin.checkstyle.version>
-        <plugin.spotbugs.version>4.10.4.1</plugin.spotbugs.version>
+        <plugin.spotbugs.version>4.10.5.0</plugin.spotbugs.version>
         <plugin.exec.version>3.6.4</plugin.exec.version>
         <plugin.assembly.version>3.8.0</plugin.assembly.version>
-        <plugin.dependency.version>3.7.0</plugin.dependency.version>
+        <plugin.dependency.version>3.11.0</plugin.dependency.version>
         <plugin.jacoco.version>0.8.15</plugin.jacoco.version>
         <plugin.cyclonedx.version>2.9.3</plugin.cyclonedx.version>
         <!-- Publishing the Maven artifacts (profiles release and central, .github/workflows/release.yml). -->
-        <plugin.source.version>3.3.1</plugin.source.version>
+        <plugin.source.version>3.4.0</plugin.source.version>
         <plugin.javadoc.version>3.12.0</plugin.javadoc.version>
         <plugin.gpg.version>3.2.8</plugin.gpg.version>
         <plugin.central.version>0.11.0</plugin.central.version>