diff --git a/cloudplatform/connectivity-ztis/pom.xml b/cloudplatform/connectivity-ztis/pom.xml
index 0988e0c0b..09e725ac7 100644
--- a/cloudplatform/connectivity-ztis/pom.xml
+++ b/cloudplatform/connectivity-ztis/pom.xml
@@ -29,7 +29,7 @@
 		</developer>
 	</developers>
 	<properties>
-		<netty.version>4.2.13.Final</netty.version>
+		<netty.version>4.2.15.Final</netty.version>
 	</properties>
 	<dependencyManagement>
 		<dependencies>
diff --git a/dependency-bundles/bom/pom.xml b/dependency-bundles/bom/pom.xml
index ab8304fa7..149379830 100644
--- a/dependency-bundles/bom/pom.xml
+++ b/dependency-bundles/bom/pom.xml
@@ -55,7 +55,7 @@
 		<!-- XSUAA -->
 		<!-- Keep this version consistent with the one from the SAP Java Buildpack (after their 2.0 release) -->
 		<!-- see https://github.wdf.sap.corp/xs2-java/xs-java-buildpack/blob/master/resources/pom.xml -->
-		<scp-cf.xsuaa-client.version>4.0.5</scp-cf.xsuaa-client.version>
+		<scp-cf.xsuaa-client.version>4.0.6</scp-cf.xsuaa-client.version>
 		<java-jwt.version>4.5.2</java-jwt.version>
 		<!-- Utility stuff -->
 		<slf4j.version>2.0.18</slf4j.version>
@@ -77,7 +77,7 @@
 		<resilience4j.version>2.4.0</resilience4j.version>
 		<!-- JSON & XML stuff -->
 		<gson.version>2.14.0</gson.version>
-		<jackson.version>2.21.3</jackson.version>
+		<jackson.version>2.21.4</jackson.version>
 		<jackson.annotations.version>2.22</jackson.annotations.version>
 		<owasp-json-sanitizer.version>1.2.3</owasp-json-sanitizer.version>
 		<!-- end of essential versions -->
@@ -279,7 +279,7 @@
 			<dependency>
 				<groupId>org.checkerframework</groupId>
 				<artifactId>checker-qual</artifactId>
-				<version>4.1.0</version>
+				<version>4.2.0</version>
 			</dependency>
 			<!--  2.10 by Caffeine and 2.11 by Guava  -->
 			<dependency>
diff --git a/pom.xml b/pom.xml
index 12df25a36..7e999c338 100644
--- a/pom.xml
+++ b/pom.xml
@@ -88,7 +88,7 @@
 		<codeAnalysisExclusions>**/testclasses/**</codeAnalysisExclusions>
 		<!--  Non-essential dependencies  -->
 		<jco-api.version>4.87.9</jco-api.version>
-		<jackson.version>2.21.3</jackson.version>
+		<jackson.version>2.21.4</jackson.version>
 		<jackson.annotations.version>2.22</jackson.annotations.version>
 		<!--  WordUtils used twice in OData generator  -->
 		<json.version>20251224</json.version>
@@ -102,7 +102,7 @@
 		<spring-security.version>6.1.5</spring-security.version>
 		<slf4j.version>2.0.18</slf4j.version>
 		<assertj-core.version>3.27.7</assertj-core.version>
-		<assertj-vavr.version>0.5.0</assertj-vavr.version>
+		<assertj-vavr.version>0.5.1</assertj-vavr.version>
 		<mockito.version>5.23.0</mockito.version>
 		<jsonassert.version>1.5.3</jsonassert.version>
 		<junit.jupiter.version>6.1.0</junit.jupiter.version>
@@ -115,7 +115,7 @@
 		<caffeine.version>3.2.4</caffeine.version>
 		<openapi-generator.version>7.22.0</openapi-generator.version>
 		<io-swagger-core-v3.version>2.2.50</io-swagger-core-v3.version>
-		<io-swagger-parser-v3.version>2.1.42</io-swagger-parser-v3.version>
+		<io-swagger-parser-v3.version>2.1.43</io-swagger-parser-v3.version>
 		<io-swagger-core.version>1.6.11</io-swagger-core.version>
 		<!--  sync plexus version with transitive dependency coming from "org.twadata.maven:mojo-executor"  -->
 		<stax2-api.version>4.3.0</stax2-api.version>