diff --git a/build.gradle b/build.gradle
index b5a1a184..4a79fec8 100644
--- a/build.gradle
+++ b/build.gradle
@@ -2,8 +2,8 @@ plugins {
     id 'idea'
     id 'maven-publish'
 
-    id 'com.jfrog.artifactory' version '5.2.2'
-    id "org.sonarqube" version "5.0.0.4638"
+    id 'com.jfrog.artifactory' version '5.2.3'
+    id "org.sonarqube" version "5.1.0.4882"
 }
 
 // task dependencies is NOT recursively executed on subprojects
diff --git a/buildSrc/build.gradle b/buildSrc/build.gradle
index f8dbac7a..6b0c0210 100644
--- a/buildSrc/build.gradle
+++ b/buildSrc/build.gradle
@@ -11,5 +11,5 @@ repositories {
 dependencies {
     implementation group: 'com.diffplug.spotless', name: 'spotless-plugin-gradle', version: '6.25.0'
     implementation group: 'com.srcclr.gradle', name: 'com.srcclr.gradle.gradle.plugin', version: '3.1.12'
-    implementation group: 'org.apache.commons', name: 'commons-compress', version: '1.26.0'
+    implementation group: 'org.apache.commons', name: 'commons-compress', version: '1.26.2'
 }
diff --git a/stairctl/build.gradle b/stairctl/build.gradle
index f7217c41..031d186a 100644
--- a/stairctl/build.gradle
+++ b/stairctl/build.gradle
@@ -2,9 +2,9 @@ plugins {
     id 'application'
     id 'stairway.java-conventions'
 
-    id 'io.spring.dependency-management' version '1.1.5'
+    id 'io.spring.dependency-management' version '1.1.6'
     // Spring Boot and Spring Shell versions should stay in sync
-    id 'org.springframework.boot' version '3.3.1'
+    id 'org.springframework.boot' version '3.3.2'
 }
 
 version = gradle.version
diff --git a/stairway-azure/build.gradle b/stairway-azure/build.gradle
index 0ef5a978..9f49ef21 100644
--- a/stairway-azure/build.gradle
+++ b/stairway-azure/build.gradle
@@ -5,14 +5,14 @@ plugins {
 dependencies {
     api project(':stairway')
 
-    implementation group: 'org.apache.commons', name: 'commons-lang3', version: '3.14.0'
+    implementation group: 'org.apache.commons', name: 'commons-lang3', version: '3.15.0'
 
     //Azure service bus dependencies
-    implementation 'com.azure:azure-messaging-servicebus:7.17.1'
-    implementation 'com.azure:azure-identity:1.13.0'
+    implementation 'com.azure:azure-messaging-servicebus:7.17.2'
+    implementation 'com.azure:azure-identity:1.13.2'
     // Azure dependencies pull in out-of-date, vulnerable io.netty dependencies.
     // If they update them in a future release, this may be removed:
-    implementation platform('io.netty:netty-bom:4.1.111.Final')
+    implementation platform('io.netty:netty-bom:4.1.112.Final')
 
     testImplementation 'org.mockito:mockito-junit-jupiter:5.12.0'
 }
diff --git a/stairway-gcp/build.gradle b/stairway-gcp/build.gradle
index dc5b6b7f..6bf112bf 100644
--- a/stairway-gcp/build.gradle
+++ b/stairway-gcp/build.gradle
@@ -5,10 +5,10 @@ plugins {
 dependencies {
     api project(':stairway')
 
-    implementation group: 'org.apache.commons', name: 'commons-lang3', version: '3.14.0'
+    implementation group: 'org.apache.commons', name: 'commons-lang3', version: '3.15.0'
 
     // Google dependencies
-    implementation platform('com.google.cloud:libraries-bom:26.42.0') // use common bom
+    implementation platform('com.google.cloud:libraries-bom:26.43.0') // use common bom
     implementation group: 'com.google.cloud', name: 'google-cloud-pubsub'
 }
 
diff --git a/stairway/build.gradle b/stairway/build.gradle
index 184b7616..257dfbb6 100644
--- a/stairway/build.gradle
+++ b/stairway/build.gradle
@@ -5,11 +5,11 @@ plugins {
 dependencies {
     implementation group: 'org.apache.commons', name: 'commons-dbcp2', version: '2.12.0'
     implementation group: 'org.apache.commons', name: 'commons-pool2', version: '2.12.0'
-    implementation group: 'org.apache.commons', name: 'commons-lang3', version: '3.14.0'
+    implementation group: 'org.apache.commons', name: 'commons-lang3', version: '3.15.0'
     implementation group: 'org.apache.commons', name: 'commons-collections4', version: '4.4'
 
     // JSON processing
-    implementation platform('com.fasterxml.jackson:jackson-bom:2.17.1')
+    implementation platform('com.fasterxml.jackson:jackson-bom:2.17.2')
     implementation group: 'com.fasterxml.jackson.core', name: 'jackson-databind'
     implementation group: 'com.fasterxml.jackson.datatype', name: 'jackson-datatype-guava'
     implementation group: 'com.fasterxml.jackson.datatype', name: 'jackson-datatype-jdk8'
@@ -18,17 +18,17 @@ dependencies {
     implementation group: 'org.openapitools', name: 'jackson-databind-nullable', version: '0.2.6'
 
     // Spring
-    implementation group: 'org.springframework', name: 'spring-context', version: '6.1.10'
-    implementation group: 'org.springframework', name: 'spring-web', version: '6.1.10'
+    implementation group: 'org.springframework', name: 'spring-context', version: '6.1.11'
+    implementation group: 'org.springframework', name: 'spring-web', version: '6.1.11'
 
     // Annotations
     implementation group: 'jakarta.annotation', name: 'jakarta.annotation-api', version: '3.0.0'
 
     // Database
-    implementation group: 'org.liquibase', name: 'liquibase-core', version: '4.28.0'
+    implementation group: 'org.liquibase', name: 'liquibase-core', version: '4.29.1'
 
     // Google dependencies
-    implementation platform('com.google.cloud:libraries-bom:26.42.0') // use common bom
+    implementation platform('com.google.cloud:libraries-bom:26.43.0') // use common bom
     implementation group: 'com.google.cloud', name: 'google-cloud-pubsub'
 
     // File handling during testing