diff --git a/pom.xml b/pom.xml
index 115fc18776..f811d13d50 100644
--- a/pom.xml
+++ b/pom.xml
@@ -15,53 +15,53 @@
         <sonar.organization>cloudfoundry</sonar.organization>
         <sonar.coverage.jacoco.xmlReportPaths>../multiapps-controller-coverage/target/site/jacoco-aggregate/jacoco.xml
         </sonar.coverage.jacoco.xmlReportPaths>
-        <junit.version>6.0.2</junit.version>
-        <mockito.version>5.21.0</mockito.version>
+        <junit.version>6.0.3</junit.version>
+        <mockito.version>5.23.0</mockito.version>
         <h2.version>2.4.240</h2.version>
         <servlet-api.version>6.1.0</servlet-api.version>
-        <log4j.version>2.25.3</log4j.version>
+        <log4j.version>2.25.4</log4j.version>
         <slf4j.version>2.0.17</slf4j.version>
         <commons-io.version>2.21.0</commons-io.version>
         <commons-collections4.version>4.5.0</commons-collections4.version>
-        <snakeyaml.version>2.5</snakeyaml.version>
+        <snakeyaml.version>2.6</snakeyaml.version>
         <httpclient.version>5.6</httpclient.version>
-        <httpcore.version>5.4</httpcore.version>
+        <httpcore.version>5.4.2</httpcore.version>
         <eclipselink.version>4.0.9</eclipselink.version>
         <flowable.version>7.2.0</flowable.version>
-        <spring.version>6.2.16</spring.version>
+        <spring.version>6.2.17</spring.version>
         <spring-security.version>6.5.9</spring-security.version>
         <hikari.version>7.0.2</hikari.version>
         <jackson-annotations.version>2.21</jackson-annotations.version>
-        <jackson.version>3.1.0</jackson.version>
+        <jackson.version>3.1.1</jackson.version>
         <fasterxml.jackson.version>2.21.2</fasterxml.jackson.version>
         <liquibase.version>4.33.0</liquibase.version>
         <liquibase-slf4j.version>5.1.0</liquibase-slf4j.version>
         <cloudfoundry-client.version>5.16.0.RELEASE</cloudfoundry-client.version>
         <!--reactor netty 1.3.x uses direct memory leading to OOM errors-->
-        <reactor-netty.version>1.2.15</reactor-netty.version>
+        <reactor-netty.version>1.2.16</reactor-netty.version>
         <swagger.version>1.6.16</swagger.version>
         <jclouds.version>2.7.0</jclouds.version>
         <guava.version>33.5.0-jre</guava.version>
-        <resilience4j.version>2.3.0</resilience4j.version>
+        <resilience4j.version>2.4.0</resilience4j.version>
         <immutables.version>2.12.1</immutables.version>
-        <micrometer.version>1.16.3</micrometer.version>
+        <micrometer.version>1.16.4</micrometer.version>
         <aliyun-sdk-oss.version>3.18.5</aliyun-sdk-oss.version>
         <!-- auto-service hasn't had a new release since 12.06.2023 - should check for alternatives in the future -->
         <auto-service.version>1.1.1</auto-service.version>
         <commons-codec.version>1.21.0</commons-codec.version>
         <multiapps.version>2.47.0</multiapps.version>
-        <java-cfenv.version>3.5.1</java-cfenv.version>
+        <java-cfenv.version>4.0.0</java-cfenv.version>
         <jaxb-api.version>4.0.5</jaxb-api.version>
-        <jaxb-core.version>4.0.6</jaxb-core.version>
+        <jaxb-core.version>4.0.7</jaxb-core.version>
         <jakarta.inject-api.version>2.0.1</jakarta.inject-api.version>
         <jakarta.annotation-api.version>3.0.0</jakarta.annotation-api.version>
         <bouncycastle.version>2.1.10</bouncycastle.version>
         <apache.compress.version>1.28.0</apache.compress.version>
-        <tika-core.version>3.2.3</tika-core.version>
-        <commons-logging.version>1.3.5</commons-logging.version>
-        <google-cloud.version>2.62.1</google-cloud.version>
-        <google-cloud-nio.version>0.128.11</google-cloud-nio.version>
-        <azure-storage-blob.version>12.33.1</azure-storage-blob.version>
+        <tika-core.version>3.3.0</tika-core.version>
+        <commons-logging.version>1.3.6</commons-logging.version>
+        <google-cloud.version>2.64.1</google-cloud.version>
+        <google-cloud-nio.version>0.128.14</google-cloud-nio.version>
+        <azure-storage-blob.version>12.33.3</azure-storage-blob.version>
         <azure-core-http-okhttp.version>1.13.3</azure-core-http-okhttp.version>
         <javax.servlet-api.version>4.0.1</javax.servlet-api.version>
     </properties>
@@ -493,7 +493,7 @@
                 <artifactId>commons-collections4</artifactId>
                 <version>${commons-collections4.version}</version>
             </dependency>
-            <!-- https://mvnrepository.com/artifact/org.apache.httpcomponents/httpcore -->
+            <!-- https://mvnrepository.com/artifact/org.apache.httpcomponents.core5/httpcore5 -->
             <dependency>
                 <groupId>org.apache.httpcomponents.core5</groupId>
                 <artifactId>httpcore5</artifactId>