diff --git a/pom.xml b/pom.xml
index dc3c5dda9d..2663630cd7 100644
--- a/pom.xml
+++ b/pom.xml
@@ -65,13 +65,13 @@
     <!-- Maven itself runs on Java 17+, but compilation and tests can still use an older toolchain JDK. -->
     <hc.build.toolchain.version>${maven.compiler.source}</hc.build.toolchain.version>
     <httpcore.version>5.5-beta2</httpcore.version>
-    <log4j.version>2.25.4</log4j.version>
-    <brotli4j.version>1.22.0</brotli4j.version>
-    <conscrypt.version>2.5.2</conscrypt.version>
+    <log4j.version>2.26.1</log4j.version>
+    <brotli4j.version>1.23.0</brotli4j.version>
+    <conscrypt.version>2.6.1</conscrypt.version>
     <ehcache.version>3.11.1</ehcache.version>
     <memcached.version>2.12.3</memcached.version>
     <slf4j.version>1.7.36</slf4j.version>
-    <junit.version>5.14.3</junit.version>
+    <junit.version>5.14.4</junit.version>
     <mockito.version>4.11.0</mockito.version>
     <hc.stylecheck.version>1</hc.stylecheck.version>
     <rxjava3.version>3.1.12</rxjava3.version>
@@ -80,13 +80,13 @@
     <api.comparison.version>5.6</api.comparison.version>
     <hc.animal-sniffer.signature.ignores>javax.net.ssl.SSLEngine,javax.net.ssl.SSLParameters,java.nio.ByteBuffer,java.nio.CharBuffer,jdk.net.ExtendedSocketOptions,jdk.net.Sockets</hc.animal-sniffer.signature.ignores>
     <commons.compress.version>1.28.0</commons.compress.version>
-    <zstd.jni.version>1.5.7-7</zstd.jni.version>
-    <micrometer.version>1.16.4</micrometer.version>
-    <micrometer.tracing.version>1.6.4</micrometer.tracing.version>
-    <otel.version>1.60.1</otel.version>     <!-- already used elsewhere -->
+    <zstd.jni.version>1.5.7-11</zstd.jni.version>
+    <micrometer.version>1.17.0</micrometer.version>
+    <micrometer.tracing.version>1.7.0</micrometer.tracing.version>
+    <otel.version>1.64.0</otel.version>     <!-- already used elsewhere -->
     <commons-compress.version>1.26.2</commons-compress.version>
     <caffeine.version>2.9.3</caffeine.version>  <!-- java 8. current version 3.2.3 -->
-    <jakarta.ws.rs.version>3.1.0</jakarta.ws.rs.version>
+    <jakarta.ws.rs.version>4.0.0</jakarta.ws.rs.version>
     <assertj.version>3.27.7</assertj.version>
   </properties>
 
@@ -222,7 +222,7 @@
       <dependency>
         <groupId>commons-io</groupId>
         <artifactId>commons-io</artifactId>
-        <version>2.21.0</version>
+        <version>2.22.0</version>
       </dependency>
       <dependency>
         <groupId>org.apache.commons</groupId>
@@ -369,7 +369,7 @@
       <plugin>
         <groupId>org.apache.maven.plugins</groupId>
         <artifactId>maven-enforcer-plugin</artifactId>
-        <version>3.6.2</version>
+        <version>3.6.3</version>
         <executions>
           <execution>
             <id>enforce-java-runtime</id>
@@ -390,7 +390,7 @@
       <plugin>
         <groupId>com.github.siom79.japicmp</groupId>
         <artifactId>japicmp-maven-plugin</artifactId>
-        <version>0.25.4</version>
+        <version>0.26.1</version>
         <configuration>
           <oldVersion>
             <dependency>