diff --git a/core/pom.xml b/core/pom.xml
index 398493a..c6c00f2 100644
--- a/core/pom.xml
+++ b/core/pom.xml
@@ -34,7 +34,7 @@
     <dependency>
       <groupId>com.nimbusds</groupId>
       <artifactId>nimbus-jose-jwt</artifactId>
-      <version>10.9.1</version>
+      <version>10.10</version>
     </dependency>
 
     <!-- Test dependencies — version and scope managed in the parent pom -->
diff --git a/mcp/pom.xml b/mcp/pom.xml
index c2fb087..fa2c2d5 100644
--- a/mcp/pom.xml
+++ b/mcp/pom.xml
@@ -67,7 +67,7 @@
     <dependency>
       <groupId>org.eclipse.jetty.ee10</groupId>
       <artifactId>jetty-ee10-servlet</artifactId>
-      <version>12.1.10</version>
+      <version>12.1.14</version>
       <optional>true</optional>
     </dependency>
 
@@ -75,7 +75,7 @@
     <dependency>
       <groupId>org.slf4j</groupId>
       <artifactId>slf4j-simple</artifactId>
-      <version>2.0.18</version>
+      <version>2.0.20</version>
       <optional>true</optional>
     </dependency>
 
diff --git a/pom.xml b/pom.xml
index 863c4cc..9a694cc 100644
--- a/pom.xml
+++ b/pom.xml
@@ -92,13 +92,13 @@
       <dependency>
         <groupId>org.mockito</groupId>
         <artifactId>mockito-core</artifactId>
-        <version>5.23.0</version>
+        <version>5.24.0</version>
         <scope>test</scope>
       </dependency>
       <dependency>
         <groupId>org.mockito</groupId>
         <artifactId>mockito-junit-jupiter</artifactId>
-        <version>5.23.0</version>
+        <version>5.24.0</version>
         <scope>test</scope>
       </dependency>
       <!--
@@ -112,7 +112,7 @@
       <dependency>
         <groupId>io.modelcontextprotocol.sdk</groupId>
         <artifactId>mcp-bom</artifactId>
-        <version>2.0.0</version>
+        <version>2.1.0</version>
         <type>pom</type>
         <scope>import</scope>
       </dependency>
@@ -136,7 +136,7 @@
         <plugin>
           <groupId>org.apache.maven.plugins</groupId>
           <artifactId>maven-compiler-plugin</artifactId>
-          <version>3.15.0</version>
+          <version>3.16.0</version>
           <configuration>
             <release>21</release>
           </configuration>
@@ -150,7 +150,7 @@
         <plugin>
           <groupId>org.apache.maven.plugins</groupId>
           <artifactId>maven-help-plugin</artifactId>
-          <version>3.5.1</version>
+          <version>3.5.2</version>
         </plugin>
         <!--
           maven-javadoc-plugin: shared config so direct invocations
@@ -201,7 +201,7 @@
         <plugin>
           <groupId>org.apache.maven.plugins</groupId>
           <artifactId>maven-surefire-plugin</artifactId>
-          <version>3.5.6</version>
+          <version>3.6.0</version>
           <configuration>
             <systemPropertyVariables>
               <jdk.httpclient.allowRestrictedHeaders>host</jdk.httpclient.allowRestrictedHeaders>
@@ -219,14 +219,14 @@
         <plugin>
           <groupId>org.sonatype.central</groupId>
           <artifactId>central-publishing-maven-plugin</artifactId>
-          <version>0.11.0</version>
+          <version>0.12.0</version>
         </plugin>
 
         <!-- Third-party plugins -->
         <plugin>
           <groupId>com.diffplug.spotless</groupId>
           <artifactId>spotless-maven-plugin</artifactId>
-          <version>3.7.0</version>
+          <version>3.10.4</version>
           <configuration>
             <java>
               <googleJavaFormat>
@@ -243,12 +243,12 @@
         <plugin>
           <groupId>org.codehaus.mojo</groupId>
           <artifactId>build-helper-maven-plugin</artifactId>
-          <version>3.6.1</version>
+          <version>3.6.2</version>
         </plugin>
         <plugin>
           <groupId>org.codehaus.mojo</groupId>
           <artifactId>exec-maven-plugin</artifactId>
-          <version>3.6.3</version>
+          <version>3.6.4</version>
         </plugin>
         <!--
           versions-maven-plugin: pinned globally so direct `versions:set` /
@@ -258,7 +258,7 @@
         <plugin>
           <groupId>org.codehaus.mojo</groupId>
           <artifactId>versions-maven-plugin</artifactId>
-          <version>2.21.0</version>
+          <version>2.23.0</version>
         </plugin>
         <plugin>
           <groupId>org.jacoco</groupId>
diff --git a/spring/pom.xml b/spring/pom.xml
index 06c8bba..06415df 100644
--- a/spring/pom.xml
+++ b/spring/pom.xml
@@ -19,7 +19,7 @@
       it has to move with spring-webmvc, and two literals side by side drift the moment one is
       bumped alone.
     -->
-    <spring.version>7.0.8</spring.version>
+    <spring.version>7.0.9</spring.version>
   </properties>
 
   <artifactId>authplane-spring</artifactId>
@@ -49,7 +49,7 @@
     <dependency>
       <groupId>org.springframework.security</groupId>
       <artifactId>spring-security-oauth2-resource-server</artifactId>
-      <version>7.1.0</version>
+      <version>7.1.1</version>
       <scope>provided</scope>
     </dependency>
 
@@ -62,7 +62,7 @@
     <dependency>
       <groupId>org.springframework.security</groupId>
       <artifactId>spring-security-config</artifactId>
-      <version>7.1.0</version>
+      <version>7.1.1</version>
       <scope>provided</scope>
     </dependency>
 
@@ -98,7 +98,7 @@
     <dependency>
       <groupId>org.springframework.ai</groupId>
       <artifactId>mcp-spring-webmvc</artifactId>
-      <version>2.0.0</version>
+      <version>2.0.1</version>
       <scope>provided</scope>
     </dependency>