diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index e2da62788..cebfdde72 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -5,7 +5,6 @@ updates:
     directory: /
     schedule:
       interval: monthly
-      day: monday
     cooldown:
       default-days: 7
       semver-major-days: 14
@@ -26,7 +25,6 @@ updates:
     directory: /
     schedule:
       interval: monthly
-      day: monday
     cooldown:
       default-days: 7
       semver-major-days: 14
@@ -39,7 +37,6 @@ updates:
     directory: /VueApp
     schedule:
       interval: monthly
-      day: monday
     cooldown:
       default-days: 7
       semver-major-days: 14
@@ -64,7 +61,6 @@ updates:
     directory: /
     schedule:
       interval: monthly
-      day: monday
     cooldown:
       default-days: 7
     groups:
diff --git a/test/Viper.test.csproj b/test/Viper.test.csproj
index a2c0e746d..6861531b2 100644
--- a/test/Viper.test.csproj
+++ b/test/Viper.test.csproj
@@ -23,17 +23,17 @@
     <PackageReference Include="Microsoft.Extensions.Logging" Version="10.0.10" />
     <PackageReference Include="Microsoft.EntityFrameworkCore.SqlServer" Version="10.0.10" />
     <PackageReference Include="Microsoft.NET.Test.Sdk" Version="18.8.1" />
-    <PackageReference Include="Microsoft.Testing.Platform" Version="2.3.2" />
+    <PackageReference Include="Microsoft.Testing.Platform" Version="2.3.3" />
     <PackageReference Include="MockQueryable.NSubstitute" Version="10.0.8" />
     <!-- Held at 5.3.0: NSubstitute 6.0.0 makes Arg.Is<T> take Predicate<T?>, emitting CS8602/CS8604
          across the suite (upstream nsubstitute/NSubstitute#973, #976). Unpin once 6.0.1 ships. -->
     <PackageReference Include="NSubstitute" Version="5.3.0" />
-    <PackageReference Include="SonarAnalyzer.CSharp" Version="10.30.0.144632">
+    <PackageReference Include="SonarAnalyzer.CSharp" Version="10.31.0.145097">
       <IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
       <PrivateAssets>all</PrivateAssets>
     </PackageReference>
     <!-- Pins transitive SQLitePCLRaw past GHSA-2m69-gcr7-jv3q (EF Sqlite still references vulnerable 2.1.11); remove when EF's bundle catches up -->
-    <PackageReference Include="SQLitePCLRaw.bundle_e_sqlite3" Version="3.0.4" />
+    <PackageReference Include="SQLitePCLRaw.bundle_e_sqlite3" Version="3.0.5" />
     <PackageReference Include="xunit.v3" Version="3.2.2" />
     <PackageReference Include="xunit.runner.visualstudio" Version="3.1.5">
       <IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
diff --git a/web/Viper.csproj b/web/Viper.csproj
index ad780ee0d..1cde67bc3 100644
--- a/web/Viper.csproj
+++ b/web/Viper.csproj
@@ -46,7 +46,7 @@
     <PackageReference Include="DotNetDiag.HealthChecks.UI.Client" Version="10.0.11" />
     <PackageReference Include="DotNetDiag.HealthChecks.UI.InMemory.Storage" Version="10.0.11" />
 
-    <PackageReference Include="AWSSDK.Core" Version="4.0.100.8" />
+    <PackageReference Include="AWSSDK.Core" Version="4.0.100.9" />
     <PackageReference Include="ClosedXML" Version="0.105.1" />
     <PackageReference Include="DotNetEnv" Version="3.2.0" />
     <PackageReference Include="Hangfire.AspNetCore" Version="1.8.24" />
@@ -55,7 +55,7 @@
     <PackageReference Include="Hangfire.SqlServer" Version="1.8.24" />
     <PackageReference Include="HtmlAgilityPack" Version="1.12.4" />
     <PackageReference Include="htmldiff.net" Version="1.5.0" />
-    <PackageReference Include="HtmlSanitizer" Version="9.0.967" />
+    <PackageReference Include="HtmlSanitizer" Version="9.1.973" />
     <PackageReference Include="JetBrains.Annotations" Version="2026.2.0" />
     <PackageReference Include="Joonasw.AspNetCore.SecurityHeaders" Version="6.0.0" />
     <PackageReference Include="Microsoft.AspNetCore.Diagnostics.EntityFrameworkCore" Version="10.0.10" />
@@ -73,10 +73,10 @@
     <PackageReference Include="Microsoft.Extensions.Http.Polly" Version="10.0.10" />
     <PackageReference Include="NLog.MailKit" Version="6.1.5" />
     <PackageReference Include="NLog.Web.AspNetCore" Version="6.1.4" />
-    <PackageReference Include="QuestPDF" Version="2026.7.1" />
+    <PackageReference Include="QuestPDF" Version="2026.7.2" />
     <PackageReference Include="Riok.Mapperly" Version="4.3.1" />
     <PackageReference Include="Scrutor" Version="7.0.0" />
-    <PackageReference Include="SonarAnalyzer.CSharp" Version="10.30.0.144632">
+    <PackageReference Include="SonarAnalyzer.CSharp" Version="10.31.0.145097">
       <IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
       <PrivateAssets>all</PrivateAssets>
     </PackageReference>