diff --git a/Directory.Packages.props b/Directory.Packages.props
index 96cd1688..8a592b3f 100644
--- a/Directory.Packages.props
+++ b/Directory.Packages.props
@@ -11,18 +11,18 @@
   </ItemGroup>
 
   <ItemGroup Label="Test">
-    <PackageVersion Include="xunit.v3" Version="4.0.1" />
+    <PackageVersion Include="xunit.v3" Version="4.0.2" />
     <PackageVersion Include="AwesomeAssertions" Version="9.6.0" />
     <PackageVersion Include="NSubstitute" Version="6.2.0" />
-    <PackageVersion Include="Testcontainers" Version="4.15.0" />
-    <PackageVersion Include="Microsoft.Testing.Extensions.CodeCoverage" Version="18.11.2" />
+    <PackageVersion Include="Testcontainers" Version="4.16.0" />
+    <PackageVersion Include="Microsoft.Testing.Extensions.CodeCoverage" Version="18.12.0" />
     <!-- Property-based testing. Referenced without FsCheck.Xunit, whose runner integration still pins
          xunit.extensibility.execution below 3.0.0 and would drag xUnit v2 into a v3 suite. The library
          itself is runner-agnostic, so a property runs inside an ordinary fact. -->
-    <PackageVersion Include="FsCheck" Version="3.4.0" />
+    <PackageVersion Include="FsCheck" Version="3.5.0" />
     <!-- Holds the corpus manifest to its JSON schema (tests/corpus/manifest.schema.json). The framework exports
          schemas but does not validate against one, and the core must not take the dependency; the tests may. -->
-    <PackageVersion Include="JsonSchema.Net" Version="9.4.0" />
+    <PackageVersion Include="JsonSchema.Net" Version="9.4.1" />
   </ItemGroup>
 
   <ItemGroup Label="Benchmark">
@@ -34,8 +34,8 @@
          others on the same documents; never by src/ or the tests. iText is AGPL-3.0: the project that uses it
          is never packed or distributed. -->
     <PackageVersion Include="PdfPig" Version="0.1.16" />
-    <PackageVersion Include="PDFsharp" Version="6.2.4" />
-    <PackageVersion Include="itext" Version="9.7.0" />
+    <PackageVersion Include="PDFsharp" Version="6.5.0" />
+    <PackageVersion Include="itext" Version="9.8.0" />
     <!-- Pinned past what iText asks for, 8.0.1, which GHSA-846f-f764-76mx and GHSA-2fmv-rv2c-59x7 name. -->
     <PackageVersion Include="System.Security.Cryptography.Pkcs" Version="8.0.2" />
   </ItemGroup>