diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index be598ce55f..58ad32d97f 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -54,7 +54,7 @@ jobs:
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28 # v4.37.8
+      uses: github/codeql-action/init@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4.37.9
       with:
         languages: ${{ matrix.language }}
         # If you wish to specify custom queries, you can do so here or in a config file.
@@ -68,7 +68,7 @@ jobs:
     # Autobuild attempts to build any compiled languages (C/C++, C#, Go, Java, or Swift).
     # If this step fails, then you should remove it and run the build manually (see below)
     - name: Autobuild
-      uses: github/codeql-action/autobuild@db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28 # v4.37.8
+      uses: github/codeql-action/autobuild@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4.37.9
 
     # ℹ️ Command-line programs to run using the OS shell.
     # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
@@ -81,6 +81,6 @@ jobs:
     #     ./location_of_script_within_repo/buildscript.sh
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28 # v4.37.8
+      uses: github/codeql-action/analyze@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4.37.9
       with:
         category: "/language:${{matrix.language}}"
diff --git a/.github/workflows/semgrep.yml b/.github/workflows/semgrep.yml
index 8fca5957b3..99811bb132 100644
--- a/.github/workflows/semgrep.yml
+++ b/.github/workflows/semgrep.yml
@@ -36,7 +36,7 @@ jobs:
             - name: Run Semgrep
               run: semgrep scan --sarif --output=semgrep.sarif --config=p/auto --config=p/dockerfile --config=p/typescript --config=p/javascript --config=p/java --metrics=off --verbose
             - name: Upload SARIF file for GitHub Advanced Security Dashboard
-              uses: github/codeql-action/upload-sarif@db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28 # v4.37.8
+              uses: github/codeql-action/upload-sarif@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4.37.9
               with:
                   sarif_file: semgrep.sarif
               if: always()
diff --git a/build.gradle b/build.gradle
index 9811d5d056..c50e64ee95 100644
--- a/build.gradle
+++ b/build.gradle
@@ -72,7 +72,7 @@ allprojects {
 
     configurations {
         taglet {
-            resolutionStrategy.force("net.sourceforge.plantuml:plantuml:1.2026.6")
+            resolutionStrategy.force("net.sourceforge.plantuml:plantuml:1.2026.8")
         }
     }
 
diff --git a/commercetools/commercetools-monitoring-datadog/build.gradle b/commercetools/commercetools-monitoring-datadog/build.gradle
index a445170f7f..990f24ba2c 100644
--- a/commercetools/commercetools-monitoring-datadog/build.gradle
+++ b/commercetools/commercetools-monitoring-datadog/build.gradle
@@ -1,7 +1,7 @@
 dependencies {
     api project(":rmf:rmf-java-base")
     implementation "com.datadoghq:java-dogstatsd-client:4.4.5"
-    implementation "com.datadoghq:datadog-api-client:2.59.0"
+    implementation "com.datadoghq:datadog-api-client:2.60.0"
     constraints {
         implementation("com.fasterxml.jackson.core:jackson-core:2.22.2") {
             because("security update")
diff --git a/commercetools/commercetools-okhttp-client3/build.gradle b/commercetools/commercetools-okhttp-client3/build.gradle
index 3db9f4cb0e..cc8f2c5b0c 100644
--- a/commercetools/commercetools-okhttp-client3/build.gradle
+++ b/commercetools/commercetools-okhttp-client3/build.gradle
@@ -12,7 +12,7 @@ jmh {
 dependencies {
     api project(":rmf:rmf-java-base")
 
-    implementation "com.squareup.okio:okio:3.18.1"
+    implementation "com.squareup.okio:okio:3.18.2"
     api "com.squareup.okhttp3:okhttp:3.14.9" version {
         strictly "[3.0,3.99999]"
         prefer "3.14.9"
diff --git a/commercetools/commercetools-okhttp-client4/build.gradle b/commercetools/commercetools-okhttp-client4/build.gradle
index a6e63f13c5..5e2d0460c0 100644
--- a/commercetools/commercetools-okhttp-client4/build.gradle
+++ b/commercetools/commercetools-okhttp-client4/build.gradle
@@ -15,7 +15,7 @@ dependencies {
         strictly '[4.0,4.99999]'
         prefer "4.12.0"
     }
-    implementation "com.squareup.okio:okio:3.18.1"
+    implementation "com.squareup.okio:okio:3.18.2"
 
     implementation 'jakarta.validation:jakarta.validation-api:3.1.1'
 }
diff --git a/commercetools/commercetools-okhttp-client5/build.gradle b/commercetools/commercetools-okhttp-client5/build.gradle
index 0ab934a17f..86613b2148 100644
--- a/commercetools/commercetools-okhttp-client5/build.gradle
+++ b/commercetools/commercetools-okhttp-client5/build.gradle
@@ -15,7 +15,7 @@ dependencies {
         strictly '[5.0,5.99999]'
         prefer "5.5.0"
     }
-    implementation "com.squareup.okio:okio:3.18.1"
+    implementation "com.squareup.okio:okio:3.18.2"
 
     implementation 'jakarta.validation:jakarta.validation-api:3.1.1'
 }
diff --git a/commercetools/commercetools-sdk-java-api/build.gradle b/commercetools/commercetools-sdk-java-api/build.gradle
index 6f45afc23b..3b796e812d 100644
--- a/commercetools/commercetools-sdk-java-api/build.gradle
+++ b/commercetools/commercetools-sdk-java-api/build.gradle
@@ -7,7 +7,7 @@ dependencies {
     implementation 'com.google.code.findbugs:jsr305:3.0.2'
     implementation 'jakarta.validation:jakarta.validation-api:3.1.1'
     api 'org.apache.commons:commons-lang3:3.20.0'
-    api 'org.slf4j:slf4j-api:2.0.18'
+    api 'org.slf4j:slf4j-api:2.0.19'
 
     testImplementation project(':commercetools:commercetools-http-client')
     testImplementation project(':commercetools:commercetools-okhttp-client4')
diff --git a/common-plugins/build.gradle b/common-plugins/build.gradle
index f68dd080cb..ced457890d 100644
--- a/common-plugins/build.gradle
+++ b/common-plugins/build.gradle
@@ -1,7 +1,7 @@
 plugins {
     id 'java-gradle-plugin'
     id 'idea'
-    id 'org.jetbrains.kotlin.jvm' version "2.4.10"
+    id 'org.jetbrains.kotlin.jvm' version "2.4.20"
 }
 
 repositories {
diff --git a/package.json b/package.json
index 436e8482a3..34d548cd13 100644
--- a/package.json
+++ b/package.json
@@ -11,7 +11,7 @@
   },
   "dependencies": {
     "husky": "9.1.7",
-    "lint-staged": "17.3.0"
+    "lint-staged": "17.5.0"
   },
   "scripts": {
     "postinstall": "husky",
diff --git a/rmf/rmf-java-base/build.gradle b/rmf/rmf-java-base/build.gradle
index f46a08f23b..8c269385c8 100644
--- a/rmf/rmf-java-base/build.gradle
+++ b/rmf/rmf-java-base/build.gradle
@@ -5,7 +5,7 @@ dependencies {
     api 'tools.jackson.core:jackson-core:3.2.2'
 //    api jackson_core.datatype
     api 'org.apache.commons:commons-lang3:3.20.0'
-    api 'org.slf4j:slf4j-api:2.0.18'
+    api 'org.slf4j:slf4j-api:2.0.19'
     api 'dev.failsafe:failsafe:3.3.2'
     api "com.spotify:completable-futures:0.3.6"
     api "org.reflections:reflections:0.10.2"
diff --git a/yarn.lock b/yarn.lock
index b932304197..4818959541 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -10,7 +10,7 @@ __metadata:
   resolution: "commercetools-sdk-java-v2@workspace:."
   dependencies:
     husky: "npm:9.1.7"
-    lint-staged: "npm:17.3.0"
+    lint-staged: "npm:17.5.0"
   languageName: unknown
   linkType: soft
 
@@ -23,27 +23,27 @@ __metadata:
   languageName: node
   linkType: hard
 
-"lint-staged@npm:17.3.0":
-  version: 17.3.0
-  resolution: "lint-staged@npm:17.3.0"
+"lint-staged@npm:17.5.0":
+  version: 17.5.0
+  resolution: "lint-staged@npm:17.5.0"
   dependencies:
-    picomatch: "npm:^4.0.5"
+    picomatch: "npm:^4.0.7"
     string-argv: "npm:^0.3.2"
-    tinyexec: "npm:^1.2.4"
+    tinyexec: "npm:^1.3.1"
     yaml: "npm:^2.9.0"
   dependenciesMeta:
     yaml:
       optional: true
   bin:
     lint-staged: bin/lint-staged.js
-  checksum: 10c0/48703bf88fd834a5575b4f7fc77aadc7be21017ca66db4255b8962515f7b3df523ec23a1f198fb89eddc838268f2472a613723a7b058ad9260367a1698ce76e1
+  checksum: 10c0/fcf3f8baeb9dee5366698bf55ecd40a5004b79c60a29e8cd3ed30f62475af3da67492aa88b3432ea61bbf416577ef9fb8d7f73428c71000c0cd937945809a7ed
   languageName: node
   linkType: hard
 
-"picomatch@npm:^4.0.5":
-  version: 4.0.5
-  resolution: "picomatch@npm:4.0.5"
-  checksum: 10c0/947bc6b6e1ff1e6c5aaf95b107a0839d12802f4f7b867663f67d47accba939ca1cb582cf99dfc30438efa1c4648ac5990967e783e8929c36b03e8440704ef1bd
+"picomatch@npm:^4.0.7":
+  version: 4.0.7
+  resolution: "picomatch@npm:4.0.7"
+  checksum: 10c0/beb6ae02c43ae44e84883b90830196d9046b1726ead292adcf7f57945e0bb0d992d68563d87e03b484b6f3c9a5c6defda7523477f047d7f0e663f126cc01787f
   languageName: node
   linkType: hard
 
@@ -54,10 +54,10 @@ __metadata:
   languageName: node
   linkType: hard
 
-"tinyexec@npm:^1.2.4":
-  version: 1.3.0
-  resolution: "tinyexec@npm:1.3.0"
-  checksum: 10c0/e9b89f97489d2aab2cef408da279e6b32547e738d1275032ccb8fd0028a006d93eb70fc51c6cffd9fc2f5aca6c2a273d8b6f73b52d46ee5116da6b94969ef958
+"tinyexec@npm:^1.3.1":
+  version: 1.3.1
+  resolution: "tinyexec@npm:1.3.1"
+  checksum: 10c0/c590369cb3fa73cc18a3998caec8a00f9712d91309c881be3ac52b160fb2f80c7b1fbf3591858ab6abab47ad55385b0c86ec19982e32441a01f55298dab9ccd2
   languageName: node
   linkType: hard