diff --git a/plugin/pom.xml b/plugin/pom.xml
index 5531c52..9b143bd 100644
--- a/plugin/pom.xml
+++ b/plugin/pom.xml
@@ -100,9 +100,9 @@
          Jetty 12 require Java 17 bytecode, so they cannot live on Fiji's shared
          classpath; they are bundled into an isolated lib/mcp-bundle.jar instead. -->
     <mcp.version>2.0.0</mcp.version>
-    <jetty.version>12.0.16</jetty.version>
-    <jackson.version>2.18.0</jackson.version>
-    <slf4j.version>2.0.9</slf4j.version>
+    <jetty.version>12.1.11</jetty.version>
+    <jackson.version>2.22</jackson.version>
+    <slf4j.version>2.0.18</slf4j.version>
 
     <!-- The MCP stack is intentionally Java 17 (provided, isolated inside
          mcp-bundle). Skip pom-scijava's bytecode-version enforcer, which would
@@ -154,7 +154,7 @@
     <dependency>
       <groupId>org.apposed</groupId>
       <artifactId>appose</artifactId>
-      <version>0.11.0</version>
+      <version>0.12.0</version>
     </dependency>
 
     <!-- MCP stack (PROVIDED): NOT distributed into Fiji's shared classpath.
@@ -342,7 +342,7 @@
       <plugin>
         <groupId>org.apache.maven.plugins</groupId>
         <artifactId>maven-assembly-plugin</artifactId>
-        <version>3.7.1</version>
+        <version>3.8.0</version>
         <configuration>
           <descriptors>
             <descriptor>${project.basedir}/src/assembly/mcp-bundle.xml</descriptor>
@@ -367,7 +367,7 @@
       <plugin>
         <groupId>org.codehaus.mojo</groupId>
         <artifactId>exec-maven-plugin</artifactId>
-        <version>3.2.0</version>
+        <version>3.6.3</version>
         <configuration>
           <executable>${java.home}/bin/java</executable>
           <!-- Use the compile classpath (includes provided-scoped deps) so the