diff --git a/pom.xml b/pom.xml
index 72e2eb852..6f529ad59 100644
--- a/pom.xml
+++ b/pom.xml
@@ -86,13 +86,13 @@
         <dependency>
             <groupId>jakarta.servlet</groupId>
             <artifactId>jakarta.servlet-api</artifactId>
-            <version>6.0.0</version>
+            <version>6.1.0</version>
             <scope>provided</scope>
         </dependency>
         <dependency>
             <groupId>org.glassfish.jersey.connectors</groupId>
             <artifactId>jersey-apache-connector</artifactId>
-            <version>3.1.11</version>
+            <version>3.1.12</version>
             <exclusions>
                 <!-- exclude commons-logging (via httpclient) - jcl-over-slf4j from Jena provides the JCL API. Otherwise duplicate org.apache.commons.logging classes on the classpath -->
                 <exclusion>
@@ -105,7 +105,7 @@
             <!-- pin to the version jena-base 6.1.0 declares; nearest-wins would otherwise downgrade it to 1.18.0 via jersey-apache-connector -->
             <groupId>commons-codec</groupId>
             <artifactId>commons-codec</artifactId>
-            <version>1.22.0</version>
+            <version>1.22.1</version>
         </dependency>
         <dependency>
             <groupId>org.glassfish.jersey.media</groupId>
@@ -130,7 +130,7 @@
         <dependency>
             <groupId>com.atomgraph.etl.csv</groupId>
             <artifactId>csv2rdf</artifactId>
-            <version>2.2.0</version>
+            <version>2.2.1</version>
             <exclusions>
                 <!-- exclude SL4J from CSV2RDF - we already got another coming from Core. Otherwise we get https://www.slf4j.org/codes.html#multiple_bindings -->
                 <exclusion>
@@ -142,12 +142,12 @@
         <dependency>
             <groupId>org.apache.jena</groupId>
             <artifactId>jena-shacl</artifactId>
-            <version>6.1.0</version>
+            <version>6.2.0</version>
         </dependency>
         <dependency>
             <groupId>org.apache.jena</groupId>
             <artifactId>jena-arq</artifactId>
-            <version>6.1.0</version>
+            <version>6.2.0</version>
             <exclusions>
                 <!-- exclude Glassfish JSON-P bundle (jakarta.json-api 2.0 + impl); Parsson 1.1 (jakarta.json-api 2.1) from jersey-media-json-processing covers Jena's JSON-LD too -->
                 <exclusion>
@@ -181,7 +181,7 @@
         <dependency>
             <groupId>com.auth0</groupId>
             <artifactId>java-jwt</artifactId>
-            <version>4.5.2</version>
+            <version>4.6.0</version>
         </dependency>
         <dependency>
             <groupId>net.jodah</groupId>
@@ -191,12 +191,12 @@
         <dependency>
             <groupId>org.jsoup</groupId>
             <artifactId>jsoup</artifactId>
-            <version>1.22.2</version>
+            <version>1.23.1</version>
         </dependency>
         <dependency>
             <groupId>org.junit.jupiter</groupId>
             <artifactId>junit-jupiter</artifactId>
-            <version>6.1.0</version>
+            <version>6.1.2</version>
             <scope>test</scope>
         </dependency>
         <dependency>
@@ -271,7 +271,7 @@
             <plugin>
                 <groupId>org.sonatype.central</groupId>
                 <artifactId>central-publishing-maven-plugin</artifactId>
-                <version>0.10.0</version>
+                <version>0.11.0</version>
                 <extensions>true</extensions>
                 <configuration>
                     <publishingServerId>central-portal-snapshots</publishingServerId>
@@ -366,7 +366,7 @@
             <plugin>
                 <groupId>com.github.eirslett</groupId>
                 <artifactId>frontend-maven-plugin</artifactId>
-                <version>2.0.0</version>
+                <version>2.0.2</version>
                 <configuration>
                     <nodeVersion>v22.16.0</nodeVersion>
                     <npmVersion>11.4.2</npmVersion>