diff --git a/cloudplatform/connectivity-ztis/pom.xml b/cloudplatform/connectivity-ztis/pom.xml
index f8bd91e02..e7a69f391 100644
--- a/cloudplatform/connectivity-ztis/pom.xml
+++ b/cloudplatform/connectivity-ztis/pom.xml
@@ -37,7 +37,7 @@
 			<dependency>
 				<groupId>io.grpc</groupId>
 				<artifactId>grpc-bom</artifactId>
-				<version>1.80.0</version>
+				<version>1.81.0</version>
 				<type>pom</type>
 				<scope>import</scope>
 			</dependency>
diff --git a/datamodel/openapi/pom.xml b/datamodel/openapi/pom.xml
index a2eb5599e..9c4253a9f 100644
--- a/datamodel/openapi/pom.xml
+++ b/datamodel/openapi/pom.xml
@@ -51,7 +51,7 @@
 			<dependency>
 				<groupId>joda-time</groupId>
 				<artifactId>joda-time</artifactId>
-				<version>2.14.1</version>
+				<version>2.14.2</version>
 			</dependency>
 		</dependencies>
 	</dependencyManagement>
diff --git a/dependency-bundles/bom/pom.xml b/dependency-bundles/bom/pom.xml
index bbc7f4655..1c96a35e8 100644
--- a/dependency-bundles/bom/pom.xml
+++ b/dependency-bundles/bom/pom.xml
@@ -45,7 +45,7 @@
 		<project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
 		<!-- do not modify the following line, it is updated by the versioning script -->
 		<sdk.version>5.30.0-SNAPSHOT</sdk.version>
-		<service-binding.version>0.30.0</service-binding.version>
+		<service-binding.version>0.31.0</service-binding.version>
 		<!-- HTTP stuff -->
 		<httpcore.version>4.4.16</httpcore.version>
 		<httpcore5.version>5.4.2</httpcore5.version>
@@ -55,8 +55,8 @@
 		<!-- XSUAA -->
 		<!-- Keep this version consistent with the one from the SAP Java Buildpack (after their 2.0 release) -->
 		<!-- see https://github.wdf.sap.corp/xs2-java/xs-java-buildpack/blob/master/resources/pom.xml -->
-		<scp-cf.xsuaa-client.version>4.0.4</scp-cf.xsuaa-client.version>
-		<java-jwt.version>4.5.1</java-jwt.version>
+		<scp-cf.xsuaa-client.version>4.0.5</scp-cf.xsuaa-client.version>
+		<java-jwt.version>4.5.2</java-jwt.version>
 		<!-- Utility stuff -->
 		<slf4j.version>2.0.17</slf4j.version>
 		<lombok.version>1.18.46</lombok.version>
@@ -72,12 +72,12 @@
 		<commons-lang3.version>3.20.0</commons-lang3.version>
 		<!-- Soap requests -->
 		<!-- Resilience & Caching -->
-		<caffeine.version>3.2.3</caffeine.version>
+		<caffeine.version>3.2.4</caffeine.version>
 		<jcache.version>1.1.1</jcache.version>
 		<resilience4j.version>2.4.0</resilience4j.version>
 		<!-- JSON & XML stuff -->
 		<gson.version>2.14.0</gson.version>
-		<jackson.version>2.21.2</jackson.version>
+		<jackson.version>2.21.3</jackson.version>
 		<jackson.annotations.version>2.21</jackson.annotations.version>
 		<owasp-json-sanitizer.version>1.2.3</owasp-json-sanitizer.version>
 		<!-- end of essential versions -->
@@ -279,7 +279,7 @@
 			<dependency>
 				<groupId>org.checkerframework</groupId>
 				<artifactId>checker-qual</artifactId>
-				<version>4.0.0</version>
+				<version>4.1.0</version>
 			</dependency>
 			<!--  2.10 by Caffeine and 2.11 by Guava  -->
 			<dependency>
diff --git a/pom.xml b/pom.xml
index ba7de1bdc..34cc90b1c 100644
--- a/pom.xml
+++ b/pom.xml
@@ -88,7 +88,7 @@
 		<codeAnalysisExclusions>**/testclasses/**</codeAnalysisExclusions>
 		<!--  Non-essential dependencies  -->
 		<jco-api.version>4.87.9</jco-api.version>
-		<jackson.version>2.21.2</jackson.version>
+		<jackson.version>2.21.3</jackson.version>
 		<jackson.annotations.version>2.21</jackson.annotations.version>
 		<!--  WordUtils used twice in OData generator  -->
 		<json.version>20251224</json.version>
@@ -112,10 +112,10 @@
 		<maven-plugin.version>3.9.15</maven-plugin.version>
 		<maven-plugin-annotations.version>3.15.2</maven-plugin-annotations.version>
 		<maven-plugin-testing.version>3.5.1</maven-plugin-testing.version>
-		<caffeine.version>3.2.3</caffeine.version>
-		<openapi-generator.version>7.21.0</openapi-generator.version>
-		<io-swagger-core-v3.version>2.2.48</io-swagger-core-v3.version>
-		<io-swagger-parser-v3.version>2.1.40</io-swagger-parser-v3.version>
+		<caffeine.version>3.2.4</caffeine.version>
+		<openapi-generator.version>7.22.0</openapi-generator.version>
+		<io-swagger-core-v3.version>2.2.49</io-swagger-core-v3.version>
+		<io-swagger-parser-v3.version>2.1.41</io-swagger-parser-v3.version>
 		<io-swagger-core.version>1.6.11</io-swagger-core.version>
 		<!--  sync plexus version with transitive dependency coming from "org.twadata.maven:mojo-executor"  -->
 		<stax2-api.version>4.3.0</stax2-api.version>