diff --git a/log4j-compress/pom.xml b/log4j-compress/pom.xml
index 47ba798a314..14109346887 100644
--- a/log4j-compress/pom.xml
+++ b/log4j-compress/pom.xml
@@ -29,10 +29,10 @@
   <description>Add additional compression formats to Log4j Core.</description>
 
   <properties>
-    <commons-compress.version>1.27.1</commons-compress.version>
+    <commons-compress.version>1.28.0</commons-compress.version>
     <jimfs.version>1.3.1</jimfs.version>
-    <xz.version>1.10</xz.version>
-    <zstd.version>1.5.7-4</zstd.version>
+    <xz.version>1.11</xz.version>
+    <zstd.version>1.5.7-6</zstd.version>
   </properties>
 
   <dependencyManagement>
diff --git a/log4j-core-test/pom.xml b/log4j-core-test/pom.xml
index 545a2d98a7c..4f66a02c97e 100644
--- a/log4j-core-test/pom.xml
+++ b/log4j-core-test/pom.xml
@@ -64,7 +64,7 @@
 
     <!-- Dependency versions -->
     <slf4j2.version>2.0.17</slf4j2.version>
-    <wiremock.version>3.13.1</wiremock.version>
+    <wiremock.version>3.13.2</wiremock.version>
   </properties>
 
   <dependencyManagement>
@@ -83,7 +83,7 @@
       <dependency>
         <groupId>com.google.code.gson</groupId>
         <artifactId>gson</artifactId>
-        <version>2.13.1</version>
+        <version>2.13.2</version>
       </dependency>
 
     </dependencies>
diff --git a/log4j-layout-template-json-test/pom.xml b/log4j-layout-template-json-test/pom.xml
index 1057beba429..a19245f061c 100644
--- a/log4j-layout-template-json-test/pom.xml
+++ b/log4j-layout-template-json-test/pom.xml
@@ -49,7 +49,7 @@
          2. The Docker image version of the ELK-stack
 
          As of 2024-09-16, these all (Maven artifacts and Elastic products) get released with the same version. -->
-    <elastic.version>9.2.0</elastic.version>
+    <elastic.version>9.2.2</elastic.version>
 
   </properties>
 
diff --git a/log4j-mongodb/pom.xml b/log4j-mongodb/pom.xml
index ae414d6cdd9..6c98954d90f 100644
--- a/log4j-mongodb/pom.xml
+++ b/log4j-mongodb/pom.xml
@@ -37,7 +37,7 @@
     <Fragment-Host>org.apache.logging.log4j.core</Fragment-Host>
 
     <!-- Dependency properties -->
-    <mongodb.version>5.5.1</mongodb.version>
+    <mongodb.version>5.6.2</mongodb.version>
     <slf4j2.version>2.0.17</slf4j2.version>
   </properties>
 
diff --git a/log4j-osgi-test/pom.xml b/log4j-osgi-test/pom.xml
index d8272f710e0..3f198c2f971 100644
--- a/log4j-osgi-test/pom.xml
+++ b/log4j-osgi-test/pom.xml
@@ -46,7 +46,7 @@
 
     <!-- Dependency versions -->
     <spifly.version>1.3.7</spifly.version>
-    <logback.version>1.5.18</logback.version>
+    <logback.version>1.5.22</logback.version>
   </properties>
 
   <dependencyManagement>
diff --git a/log4j-parent/pom.xml b/log4j-parent/pom.xml
index 3875cd61bc5..24f7d45d909 100644
--- a/log4j-parent/pom.xml
+++ b/log4j-parent/pom.xml
@@ -85,7 +85,7 @@
          Plugin version properties (in alphabetical order)
          ================================================= -->
     <asciidoctor-maven-plugin.version>2.2.4</asciidoctor-maven-plugin.version>
-    <docker-maven-plugin.version>0.46.0</docker-maven-plugin.version>
+    <docker-maven-plugin.version>0.48.0</docker-maven-plugin.version>
     <exam-maven-plugin.version>4.14.0</exam-maven-plugin.version>
     <!-- `surefire.version` property used in `apache.org:apache`: -->
     <surefire.version>3.5.2</surefire.version>
@@ -93,45 +93,45 @@
     <!-- =====================================================
          Direct dependency version properties (in alphabetical order)
          ===================================================== -->
-    <assertj.version>3.27.3</assertj.version>
+    <assertj.version>3.27.6</assertj.version>
     <awaitility.version>4.3.0</awaitility.version>
     <bsh.version>2.0b6</bsh.version>
     <bnd.annotation.version>7.1.0</bnd.annotation.version>
-    <commons-codec.version>1.18.0</commons-codec.version>
-    <commons-csv.version>1.14.0</commons-csv.version>
+    <commons-codec.version>1.20.0</commons-codec.version>
+    <commons-csv.version>1.14.1</commons-csv.version>
     <commons-dbcp2.version>2.13.0</commons-dbcp2.version>
-    <commons-io.version>2.20.0</commons-io.version>
-    <commons-lang3.version>3.17.0</commons-lang3.version>
+    <commons-io.version>2.21.0</commons-io.version>
+    <commons-lang3.version>3.20.0</commons-lang3.version>
     <disruptor.version>4.0.0</disruptor.version>
     <embedded-ldap.version>0.9.0</embedded-ldap.version>
     <felix.version>7.0.5</felix.version>
-    <groovy.version>4.0.27</groovy.version>
-    <guava.version>33.4.8-jre</guava.version>
-    <h2.version>2.3.232</h2.version>
+    <groovy.version>5.0.3</groovy.version>
+    <guava.version>33.5.0-jre</guava.version>
+    <h2.version>2.4.240</h2.version>
     <hamcrest.version>3.0</hamcrest.version>
     <HdrHistogram.version>2.2.2</HdrHistogram.version>
     <hsqldb.version>2.7.4</hsqldb.version>
     <!-- wiremock and elasticsearch-java libraries used for testing require Jackson 2 -->
     <!-- The log4j project is using Jackson 3. -->
-    <jackson2.test.version>2.20.0</jackson2.test.version>
-    <jackson-bom.version>3.0.0</jackson-bom.version>
+    <jackson2.test.version>2.20.1</jackson2.test.version>
+    <jackson-bom.version>3.0.3</jackson-bom.version>
     <javax-jms.version>2.0.1</javax-jms.version>
     <java-allocation-instrumenter.version>3.3.4</java-allocation-instrumenter.version>
     <jctools.version>4.0.5</jctools.version>
-    <jmdns.version>3.6.1</jmdns.version>
+    <jmdns.version>3.6.2</jmdns.version>
     <jmh.version>1.37</jmh.version>
-    <json-unit.version>4.1.1</json-unit.version>
+    <json-unit.version>5.1.0</json-unit.version>
     <jspecify.version>1.0.0</jspecify.version>
     <junit.version>4.13.2</junit.version>
-    <junit-jupiter.version>5.13.4</junit-jupiter.version>
+    <junit-jupiter.version>6.0.1</junit-jupiter.version>
     <junit-pioneer.version>2.3.0</junit-pioneer.version>
     <log4j2-custom-layout.version>1.1.0</log4j2-custom-layout.version>
-    <log4j2-logstash-layout.version>0.18</log4j2-logstash-layout.version>
-    <maven.version>3.9.10</maven.version>
-    <mockito.version>5.18.0</mockito.version>
-    <nashorn.version>15.6</nashorn.version>
+    <log4j2-logstash-layout.version>1.0.5</log4j2-logstash-layout.version>
+    <maven.version>3.9.11</maven.version>
+    <mockito.version>5.21.0</mockito.version>
+    <nashorn.version>15.7</nashorn.version>
     <opentest4j.version>1.3.0</opentest4j.version>
-    <org.eclipse.osgi.version>3.23.100</org.eclipse.osgi.version>
+    <org.eclipse.osgi.version>3.24.0</org.eclipse.osgi.version>
     <oro.version>2.0.8</oro.version>
     <!-- The OSGi API version MUST always be the MINIMUM version Log4j supports -->
     <osgi.framework.version>1.10.0</osgi.framework.version>
@@ -140,10 +140,10 @@
     <osgi.annotation.versioning.version>1.1.2</osgi.annotation.versioning.version>
     <pax-exam.version>4.14.0</pax-exam.version>
     <plexus-utils.version>3.6.0</plexus-utils.version>
-    <spotbugs-annotations.version>4.9.3</spotbugs-annotations.version>
+    <spotbugs-annotations.version>4.9.8</spotbugs-annotations.version>
     <system-stubs.version>2.1.8</system-stubs.version>
     <velocity.version>1.7</velocity.version>
-    <xmlunit.version>2.10.3</xmlunit.version>
+    <xmlunit.version>2.11.0</xmlunit.version>
 
     <!-- =====================================================
          Pinned transitive dependency version properties (in alphabetical order)
@@ -153,11 +153,11 @@
          of dependencies (requireUpperBoundDeps rule).
          ===================================================== -->
     <asm.version>9.6</asm.version>
-    <byte-buddy.version>1.17.6</byte-buddy.version>
-    <commons-pool2.version>2.12.1</commons-pool2.version>
+    <byte-buddy.version>1.18.2</byte-buddy.version>
+    <commons-pool2.version>2.13.0</commons-pool2.version>
     <httpclient.version>4.5.14</httpclient.version>
     <httpcore.version>4.4.16</httpcore.version>
-    <jna.version>5.17.0</jna.version>
+    <jna.version>5.18.1</jna.version>
 
   </properties>
 
diff --git a/log4j-perf-test/pom.xml b/log4j-perf-test/pom.xml
index 2803d4ca53d..8baf451457c 100644
--- a/log4j-perf-test/pom.xml
+++ b/log4j-perf-test/pom.xml
@@ -41,7 +41,7 @@
     <!-- Dependency versions -->
     <reload4j.version>1.2.26</reload4j.version>
     <log4j2-ecs-layout.version>1.7.0</log4j2-ecs-layout.version>
-    <logback.version>1.5.18</logback.version>
+    <logback.version>1.5.22</logback.version>
     <slf4j2.version>2.0.17</slf4j2.version>
   </properties>
 
diff --git a/log4j-spring-cloud-config-client/pom.xml b/log4j-spring-cloud-config-client/pom.xml
index 807dcdc52b5..d13e46abf75 100644
--- a/log4j-spring-cloud-config-client/pom.xml
+++ b/log4j-spring-cloud-config-client/pom.xml
@@ -34,10 +34,10 @@
 
   <properties>
     <!-- Dependency version -->
-    <spring-boot.version>3.5.3</spring-boot.version>
+    <spring-boot.version>4.0.0</spring-boot.version>
     <commons-logging.version>1.3.5</commons-logging.version>
-    <spring-cloud.version>4.3.0</spring-cloud.version>
-    <spring-framework.version>6.2.9</spring-framework.version>
+    <spring-cloud.version>5.0.0</spring-cloud.version>
+    <spring-framework.version>7.0.2</spring-framework.version>
 
     <!--
       ~ OSGi and JPMS options
diff --git a/pom.xml b/pom.xml
index da61feb444f..1ef596009dd 100644
--- a/pom.xml
+++ b/pom.xml
@@ -320,7 +320,7 @@
     <project.build.outputTimestamp>2024-11-09T05:50:28Z</project.build.outputTimestamp>
 
     <!-- Version of Log4j API required -->
-    <log4j-api.version>2.24.3</log4j-api.version>
+    <log4j-api.version>2.25.2</log4j-api.version>
 
     <!-- ========================
          Site-specific properties
@@ -334,7 +334,7 @@
     <!-- Skipping `maven-site-plugin` globally. -->
     <maven.site.skip>true</maven.site.skip>
     <maven.site.deploy.skip>true</maven.site.deploy.skip>
-    <site-commons-csv.version>1.14.0</site-commons-csv.version>
+    <site-commons-csv.version>1.14.1</site-commons-csv.version>
     <site-commons-logging.version>1.3.5</site-commons-logging.version>
     <site-conversant.version>1.2.21</site-conversant.version>
     <site-flume.version>1.11.0</site-flume.version>
@@ -342,7 +342,7 @@
     <site-log4j-core.version>3.0.0-beta3</site-log4j-core.version>
     <site-log4j-jakarta.version>3.0.0-alpha1</site-log4j-jakarta.version>
     <site-log4j-layout-template-json.version>3.0.0-beta3</site-log4j-layout-template-json.version>
-    <site-logback.version>1.5.18</site-logback.version>
+    <site-logback.version>1.5.22</site-logback.version>
     <site-slf4j.version>2.0.17</site-slf4j.version>
 
     <!-- =====================================================