diff --git a/pom.xml b/pom.xml
index 0d8722604f..6f3c07dd96 100644
--- a/pom.xml
+++ b/pom.xml
@@ -15,51 +15,50 @@
         <sonar.organization>cloudfoundry</sonar.organization>
         <sonar.coverage.jacoco.xmlReportPaths>../multiapps-controller-coverage/target/site/jacoco-aggregate/jacoco.xml
         </sonar.coverage.jacoco.xmlReportPaths>
-        <junit.version>5.13.2</junit.version>
+        <junit.version>5.13.4</junit.version>
         <junit-platform.version>1.13.2</junit-platform.version>
         <mockito.version>5.18.0</mockito.version>
         <derby.version>10.16.1.1</derby.version> <!-- Upper versions of Derby(10.17.1.0) are not compatible with Java 17 -->
         <h2.version>2.2.224</h2.version>
         <servlet-api.version>6.1.0</servlet-api.version>
-        <log4j.version>2.25.0</log4j.version>
+        <log4j.version>2.25.1</log4j.version>
         <slf4j.version>2.0.17</slf4j.version>
-        <commons-io.version>2.19.0</commons-io.version>
+        <commons-io.version>2.20.0</commons-io.version>
         <commons-collections4.version>4.5.0</commons-collections4.version>
         <snakeyaml.version>2.4</snakeyaml.version>
         <httpclient.version>5.5</httpclient.version>
         <httpcore.version>5.3.4</httpcore.version>
-        <eclipselink.version>4.0.6</eclipselink.version>
+        <eclipselink.version>4.0.7</eclipselink.version>
         <flowable.version>7.1.0</flowable.version>
         <mybatis.version>3.5.19</mybatis.version>
-        <spring.version>6.2.8</spring.version>
-        <spring-security.version>6.5.2</spring-security.version>
+        <spring.version>6.2.10</spring.version>
+        <spring-security.version>6.5.3</spring-security.version>
         <json-smart.version>2.5.2</json-smart.version>
         <hikari.version>6.3.0</hikari.version>
-        <jackson.version>2.19.1</jackson.version>
-        <jackson.databind.version>2.19.1</jackson.databind.version>
-        <liquibase.version>4.32.0</liquibase.version>
+        <jackson.version>2.19.2</jackson.version>
+        <liquibase.version>4.33.0</liquibase.version>
         <liquibase-slf4j.version>5.1.0</liquibase-slf4j.version>
         <cloudfoundry-client.version>5.14.0.RELEASE</cloudfoundry-client.version>
-        <reactor-netty.version>1.2.8</reactor-netty.version>
+        <reactor-netty.version>1.2.9</reactor-netty.version>
         <swagger.version>1.6.16</swagger.version>
         <jclouds.version>2.7.0</jclouds.version>
         <guava.version>33.4.8-jre</guava.version>
         <resilience4j.version>2.3.0</resilience4j.version>
         <immutables.version>2.10.1</immutables.version>
-        <micrometer.version>1.15.1</micrometer.version>
-        <aliyun-sdk-oss.version>3.18.2</aliyun-sdk-oss.version>
+        <micrometer.version>1.15.3</micrometer.version>
+        <aliyun-sdk-oss.version>3.18.3</aliyun-sdk-oss.version>
         <auto-service.version>1.1.1</auto-service.version>
         <commons-codec.version>1.18.0</commons-codec.version>
         <multiapps.version>2.38.0</multiapps.version>
-        <java-cfenv.version>3.4.0</java-cfenv.version>
+        <java-cfenv.version>3.5.0</java-cfenv.version>
         <jaxb-api.version>4.0.2</jaxb-api.version>
         <jaxb-core.version>4.0.5</jaxb-core.version>
         <jaxb-impl.version>4.0.5</jaxb-impl.version>
         <jakarta.inject-api.version>2.0.1</jakarta.inject-api.version>
         <jakarta.annotation-api.version>3.0.0</jakarta.annotation-api.version>
         <bouncycastle.version>2.1.9</bouncycastle.version>
-        <apache.compress.version>1.27.1</apache.compress.version>
-        <tika-core.version>3.2.0</tika-core.version>
+        <apache.compress.version>1.28.0</apache.compress.version>
+        <tika-core.version>3.2.2</tika-core.version>
         <commons-logging.version>1.3.1</commons-logging.version>
     </properties>
     <modules>
@@ -720,7 +719,7 @@
             <dependency>
                 <groupId>com.fasterxml.jackson.core</groupId>
                 <artifactId>jackson-databind</artifactId>
-                <version>${jackson.databind.version}</version>
+                <version>${jackson.version}</version>
             </dependency>
             <!-- https://mvnrepository.com/artifact/org.apache.jclouds/jclouds-blobstore -->
             <dependency>