diff --git a/mcp/pom.xml b/mcp/pom.xml
index 00d77a3..be987a5 100644
--- a/mcp/pom.xml
+++ b/mcp/pom.xml
@@ -67,7 +67,7 @@
     <dependency>
       <groupId>org.eclipse.jetty.ee10</groupId>
       <artifactId>jetty-ee10-servlet</artifactId>
-      <version>12.1.10</version>
+      <version>12.1.13</version>
       <optional>true</optional>
     </dependency>
 
@@ -75,7 +75,7 @@
     <dependency>
       <groupId>org.slf4j</groupId>
       <artifactId>slf4j-simple</artifactId>
-      <version>2.0.18</version>
+      <version>2.0.19</version>
       <optional>true</optional>
     </dependency>
 
diff --git a/pom.xml b/pom.xml
index 964310e..0f0c965 100644
--- a/pom.xml
+++ b/pom.xml
@@ -112,7 +112,7 @@
       <dependency>
         <groupId>io.modelcontextprotocol.sdk</groupId>
         <artifactId>mcp-bom</artifactId>
-        <version>2.0.0</version>
+        <version>2.0.1</version>
         <type>pom</type>
         <scope>import</scope>
       </dependency>
@@ -136,7 +136,7 @@
         <plugin>
           <groupId>org.apache.maven.plugins</groupId>
           <artifactId>maven-compiler-plugin</artifactId>
-          <version>3.15.0</version>
+          <version>3.16.0</version>
           <configuration>
             <release>21</release>
           </configuration>
@@ -150,7 +150,7 @@
         <plugin>
           <groupId>org.apache.maven.plugins</groupId>
           <artifactId>maven-help-plugin</artifactId>
-          <version>3.5.1</version>
+          <version>3.5.2</version>
         </plugin>
         <!--
           maven-javadoc-plugin: shared config so direct invocations
@@ -201,7 +201,7 @@
         <plugin>
           <groupId>org.apache.maven.plugins</groupId>
           <artifactId>maven-surefire-plugin</artifactId>
-          <version>3.5.6</version>
+          <version>3.6.0</version>
           <configuration>
             <systemPropertyVariables>
               <jdk.httpclient.allowRestrictedHeaders>host</jdk.httpclient.allowRestrictedHeaders>
@@ -226,7 +226,7 @@
         <plugin>
           <groupId>com.diffplug.spotless</groupId>
           <artifactId>spotless-maven-plugin</artifactId>
-          <version>3.7.0</version>
+          <version>3.10.2</version>
           <configuration>
             <java>
               <googleJavaFormat>
diff --git a/spring/pom.xml b/spring/pom.xml
index 6aa2442..b1b0846 100644
--- a/spring/pom.xml
+++ b/spring/pom.xml
@@ -19,7 +19,7 @@
       it has to move with spring-webmvc, and two literals side by side drift the moment one is
       bumped alone.
     -->
-    <spring.version>7.0.8</spring.version>
+    <spring.version>7.0.9</spring.version>
   </properties>
 
   <artifactId>authplane-spring</artifactId>
@@ -49,7 +49,7 @@
     <dependency>
       <groupId>org.springframework.security</groupId>
       <artifactId>spring-security-oauth2-resource-server</artifactId>
-      <version>7.1.0</version>
+      <version>7.1.1</version>
       <scope>provided</scope>
     </dependency>
 
@@ -62,7 +62,7 @@
     <dependency>
       <groupId>org.springframework.security</groupId>
       <artifactId>spring-security-config</artifactId>
-      <version>7.1.0</version>
+      <version>7.1.1</version>
       <scope>provided</scope>
     </dependency>
 
@@ -98,7 +98,7 @@
     <dependency>
       <groupId>org.springframework.ai</groupId>
       <artifactId>mcp-spring-webmvc</artifactId>
-      <version>2.0.0</version>
+      <version>2.0.1</version>
       <scope>provided</scope>
     </dependency>