diff --git a/pom.xml b/pom.xml
index 94cd80381c..f6a7abff7a 100755
--- a/pom.xml
+++ b/pom.xml
@@ -42,49 +42,49 @@
 
     <!-- override to set exclusions per-project -->
     <errorprone.args />
-    <errorprone.version>2.27.1</errorprone.version>
+    <errorprone.version>2.29.2</errorprone.version>
 
     <zipkin-proto3.version>1.0.0</zipkin-proto3.version>
 
     <armeria.groupId>com.linecorp.armeria</armeria.groupId>
-    <armeria.version>1.28.4</armeria.version>
+    <armeria.version>1.29.4</armeria.version>
     <!-- Match Armeria version to avoid conflicts including running tests in the IDE -->
-    <netty.version>4.1.110.Final</netty.version>
+    <netty.version>4.1.112.Final</netty.version>
 
     <!-- It's easy for Jackson dependencies to get misaligned, so we manage it ourselves. -->
-    <jackson.version>2.17.1</jackson.version>
+    <jackson.version>2.17.2</jackson.version>
 
     <java-driver.version>4.18.1</java-driver.version>
-    <micrometer.version>1.13.0</micrometer.version>
+    <micrometer.version>1.13.2</micrometer.version>
 
     <!-- Used for Generated annotations -->
     <javax-annotation-api.version>1.3.2</javax-annotation-api.version>
 
     <!-- update together -->
-    <spring-boot.version>3.3.0</spring-boot.version>
-    <spring.version>6.1.8</spring.version>
+    <spring-boot.version>3.3.2</spring-boot.version>
+    <spring.version>6.1.11</spring.version>
 
     <!-- MySQL connector is GPL, even if it has an OSS exception.
          https://www.mysql.com/about/legal/licensing/foss-exception/
 
          MariaDB has a friendlier license, LGPL, which is less scary in audits.
     -->
-    <mariadb-java-client.version>3.4.0</mariadb-java-client.version>
+    <mariadb-java-client.version>3.4.1</mariadb-java-client.version>
     <HikariCP.version>5.1.0</HikariCP.version>
     <slf4j.version>2.0.13</slf4j.version>
-    <auto-value.version>1.10.4</auto-value.version>
+    <auto-value.version>1.11.0</auto-value.version>
     <git-commit-id.version>4.9.10</git-commit-id.version>
 
     <!-- Test only dependencies -->
-    <junit-jupiter.version>5.10.2</junit-jupiter.version>
+    <junit-jupiter.version>5.10.3</junit-jupiter.version>
     <mockito.version>5.12.0</mockito.version>
-    <assertj.version>3.25.3</assertj.version>
+    <assertj.version>3.26.3</assertj.version>
     <awaitility.version>4.2.1</awaitility.version>
     <testcontainers.version>1.20.1</testcontainers.version>
     <okhttp.version>4.12.0</okhttp.version>
     <kryo.version>5.6.0</kryo.version>
     <!-- Only used for proto interop testing; wire-maven-plugin is usually behind latest. -->
-    <wire.version>4.9.9</wire.version>
+    <wire.version>5.0.0</wire.version>
     <gson.version>2.11.0</gson.version>
     <unpack-proto.directory>${project.build.directory}/test/proto</unpack-proto.directory>
 
diff --git a/zipkin-collector/activemq/pom.xml b/zipkin-collector/activemq/pom.xml
index 0c4b532560..8dc1267a58 100644
--- a/zipkin-collector/activemq/pom.xml
+++ b/zipkin-collector/activemq/pom.xml
@@ -20,7 +20,7 @@
 
   <properties>
     <main.basedir>${project.basedir}/../..</main.basedir>
-    <activemq.version>5.18.4</activemq.version>
+    <activemq.version>5.18.5</activemq.version>
   </properties>
 
   <dependencies>
diff --git a/zipkin-collector/kafka/pom.xml b/zipkin-collector/kafka/pom.xml
index e612929ed0..6fa571834c 100644
--- a/zipkin-collector/kafka/pom.xml
+++ b/zipkin-collector/kafka/pom.xml
@@ -19,7 +19,7 @@
 
   <properties>
     <main.basedir>${project.basedir}/../..</main.basedir>
-    <kafka.version>3.7.0</kafka.version>
+    <kafka.version>3.8.0</kafka.version>
   </properties>
 
   <dependencies>
diff --git a/zipkin-storage/mysql-v1/pom.xml b/zipkin-storage/mysql-v1/pom.xml
index 332d80a231..b651e52955 100644
--- a/zipkin-storage/mysql-v1/pom.xml
+++ b/zipkin-storage/mysql-v1/pom.xml
@@ -20,7 +20,7 @@
   <properties>
     <main.basedir>${project.basedir}/../..</main.basedir>
 
-    <jooq.version>3.19.8</jooq.version>
+    <jooq.version>3.19.10</jooq.version>
 
     <!-- jOOQ doesn't add the Generated annotation, so we have to explicitly disable rules -->
     <errorprone.args>-Xep:InconsistentCapitalization:OFF</errorprone.args>