diff --git a/datamodel/openapi/openapi-generator/pom.xml b/datamodel/openapi/openapi-generator/pom.xml
index e32fbc53f..948b96c05 100644
--- a/datamodel/openapi/openapi-generator/pom.xml
+++ b/datamodel/openapi/openapi-generator/pom.xml
@@ -38,7 +38,7 @@
 			<dependency>
 				<groupId>org.mozilla</groupId>
 				<artifactId>rhino</artifactId>
-				<version>1.9.0</version>
+				<version>1.9.1</version>
 			</dependency>
 		</dependencies>
 	</dependencyManagement>
diff --git a/dependency-bundles/bom/pom.xml b/dependency-bundles/bom/pom.xml
index 34357f6a7..40bbb1cbb 100644
--- a/dependency-bundles/bom/pom.xml
+++ b/dependency-bundles/bom/pom.xml
@@ -56,7 +56,7 @@
 		<!-- Keep this version consistent with the one from the SAP Java Buildpack (after their 2.0 release) -->
 		<!-- see https://github.wdf.sap.corp/xs2-java/xs-java-buildpack/blob/master/resources/pom.xml -->
 		<scp-cf.xsuaa-client.version>3.6.6</scp-cf.xsuaa-client.version>
-		<java-jwt.version>4.5.0</java-jwt.version>
+		<java-jwt.version>4.5.1</java-jwt.version>
 		<!-- Utility stuff -->
 		<slf4j.version>2.0.17</slf4j.version>
 		<lombok.version>1.18.42</lombok.version>
@@ -77,7 +77,7 @@
 		<resilience4j.version>2.3.0</resilience4j.version>
 		<!-- JSON & XML stuff -->
 		<gson.version>2.13.2</gson.version>
-		<jackson.version>2.21.0</jackson.version>
+		<jackson.version>2.21.1</jackson.version>
 		<jackson.annotations.version>2.21</jackson.annotations.version>
 		<owasp-json-sanitizer.version>1.2.3</owasp-json-sanitizer.version>
 		<!-- end of essential versions -->
diff --git a/pom.xml b/pom.xml
index 76016eb03..a10c65377 100644
--- a/pom.xml
+++ b/pom.xml
@@ -88,7 +88,7 @@
 		<codeAnalysisExclusions>**/testclasses/**</codeAnalysisExclusions>
 		<!--  Non-essential dependencies  -->
 		<jco-api.version>4.87.9</jco-api.version>
-		<jackson.version>2.21.0</jackson.version>
+		<jackson.version>2.21.1</jackson.version>
 		<jackson.annotations.version>2.21</jackson.annotations.version>
 		<!--  WordUtils used twice in OData generator  -->
 		<json.version>20251224</json.version>
@@ -98,7 +98,7 @@
 		<!-- Spring dependencies -->
 		<!-- Keep these versions consistent with the ones from the SAP Java Buildpack (after their 2.0 release) -->
 		<!-- see https://github.wdf.sap.corp/xs2-java/xs-java-buildpack/blob/master/resources/pom.xml -->
-		<spring.version>6.2.15</spring.version>
+		<spring.version>6.2.16</spring.version>
 		<spring-security.version>6.1.5</spring-security.version>
 		<slf4j.version>2.0.17</slf4j.version>
 		<assertj-core.version>3.27.7</assertj-core.version>
@@ -113,9 +113,9 @@
 		<maven-plugin-annotations.version>3.15.2</maven-plugin-annotations.version>
 		<maven-plugin-testing.version>3.5.1</maven-plugin-testing.version>
 		<caffeine.version>3.2.3</caffeine.version>
-		<openapi-generator.version>7.19.0</openapi-generator.version>
-		<io-swagger-core-v3.version>2.2.42</io-swagger-core-v3.version>
-		<io-swagger-parser-v3.version>2.1.37</io-swagger-parser-v3.version>
+		<openapi-generator.version>7.20.0</openapi-generator.version>
+		<io-swagger-core-v3.version>2.2.43</io-swagger-core-v3.version>
+		<io-swagger-parser-v3.version>2.1.38</io-swagger-parser-v3.version>
 		<io-swagger-core.version>1.6.11</io-swagger-core.version>
 		<!--  sync plexus version with transitive dependency coming from "org.twadata.maven:mojo-executor"  -->
 		<stax2-api.version>4.2.2</stax2-api.version>