diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 31b28c5470..5e87481ae3 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -54,7 +54,7 @@ jobs:
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@411c4c9a36b3fca4d674f06b6396b2c6d23522c6 # v3.36.3
+      uses: github/codeql-action/init@4187e74d05793876e9989daffde9c3e66b4acd07 # v3.37.3
       with:
         languages: ${{ matrix.language }}
         # If you wish to specify custom queries, you can do so here or in a config file.
@@ -68,7 +68,7 @@ jobs:
     # Autobuild attempts to build any compiled languages (C/C++, C#, Go, Java, or Swift).
     # If this step fails, then you should remove it and run the build manually (see below)
     - name: Autobuild
-      uses: github/codeql-action/autobuild@411c4c9a36b3fca4d674f06b6396b2c6d23522c6 # v3.36.3
+      uses: github/codeql-action/autobuild@4187e74d05793876e9989daffde9c3e66b4acd07 # v3.37.3
 
     # ℹ️ Command-line programs to run using the OS shell.
     # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
@@ -81,6 +81,6 @@ jobs:
     #     ./location_of_script_within_repo/buildscript.sh
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@411c4c9a36b3fca4d674f06b6396b2c6d23522c6 # v3.36.3
+      uses: github/codeql-action/analyze@4187e74d05793876e9989daffde9c3e66b4acd07 # v3.37.3
       with:
         category: "/language:${{matrix.language}}"
diff --git a/.github/workflows/semgrep.yml b/.github/workflows/semgrep.yml
index 216500bc67..3de3b583a2 100644
--- a/.github/workflows/semgrep.yml
+++ b/.github/workflows/semgrep.yml
@@ -29,14 +29,14 @@ jobs:
 
         steps:
             - name: Checkout
-              uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+              uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
               with:
                   persist-credentials: false
 
             - name: Run Semgrep
               run: semgrep scan --sarif --output=semgrep.sarif --config=p/auto --config=p/dockerfile --config=p/typescript --config=p/javascript --config=p/java --metrics=off --verbose
             - name: Upload SARIF file for GitHub Advanced Security Dashboard
-              uses: github/codeql-action/upload-sarif@411c4c9a36b3fca4d674f06b6396b2c6d23522c6 # v3.36.3
+              uses: github/codeql-action/upload-sarif@4187e74d05793876e9989daffde9c3e66b4acd07 # v3.37.3
               with:
                   sarif_file: semgrep.sarif
               if: always()
diff --git a/commercetools/commercetools-async-http-client/build.gradle b/commercetools/commercetools-async-http-client/build.gradle
index 25113bf3f0..6d5621a00b 100644
--- a/commercetools/commercetools-async-http-client/build.gradle
+++ b/commercetools/commercetools-async-http-client/build.gradle
@@ -4,9 +4,9 @@ dependencies {
     api "org.asynchttpclient:async-http-client:2.16.0"
     api commons.io version commons.io_version
     api "io.netty:netty-codec:4.2.16.Final"
-    api "io.netty:netty-codec-http:4.2.15.Final"
+    api "io.netty:netty-codec-http:4.2.16.Final"
     api "io.netty:netty-codec-socks:4.2.16.Final"
     api "io.netty:netty-handler-proxy:4.2.16.Final"
-    api "io.netty:netty-handler:4.2.15.Final"
+    api "io.netty:netty-handler:4.2.16.Final"
     implementation javax.validation
 }
diff --git a/commercetools/commercetools-graphql-api/build.gradle b/commercetools/commercetools-graphql-api/build.gradle
index 89fc933bdd..458e528849 100644
--- a/commercetools/commercetools-graphql-api/build.gradle
+++ b/commercetools/commercetools-graphql-api/build.gradle
@@ -38,10 +38,10 @@ dependencies {
     //api jackson_core.datatype
     api 'com.netflix.graphql.dgs.codegen:graphql-dgs-codegen-shared-core:8.6.0'
     constraints {
-        implementation("com.fasterxml.jackson.core:jackson-core:2.21.5") {
+        implementation("com.fasterxml.jackson.core:jackson-core:2.22.1") {
             because("security update")
         }
-        implementation("com.fasterxml.jackson.core:jackson-databind:2.21.5") {
+        implementation("com.fasterxml.jackson.core:jackson-databind:2.22.1") {
             because("security update")
         }
     }
diff --git a/commercetools/commercetools-monitoring-datadog/build.gradle b/commercetools/commercetools-monitoring-datadog/build.gradle
index 21cff251cb..1c04a9d933 100644
--- a/commercetools/commercetools-monitoring-datadog/build.gradle
+++ b/commercetools/commercetools-monitoring-datadog/build.gradle
@@ -3,10 +3,10 @@ dependencies {
     implementation "com.datadoghq:java-dogstatsd-client:4.4.5"
     implementation "com.datadoghq:datadog-api-client:2.56.0"
     constraints {
-        implementation("com.fasterxml.jackson.core:jackson-core:2.21.5") {
+        implementation("com.fasterxml.jackson.core:jackson-core:2.22.1") {
             because("security update")
         }
-        implementation("com.fasterxml.jackson.core:jackson-databind:2.21.5") {
+        implementation("com.fasterxml.jackson.core:jackson-databind:2.22.1") {
             because("security update")
         }
     }
diff --git a/commercetools/commercetools-monitoring-opentelemetry/build.gradle b/commercetools/commercetools-monitoring-opentelemetry/build.gradle
index e2552b5934..ed4c763a52 100644
--- a/commercetools/commercetools-monitoring-opentelemetry/build.gradle
+++ b/commercetools/commercetools-monitoring-opentelemetry/build.gradle
@@ -1,7 +1,7 @@
 
 dependencies {
     api project(":rmf:rmf-java-base")
-    implementation 'io.opentelemetry:opentelemetry-api:1.63.0'
+    implementation 'io.opentelemetry:opentelemetry-api:1.64.0'
 
     testImplementation project(":commercetools:commercetools-sdk-java-api")
 }
diff --git a/commercetools/commercetools-okhttp-client3/build.gradle b/commercetools/commercetools-okhttp-client3/build.gradle
index 76b32552e4..9f7a5a14e7 100644
--- a/commercetools/commercetools-okhttp-client3/build.gradle
+++ b/commercetools/commercetools-okhttp-client3/build.gradle
@@ -12,7 +12,7 @@ jmh {
 dependencies {
     api project(":rmf:rmf-java-base")
 
-    implementation "com.squareup.okio:okio:3.17.0"
+    implementation "com.squareup.okio:okio:3.18.0"
     api "com.squareup.okhttp3:okhttp:3.14.9" version {
         strictly "[3.0,3.99999]"
         prefer "3.14.9"
diff --git a/commercetools/commercetools-okhttp-client4/build.gradle b/commercetools/commercetools-okhttp-client4/build.gradle
index 20c28a7dc2..1d13e3e71f 100644
--- a/commercetools/commercetools-okhttp-client4/build.gradle
+++ b/commercetools/commercetools-okhttp-client4/build.gradle
@@ -15,7 +15,7 @@ dependencies {
         strictly '[4.0,4.99999]'
         prefer "4.12.0"
     }
-    implementation "com.squareup.okio:okio:3.17.0"
+    implementation "com.squareup.okio:okio:3.18.0"
 
     implementation javax.validation
 }
diff --git a/commercetools/commercetools-okhttp-client5/build.gradle b/commercetools/commercetools-okhttp-client5/build.gradle
index 1ea0bfc859..c13bb85f85 100644
--- a/commercetools/commercetools-okhttp-client5/build.gradle
+++ b/commercetools/commercetools-okhttp-client5/build.gradle
@@ -15,7 +15,7 @@ dependencies {
         strictly '[5.0,5.99999]'
         prefer "5.4.0"
     }
-    implementation "com.squareup.okio:okio:3.17.0"
+    implementation "com.squareup.okio:okio:3.18.0"
 
     implementation javax.validation
 }
diff --git a/commercetools/commercetools-sdk-compat-v1/build.gradle b/commercetools/commercetools-sdk-compat-v1/build.gradle
index 56bc4d1f63..f649352fac 100644
--- a/commercetools/commercetools-sdk-compat-v1/build.gradle
+++ b/commercetools/commercetools-sdk-compat-v1/build.gradle
@@ -22,7 +22,7 @@ dependencies {
     api ctsdkv1.client version ctsdkv1.version
     api ctsdkv1.models version ctsdkv1.version
     api "io.netty:netty-codec:4.2.16.Final"
-    api "io.netty:netty-codec-http:4.2.15.Final"
+    api "io.netty:netty-codec-http:4.2.16.Final"
 
     jmhImplementation project(':commercetools:commercetools-async-http-client')
     jmhImplementation project(':commercetools:commercetools-apachehttp-client')
diff --git a/commercetools/internal-docs/build.gradle b/commercetools/internal-docs/build.gradle
index 782005c822..987f749808 100644
--- a/commercetools/internal-docs/build.gradle
+++ b/commercetools/internal-docs/build.gradle
@@ -1,5 +1,5 @@
 dependencies {
-    testImplementation 'org.junit.jupiter:junit-jupiter:6.1.1'
+    testImplementation 'org.junit.jupiter:junit-jupiter:6.1.2'
     implementation project(":commercetools:commercetools-sdk-java-api")
     implementation project(":commercetools:commercetools-sdk-java-importapi")
     implementation project(":commercetools:commercetools-sdk-java-history")
@@ -14,16 +14,16 @@ dependencies {
     testImplementation project(path: ':commercetools:commercetools-graphql-api', configuration: 'integrationTestArtifacts')
     testImplementation 'com.commercetools.sdk.jvm.core:commercetools-models:2.16.0'
     constraints {
-        implementation("com.fasterxml.jackson.core:jackson-core:2.21.5") {
+        implementation("com.fasterxml.jackson.core:jackson-core:2.22.1") {
             because("security update")
         }
-        testImplementation("com.fasterxml.jackson.core:jackson-core:2.21.5") {
+        testImplementation("com.fasterxml.jackson.core:jackson-core:2.22.1") {
             because("security update")
         }
-        implementation("com.fasterxml.jackson.core:jackson-databind:2.21.5") {
+        implementation("com.fasterxml.jackson.core:jackson-databind:2.22.1") {
             because("security update")
         }
-        testImplementation("com.fasterxml.jackson.core:jackson-core:2.21.5") {
+        testImplementation("com.fasterxml.jackson.core:jackson-core:2.22.1") {
             because("security update")
         }
     }
diff --git a/common-plugins/build.gradle b/common-plugins/build.gradle
index faca0a46a0..dfbbd02851 100644
--- a/common-plugins/build.gradle
+++ b/common-plugins/build.gradle
@@ -1,7 +1,7 @@
 plugins {
     id 'java-gradle-plugin'
     id 'idea'
-    id 'org.jetbrains.kotlin.jvm' version "2.3.21"
+    id 'org.jetbrains.kotlin.jvm' version "2.4.10"
 }
 
 repositories {
diff --git a/common-plugins/javaparser/build.gradle b/common-plugins/javaparser/build.gradle
index c0837d96d7..b7d27afd62 100644
--- a/common-plugins/javaparser/build.gradle
+++ b/common-plugins/javaparser/build.gradle
@@ -1,6 +1,6 @@
 plugins {
     id 'java'
-    id 'com.gradleup.shadow' version '9.2.0'
+    id 'com.gradleup.shadow' version '9.6.1'
 }
 
 group = 'com.commercetools.sdk.plugins'
diff --git a/gradle-scripts/extensions.gradle b/gradle-scripts/extensions.gradle
index 8a50cb585b..2debfc1526 100644
--- a/gradle-scripts/extensions.gradle
+++ b/gradle-scripts/extensions.gradle
@@ -32,8 +32,8 @@ ext {
     jackson_core = [
             version: '3.1.0',
             annotations: 'com.fasterxml.jackson.core:jackson-annotations:2.22',
-            databind: 'tools.jackson.core:jackson-databind:3.1.4',
-            core: 'tools.jackson.core:jackson-core:3.1.1',
+            databind: 'tools.jackson.core:jackson-databind:3.2.1',
+            core: 'tools.jackson.core:jackson-core:3.2.1',
             //datatype: 'com.fasterxml.jackson.datatype:jackson-datatype-jsr310:3.1.0',
     ]
 
@@ -56,7 +56,7 @@ ext {
     ]
 
     junit = [
-            junit: 'org.junit.jupiter:junit-jupiter:6.1.1',
+            junit: 'org.junit.jupiter:junit-jupiter:6.1.2',
             jsonassert: 'org.skyscreamer:jsonassert:1.5.3',
             assertj: 'org.assertj:assertj-core:3.27.7'
     ]
diff --git a/package.json b/package.json
index 429c21fa7f..a4c77bfa5e 100644
--- a/package.json
+++ b/package.json
@@ -18,5 +18,5 @@
     "format": "./gradlew spotlessApply",
     "prepare": "husky"
   },
-  "packageManager": "yarn@4.17.0"
+  "packageManager": "yarn@4.17.1"
 }