diff --git a/httpclient5-sse/pom.xml b/httpclient5-sse/pom.xml
index 6a390c4086..f83a4bf5fb 100644
--- a/httpclient5-sse/pom.xml
+++ b/httpclient5-sse/pom.xml
@@ -101,7 +101,7 @@
       <plugin>
         <groupId>com.github.siom79.japicmp</groupId>
         <artifactId>japicmp-maven-plugin</artifactId>
-        <version>0.25.4</version>
+        <version>0.25.6</version>
         <configuration>
           <skip>true</skip>
         </configuration>
diff --git a/pom.xml b/pom.xml
index e0be600684..cf4b27fb42 100644
--- a/pom.xml
+++ b/pom.xml
@@ -65,10 +65,10 @@
     <!-- Maven itself runs on Java 17+, but compilation and tests can still use an older toolchain JDK. -->
     <hc.build.toolchain.version>${maven.compiler.source}</hc.build.toolchain.version>
     <httpcore.version>5.5-alpha1</httpcore.version>
-    <log4j.version>2.25.3</log4j.version>
-    <brotli4j.version>1.20.0</brotli4j.version>
+    <log4j.version>2.25.4</log4j.version>
+    <brotli4j.version>1.22.0</brotli4j.version>
     <conscrypt.version>2.5.2</conscrypt.version>
-    <ehcache.version>3.11.1</ehcache.version>
+    <ehcache.version>3.12.0</ehcache.version>
     <memcached.version>2.12.3</memcached.version>
     <slf4j.version>1.7.36</slf4j.version>
     <junit.version>5.14.3</junit.version>
@@ -81,9 +81,9 @@
     <hc.animal-sniffer.signature.ignores>javax.net.ssl.SSLEngine,javax.net.ssl.SSLParameters,java.nio.ByteBuffer,java.nio.CharBuffer,jdk.net.ExtendedSocketOptions,jdk.net.Sockets</hc.animal-sniffer.signature.ignores>
     <commons.compress.version>1.28.0</commons.compress.version>
     <zstd.jni.version>1.5.7-7</zstd.jni.version>
-    <micrometer.version>1.16.3</micrometer.version>
-    <micrometer.tracing.version>1.6.3</micrometer.tracing.version>
-    <otel.version>1.59.0</otel.version>     <!-- already used elsewhere -->
+    <micrometer.version>1.16.5</micrometer.version>
+    <micrometer.tracing.version>1.6.5</micrometer.tracing.version>
+    <otel.version>1.61.0</otel.version>     <!-- already used elsewhere -->
     <commons-compress.version>1.26.2</commons-compress.version>
     <caffeine.version>2.9.3</caffeine.version>  <!-- java 8. current version 3.2.3 -->
   </properties>
@@ -215,7 +215,7 @@
       <dependency>
         <groupId>commons-io</groupId>
         <artifactId>commons-io</artifactId>
-        <version>2.21.0</version>
+        <version>2.22.0</version>
       </dependency>
       <dependency>
         <groupId>org.apache.commons</groupId>
@@ -351,7 +351,7 @@
       <plugin>
         <groupId>org.apache.maven.plugins</groupId>
         <artifactId>maven-enforcer-plugin</artifactId>
-        <version>3.5.0</version>
+        <version>3.6.2</version>
         <executions>
           <execution>
             <id>enforce-java-runtime</id>
@@ -372,7 +372,7 @@
       <plugin>
         <groupId>com.github.siom79.japicmp</groupId>
         <artifactId>japicmp-maven-plugin</artifactId>
-        <version>0.25.4</version>
+        <version>0.25.6</version>
         <configuration>
           <oldVersion>
             <dependency>