diff --git a/dependency-bundles/bom/pom.xml b/dependency-bundles/bom/pom.xml
index 58124e4e4..47206cd57 100644
--- a/dependency-bundles/bom/pom.xml
+++ b/dependency-bundles/bom/pom.xml
@@ -65,7 +65,7 @@
 		<vavr.version>0.10.7</vavr.version>
 		<guava.version>33.5.0-jre</guava.version>
 		<!-- collection utilities, @Beta annotation -->
-		<commons-io.version>2.20.0</commons-io.version>
+		<commons-io.version>2.21.0</commons-io.version>
 		<!-- Apache file utils -->
 		<axis2.version>1.7.9</axis2.version>
 		<!--Used in essential modules: cloudplatform-connectivity, connectivity-destination-service, odata-client, odata-core, securitys-->
@@ -279,13 +279,13 @@
 			<dependency>
 				<groupId>org.checkerframework</groupId>
 				<artifactId>checker-qual</artifactId>
-				<version>3.51.1</version>
+				<version>3.52.0</version>
 			</dependency>
 			<!--  2.10 by Caffeine and 2.11 by Guava  -->
 			<dependency>
 				<groupId>com.google.errorprone</groupId>
 				<artifactId>error_prone_annotations</artifactId>
-				<version>2.43.0</version>
+				<version>2.44.0</version>
 			</dependency>
 		</dependencies>
 	</dependencyManagement>
diff --git a/pom.xml b/pom.xml
index 4e97a50a6..f5b6d5f6a 100644
--- a/pom.xml
+++ b/pom.xml
@@ -126,7 +126,7 @@
 		<checkstyle.version>12.1.1</checkstyle.version>
 		<byte-buddy.version>1.17.8</byte-buddy.version>
 		<snakeyaml.version>2.5</snakeyaml.version>
-		<commons-codec.version>1.19.0</commons-codec.version>
+		<commons-codec.version>1.20.0</commons-codec.version>
 		<commons-beanutils.version>1.11.0</commons-beanutils.version>
 		<findbugs-jsr305.version>3.0.2</findbugs-jsr305.version>
 		<jsr305.optional>true</jsr305.optional>