diff --git a/log4j-samples-graalvm/pom.xml b/log4j-samples-graalvm/pom.xml
index 8cf508a..2c5d3c2 100644
--- a/log4j-samples-graalvm/pom.xml
+++ b/log4j-samples-graalvm/pom.xml
@@ -59,7 +59,7 @@
     <revision>0.0.0-SNAPSHOT</revision>
 
     <!-- Dependencies (alphabetical) -->
-    <assertj.version>3.27.3</assertj.version>
+    <assertj.version>3.27.4</assertj.version>
     <json-org.version>20250517</json-org.version>
     <json-unit.version>4.1.1</json-unit.version>
     <junit.version>5.13.4</junit.version>
diff --git a/pom.xml b/pom.xml
index 70bc5fa..133da89 100644
--- a/pom.xml
+++ b/pom.xml
@@ -63,7 +63,7 @@
       ~ Set to latest stable 2.x release for users.
       ~ Our workflows override this.
       -->
-    <log4j.version>2.25.0</log4j.version>
+    <log4j.version>2.25.1</log4j.version>
 
     <!-- Some samples require JDK 17+ -->
     <minimalJavaBuildVersion>17</minimalJavaBuildVersion>
@@ -89,16 +89,16 @@
     <flume.version>1.11.0</flume.version>
     <jetty.version>11.0.25</jetty.version>
     <javax-jms.version>2.0.1</javax-jms.version>
-    <spotbugs-annotations.version>4.9.3</spotbugs-annotations.version>
-    <spring-boot.version>3.5.3</spring-boot.version>
+    <spotbugs-annotations.version>4.9.4</spotbugs-annotations.version>
+    <spring-boot.version>3.5.4</spring-boot.version>
     <spring-cloud.version>2025.0.0</spring-cloud.version>
 
     <!-- Pinned transitive dependencies -->
     <!-- Try removing from time to time -->
-    <error_prone.version>2.39.0</error_prone.version>
+    <error_prone.version>2.41.0</error_prone.version>
     <guava.version>33.4.8-jre</guava.version>
     <httpclient.version>4.5.14</httpclient.version>
-    <jackson.version>2.19.1</jackson.version>
+    <jackson.version>2.19.2</jackson.version>
     <joda-time.version>2.14.0</joda-time.version>
     <kotlin.version>2.2.0</kotlin.version>
     <snakeyaml.version>2.4</snakeyaml.version>