diff --git a/pom.xml b/pom.xml
index 34807818f2..521e5703f7 100644
--- a/pom.xml
+++ b/pom.xml
@@ -199,9 +199,9 @@
         <version.junit>4.13.2</version.junit>
         <version.org.easymock>5.4.0</version.org.easymock>
         <version.io.rest-assured>5.5.0</version.io.rest-assured>
-        <version.org.apache.groovy>4.0.22</version.org.apache.groovy>
+        <version.org.apache.groovy>4.0.23</version.org.apache.groovy>
         <version.com.google.guava>33.3.0-jre</version.com.google.guava>
-        <version.org.springframework.spring-expression>6.1.12</version.org.springframework.spring-expression>
+        <version.org.springframework.spring-expression>6.1.13</version.org.springframework.spring-expression>
         <version.org.jboss.arquillian.container.arquillian-weld-embedded>4.0.0.Final</version.org.jboss.arquillian.container.arquillian-weld-embedded>
         <version.com.fasterxml.jackson.core.jackson-databind>2.17.2</version.com.fasterxml.jackson.core.jackson-databind>
         <version.com.fasterxml.jackson.core.jackson-annotations>2.17.2</version.com.fasterxml.jackson.core.jackson-annotations>
@@ -248,7 +248,7 @@
         <!-- Note: when updating this version, consider reviewing the list of JDKs the forbidden API plugin is targeting. -->
         <version.forbiddenapis.plugin>3.7</version.forbiddenapis.plugin>
         <version.gmavenplus.plugin>3.0.2</version.gmavenplus.plugin>
-        <version.gpg.plugin>3.2.5</version.gpg.plugin>
+        <version.gpg.plugin>3.2.6</version.gpg.plugin>
         <version.install.plugin>3.1.3</version.install.plugin>
         <version.japicmp.plugin>0.23.0</version.japicmp.plugin>
         <version.jar.plugin>3.4.2</version.jar.plugin>