diff --git a/core/Dockerfile b/core/Dockerfile
index e4bbe2cb8d..839d5df3e1 100644
--- a/core/Dockerfile
+++ b/core/Dockerfile
@@ -1,6 +1,6 @@
 FROM mapfish_print_builder AS builder
 
-FROM tomcat:9.0.108-jdk17-temurin-jammy AS runner
+FROM tomcat:9.0.109-jdk17-temurin-jammy AS runner
 LABEL maintainer="Camptocamp <info@camptocamp.com>"
 
 RUN --mount=type=cache,target=/var/cache,sharing=locked \
diff --git a/core/build.gradle b/core/build.gradle
index c98efdd27f..4c4471a7e9 100644
--- a/core/build.gradle
+++ b/core/build.gradle
@@ -137,19 +137,19 @@ dependencies {
             'org.springframework.security:spring-security-web:5.8.16',
             'com.thetransactioncompany:cors-filter:2.10',
             'org.hibernate:hibernate-core:5.6.15.Final',
-            'org.postgresql:postgresql:42.7.5',
+            'org.postgresql:postgresql:42.7.7',
             'com.vladmihalcea:hibernate-types-52:2.21.1',
-            'com.mchange:c3p0:0.10.2',
+            'com.mchange:c3p0:0.11.2',
             'javax.media:jai-core:1.1.3',
     )
     metrics(
-            'io.dropwizard.metrics:metrics-core:4.2.30',
-            'io.dropwizard.metrics:metrics-servlet:4.2.30',
-            'io.dropwizard.metrics:metrics-httpclient:4.2.30',
-            'io.dropwizard.metrics:metrics-servlets:4.2.30',
-            'io.dropwizard.metrics:metrics-jvm:4.2.30',
-            'io.dropwizard.metrics:metrics-jmx:4.2.30',
-            'io.dropwizard.metrics:metrics-logback:4.2.30',
+            'io.dropwizard.metrics:metrics-core:4.2.37',
+            'io.dropwizard.metrics:metrics-servlet:4.2.37',
+            'io.dropwizard.metrics:metrics-httpclient:4.2.37',
+            'io.dropwizard.metrics:metrics-servlets:4.2.37',
+            'io.dropwizard.metrics:metrics-jvm:4.2.37',
+            'io.dropwizard.metrics:metrics-jmx:4.2.37',
+            'io.dropwizard.metrics:metrics-logback:4.2.37',
     )
     geotools(
             'org.geotools:gt-epsg-hsql:33.2',
@@ -164,40 +164,40 @@ dependencies {
     jasper(
             'ar.com.fdvs:DynamicJasper:5.3.9',
             'com.itextpdf:itextpdf:5.5.13.4',
-            'net.sf.jasperreports:jasperreports:7.0.2',
-            'net.sf.jasperreports:jasperreports-excel-poi:7.0.2',
-            'net.sf.jasperreports:jasperreports-fonts:7.0.2',
-            'net.sf.jasperreports:jasperreports-functions:7.0.2',
-            'net.sf.jasperreports:jasperreports-json:7.0.2',
-            'net.sf.jasperreports:jasperreports-jdt:7.0.2',
-            'net.sf.jasperreports:jasperreports-pdf:7.0.2',
+            'net.sf.jasperreports:jasperreports:7.0.3',
+            'net.sf.jasperreports:jasperreports-excel-poi:7.0.3',
+            'net.sf.jasperreports:jasperreports-fonts:7.0.3',
+            'net.sf.jasperreports:jasperreports-functions:7.0.3',
+            'net.sf.jasperreports:jasperreports-json:7.0.3',
+            'net.sf.jasperreports:jasperreports-jdt:7.0.3',
+            'net.sf.jasperreports:jasperreports-pdf:7.0.3',
     )
     implementation(
-            'org.slf4j:slf4j-api:2.0.16',
-            'org.slf4j:jcl-over-slf4j:2.0.16',
-            'org.slf4j:jul-to-slf4j:2.0.16',
-            'ch.qos.logback:logback-classic:1.5.16',
-            'ch.qos.logback:logback-access:1.5.16',
+            'org.slf4j:slf4j-api:2.0.17',
+            'org.slf4j:jcl-over-slf4j:2.0.17',
+            'org.slf4j:jul-to-slf4j:2.0.17',
+            'ch.qos.logback:logback-classic:1.5.18',
+            'ch.qos.logback:logback-access:1.5.18',
             'org.json:json:20250517',
-            'org.yaml:snakeyaml:2.3',
+            'org.yaml:snakeyaml:2.5',
             'com.github.spullara.cli-parser:cli-parser:1.1.6',
             'com.sun.mail:javax.mail:1.6.2',
-            'com.amazonaws:aws-java-sdk-s3:1.12.780',
-            'io.sentry:sentry-logback:8.1.0',
+            'com.amazonaws:aws-java-sdk-s3:1.12.791',
+            'io.sentry:sentry-logback:8.21.1',
             // For JSON logs
-            'net.logstash.logback:logstash-logback-encoder:8.0',
+            'net.logstash.logback:logstash-logback-encoder:8.1',
             // For PDF/A
             'com.adobe.xmp:xmpcore:6.1.11',
             // For JasperReports
             'joda-time:joda-time:2.14.0',
             'org.jfree:jcommon:1.0.24',
-            'org.apache.groovy:groovy-all:4.0.26',
+            'org.apache.groovy:groovy-all:4.0.28',
             'xalan:serializer:2.7.3',
     )
 
     implementation(
-            'org.apache.xmlgraphics:batik-codec:1.17',
-            'org.apache.xmlgraphics:batik-svg-dom:1.17'
+            'org.apache.xmlgraphics:batik-codec:1.19',
+            'org.apache.xmlgraphics:batik-svg-dom:1.19'
     )
 
     providedCompile('javax.servlet:javax.servlet-api:4.0.1')
diff --git a/docs/build.gradle b/docs/build.gradle
index 2109ba0789..ae95429464 100644
--- a/docs/build.gradle
+++ b/docs/build.gradle
@@ -17,13 +17,13 @@ repositories {
 dependencies {
     implementation project(':core')
     implementation (
-            'org.apache.groovy:groovy-xml:4.0.26',
-            'org.apache.groovy:groovy-json:4.0.26',
+            'org.apache.groovy:groovy-xml:4.0.28',
+            'org.apache.groovy:groovy-json:4.0.28',
             "org.springframework:spring-test:5.3.39",
             'org.ccil.cowan.tagsoup:tagsoup:1.2.1',
             'com.samskivert:jmustache:1.16',
-            'com.google.guava:guava:33.3.1-jre',
-            'commons-io:commons-io:2.17.0',
+            'com.google.guava:guava:33.5.0-jre',
+            'commons-io:commons-io:2.20.0',
             "org.springframework:spring-beans:5.3.39",
             "org.springframework:spring-web:5.3.39",
             "org.springframework:spring-context:5.3.39",