diff --git a/log4j-parent/pom.xml b/log4j-parent/pom.xml
index 6165c7b2e7b..375aa2f7c50 100644
--- a/log4j-parent/pom.xml
+++ b/log4j-parent/pom.xml
@@ -61,20 +61,20 @@
          Direct dependency version properties (in alphabetical order)
          ===================================================== -->
     <activemq.version>6.1.7</activemq.version>
-    <angus-activation.version>2.0.2</angus-activation.version>
-    <angus-mail.version>2.0.3</angus-mail.version>
-    <assertj.version>3.27.3</assertj.version>
+    <angus-activation.version>2.0.3</angus-activation.version>
+    <angus-mail.version>2.0.5</angus-mail.version>
+    <assertj.version>3.27.6</assertj.version>
     <awaitility.version>4.3.0</awaitility.version>
     <bsh.version>2.0b6</bsh.version>
     <bnd.annotation.version>7.1.0</bnd.annotation.version>
     <cassandra.version>3.11.19</cassandra.version>
     <cassandra-driver.version>3.11.5</cassandra-driver.version>
-    <commons-codec.version>1.18.0</commons-codec.version>
-    <commons-compress.version>1.27.1</commons-compress.version>
-    <commons-csv.version>1.14.0</commons-csv.version>
+    <commons-codec.version>1.19.0</commons-codec.version>
+    <commons-compress.version>1.28.0</commons-compress.version>
+    <commons-csv.version>1.14.1</commons-csv.version>
     <commons-dbcp2.version>2.13.0</commons-dbcp2.version>
-    <commons-io.version>2.19.0</commons-io.version>
-    <commons-lang3.version>3.17.0</commons-lang3.version>
+    <commons-io.version>2.20.0</commons-io.version>
+    <commons-lang3.version>3.19.0</commons-lang3.version>
     <commons-logging.version>1.3.5</commons-logging.version>
     <!-- `com.conversantmedia:disruptor` version 1.2.16 requires Java 9: -->
     <conversant.disruptor.version>1.2.15</conversant.disruptor.version>
@@ -82,15 +82,15 @@
     <embedded-ldap.version>0.9.0</embedded-ldap.version>
     <felix.version>7.0.5</felix.version>
     <groovy.version>4.0.27</groovy.version>
-    <guava.version>33.4.8-jre</guava.version>
+    <guava.version>33.5.0-jre</guava.version>
     <h2.version>2.2.224</h2.version>
     <hamcrest.version>3.0</hamcrest.version>
     <HdrHistogram.version>2.2.2</HdrHistogram.version>
     <hsqldb.version>2.7.4</hsqldb.version>
-    <jackson-bom.version>2.19.1</jackson-bom.version>
+    <jackson-bom.version>2.20.0</jackson-bom.version>
     <!-- Override the version in Jakarta EE 9 BOM: -->
-    <jakarta-activation.version>2.1.3</jakarta-activation.version>
-    <jakarta-mail.version>2.1.3</jakarta-mail.version>
+    <jakarta-activation.version>2.1.4</jakarta-activation.version>
+    <jakarta-mail.version>2.1.5</jakarta-mail.version>
     <!-- BOM with Jakarta EE 9 APIs: -->
     <jakartaee-bom.version>9.1.0</jakartaee-bom.version>
     <!-- No BOM for Java EE 8 APIs, so we list them separately: -->
@@ -102,26 +102,26 @@
     <javax-servlet.version>4.0.1</javax-servlet.version>
     <javax-servlet-jsp.version>2.3.3</javax-servlet-jsp.version>
     <java-allocation-instrumenter.version>3.3.4</java-allocation-instrumenter.version>
-    <jazzer.version>0.24.0</jazzer.version>
+    <jazzer.version>0.26.0</jazzer.version>
     <jconsole.version>1.7.0</jconsole.version>
     <jctools.version>4.0.5</jctools.version>
     <jeromq.version>0.6.0</jeromq.version>
-    <jmdns.version>3.6.1</jmdns.version>
+    <jmdns.version>3.6.2</jmdns.version>
     <jmh.version>1.37</jmh.version>
     <junit.version>4.13.2</junit.version>
     <junit-jupiter.version>5.13.2</junit-jupiter.version>
     <junit-pioneer.version>1.9.1</junit-pioneer.version>
-    <kafka.version>4.0.0</kafka.version>
+    <kafka.version>4.1.0</kafka.version>
     <lightcouch.version>0.2.0</lightcouch.version>
     <log4j.version>1.2.17</log4j.version>
     <log4j-transform.version>0.2.0</log4j-transform.version>
     <log4j2-cachefile-transformer.version>2.15.0</log4j2-cachefile-transformer.version>
     <log4j2-ecs-layout.version>1.7.0</log4j2-ecs-layout.version>
     <logback.version>1.3.15</logback.version>
-    <maven.version>3.9.10</maven.version>
+    <maven.version>3.9.11</maven.version>
     <mockito.version>4.11.0</mockito.version>
-    <nashorn.version>15.6</nashorn.version>
-    <org.eclipse.osgi.version>3.23.100</org.eclipse.osgi.version>
+    <nashorn.version>15.7</nashorn.version>
+    <org.eclipse.osgi.version>3.23.200</org.eclipse.osgi.version>
     <org.eclipse.persistence.version>2.7.16</org.eclipse.persistence.version>
     <oro.version>2.0.8</oro.version>
     <!-- The OSGi API version MUST always be the MINIMUM version Log4j supports: -->
@@ -130,13 +130,13 @@
     <osgi.annotation.versioning.version>1.1.2</osgi.annotation.versioning.version>
     <pax-exam.version>4.14.0</pax-exam.version>
     <plexus-utils.version>3.6.0</plexus-utils.version>
-    <spotbugs-annotations.version>4.9.3</spotbugs-annotations.version>
+    <spotbugs-annotations.version>4.9.7</spotbugs-annotations.version>
     <spring-boot.version>2.7.18</spring-boot.version>
     <spring-framework.version>5.3.39</spring-framework.version>
     <system-stubs.version>2.0.3</system-stubs.version>
     <velocity.version>1.7</velocity.version>
     <wiremock.version>2.35.2</wiremock.version>
-    <xmlunit.version>2.10.3</xmlunit.version>
+    <xmlunit.version>2.10.4</xmlunit.version>
     <xz.version>1.10</xz.version>
     <zstd.version>1.5.7-3</zstd.version>
 
@@ -152,7 +152,7 @@
     <commons-pool2.version>2.12.1</commons-pool2.version>
     <httpclient.version>4.5.14</httpclient.version>
     <httpcore.version>4.4.16</httpcore.version>
-    <jna.version>5.17.0</jna.version>
+    <jna.version>5.18.1</jna.version>
 
     <!-- Add 'requires static' for annotation library dependencies (defined as <scope>provided</scope> in this file)
          to allow them to be visible at compile time to make the '-Xlint:classfile' check of javac pass.
@@ -1091,7 +1091,7 @@
       <plugin>
         <groupId>org.gradlex</groupId>
         <artifactId>gradle-module-metadata-maven-plugin</artifactId>
-        <version>1.0.1</version>
+        <version>1.2</version>
         <configuration>
           <compileOnlyApiDependencies>
             <dependency>
diff --git a/pom.xml b/pom.xml
index e78c6a7c99e..6afab3e9399 100644
--- a/pom.xml
+++ b/pom.xml
@@ -339,18 +339,18 @@
     <!-- Skipping `maven-site-plugin` globally. -->
     <maven.site.skip>true</maven.site.skip>
     <maven.site.deploy.skip>true</maven.site.deploy.skip>
-    <site-commons-compress.version>1.27.1</site-commons-compress.version>
-    <site-commons-csv.version>1.14.0</site-commons-csv.version>
+    <site-commons-compress.version>1.28.0</site-commons-compress.version>
+    <site-commons-csv.version>1.14.1</site-commons-csv.version>
     <site-commons-logging.version>1.3.5</site-commons-logging.version>
     <site-conversant.version>1.2.21</site-conversant.version>
     <site-disruptor.version>4.0.0</site-disruptor.version>
     <site-flume.version>1.11.0</site-flume.version>
-    <site-jackson.version>2.19.1</site-jackson.version>
+    <site-jackson.version>2.20.0</site-jackson.version>
     <site-javax-mail.version>1.6.2</site-javax-mail.version>
     <site-jctools.version>4.0.5</site-jctools.version>
     <site-je.version>18.3.12</site-je.version>
     <site-jeromq.version>0.6.0</site-jeromq.version>
-    <site-kafka.version>4.0.0</site-kafka.version>
+    <site-kafka.version>4.1.0</site-kafka.version>
     <site-logback.version>1.3.15</site-logback.version>
     <site-slf4j.version>2.0.17</site-slf4j.version>
 
@@ -569,7 +569,7 @@
       <plugin>
         <groupId>org.apache.rat</groupId>
         <artifactId>apache-rat-plugin</artifactId>
-        <version>0.16.1</version>
+        <version>0.17</version>
         <configuration>
           <consoleOutput>true</consoleOutput>
           <excludes combine.children="append">