diff --git a/dependency-bundles/bom/pom.xml b/dependency-bundles/bom/pom.xml
index bf0e498e6..2813244f3 100644
--- a/dependency-bundles/bom/pom.xml
+++ b/dependency-bundles/bom/pom.xml
@@ -55,7 +55,7 @@
 		<!-- XSUAA -->
 		<!-- Keep this version consistent with the one from the SAP Java Buildpack (after their 2.0 release) -->
 		<!-- see https://github.wdf.sap.corp/xs2-java/xs-java-buildpack/blob/master/resources/pom.xml -->
-		<scp-cf.xsuaa-client.version>3.6.0</scp-cf.xsuaa-client.version>
+		<scp-cf.xsuaa-client.version>3.6.3</scp-cf.xsuaa-client.version>
 		<java-jwt.version>4.5.0</java-jwt.version>
 		<!-- Utility stuff -->
 		<slf4j.version>2.0.17</slf4j.version>
diff --git a/pom.xml b/pom.xml
index 01a2c9d9f..1d5774106 100644
--- a/pom.xml
+++ b/pom.xml
@@ -97,12 +97,12 @@
 		<!-- Spring dependencies -->
 		<!-- Keep these versions consistent with the ones from the SAP Java Buildpack (after their 2.0 release) -->
 		<!-- see https://github.wdf.sap.corp/xs2-java/xs-java-buildpack/blob/master/resources/pom.xml -->
-		<spring.version>6.2.9</spring.version>
+		<spring.version>6.2.10</spring.version>
 		<spring-security.version>6.1.5</spring-security.version>
 		<slf4j.version>2.0.17</slf4j.version>
 		<assertj-core.version>3.27.4</assertj-core.version>
 		<assertj-vavr.version>0.4.3</assertj-vavr.version>
-		<mockito.version>5.18.0</mockito.version>
+		<mockito.version>5.19.0</mockito.version>
 		<jsonassert.version>1.5.3</jsonassert.version>
 		<junit.jupiter.version>5.13.4</junit.jupiter.version>
 		<codemodel.version>2.6</codemodel.version>
@@ -113,8 +113,8 @@
 		<maven-plugin-testing.version>3.3.0</maven-plugin-testing.version>
 		<caffeine.version>3.2.2</caffeine.version>
 		<openapi-generator.version>7.14.0</openapi-generator.version>
-		<io-swagger-core-v3.version>2.2.35</io-swagger-core-v3.version>
-		<io-swagger-parser-v3.version>2.1.31</io-swagger-parser-v3.version>
+		<io-swagger-core-v3.version>2.2.36</io-swagger-core-v3.version>
+		<io-swagger-parser-v3.version>2.1.32</io-swagger-parser-v3.version>
 		<io-swagger-core.version>1.6.11</io-swagger-core.version>
 		<!--  sync plexus version with transitive dependency coming from "org.twadata.maven:mojo-executor"  -->
 		<stax2-api.version>4.2.2</stax2-api.version>