From 4589d2b64097e51844979cddffa1ea783bd27f4c Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Sat, 17 Oct 2026 13:19:05 +0000
Subject: [PATCH] Update all dependencies

---
 .github/workflows/benchmark.yml               |  2 +-
 .github/workflows/ci.yml                      |  8 ++--
 .github/workflows/codeql.yml                  |  8 ++--
 .github/workflows/create-pr.yml               |  2 +-
 .github/workflows/docs.yml                    |  2 +-
 .github/workflows/release-fix.yml             |  2 +-
 .github/workflows/release-snapshot.yml        |  2 +-
 .github/workflows/release.yml                 |  4 +-
 .github/workflows/semgrep.yml                 |  2 +-
 build.gradle                                  |  4 +-
 .../build.gradle                              |  2 +-
 .../build.gradle                              | 10 ++---
 .../commercetools-graphql-api/build.gradle    |  4 +-
 .../build.gradle                              |  2 +-
 .../build.gradle                              |  2 +-
 .../build.gradle                              |  2 +-
 .../commercetools-okhttp-client3/build.gradle |  2 +-
 .../commercetools-okhttp-client4/build.gradle |  2 +-
 .../commercetools-okhttp-client5/build.gradle |  2 +-
 .../commercetools-sdk-compat-v1/build.gradle  |  4 +-
 .../commercetools-sdk-java-api/build.gradle   |  4 +-
 .../build.gradle                              |  2 +-
 .../build.gradle                              |  2 +-
 .../build.gradle                              |  2 +-
 common-plugins/build.gradle                   |  4 +-
 gradle-scripts/subproject-dependencies.gradle |  2 +-
 gradle/wrapper/gradle-wrapper.properties      |  2 +-
 package.json                                  |  4 +-
 rmf/rmf-java-base/build.gradle                |  4 +-
 yarn.lock                                     | 40 +++++++++----------
 30 files changed, 67 insertions(+), 67 deletions(-)

diff --git a/.github/workflows/benchmark.yml b/.github/workflows/benchmark.yml
index 2a189a834c..4c7816f44a 100644
--- a/.github/workflows/benchmark.yml
+++ b/.github/workflows/benchmark.yml
@@ -16,7 +16,7 @@ jobs:
             - name: Checkout
               uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
 
-            - uses: gradle/actions/wrapper-validation@9c971963bec38e04b3d30dcc455b5382be2fdbfb # v6.3.0
+            - uses: gradle/actions/wrapper-validation@3f5f9adaf7d9fecd50b5935e54106014257a94e6 # v6.4.0
 
             - name: Setup Java
               uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index cd23427195..7bc923789f 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -44,7 +44,7 @@ jobs:
           # https://help.github.com/en/actions/reference/events-that-trigger-workflows#triggering-new-workflows-using-a-personal-access-token
           # https://github.community/t/action-does-not-trigger-another-on-push-tag-action/17148/8
           token: ${{ steps.generate_github_token.outputs.token }}
-      - uses: gradle/actions/wrapper-validation@9c971963bec38e04b3d30dcc455b5382be2fdbfb # v6.3.0
+      - uses: gradle/actions/wrapper-validation@3f5f9adaf7d9fecd50b5935e54106014257a94e6 # v6.4.0
 
       - name: Setup Java
         uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5
@@ -159,7 +159,7 @@ jobs:
         run: ./gradlew codeCoverageReport
 
       - name: Send code coverage report to Codecov.io
-        uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f # v7.0.0
+        uses: codecov/codecov-action@303a32d7a59b442fa8d48b6a1cc6825c09c847a5 # v7.1.1
         with:
             token: ${{ secrets.CODECOV_TOKEN }}
   docs:
@@ -181,7 +181,7 @@ jobs:
         with:
           token: ${{ steps.generate_github_token.outputs.token }}
 
-      - uses: gradle/actions/wrapper-validation@9c971963bec38e04b3d30dcc455b5382be2fdbfb # v6.3.0
+      - uses: gradle/actions/wrapper-validation@3f5f9adaf7d9fecd50b5935e54106014257a94e6 # v6.4.0
 
       - name: Setup Java
         uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5
@@ -209,6 +209,6 @@ jobs:
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
       - name: Generate and submit dependency graph
         if: github.event_name == 'workflow_dispatch' || github.event_name == 'push' && github.ref == 'refs/heads/main'
-        uses: gradle/actions/dependency-submission@9c971963bec38e04b3d30dcc455b5382be2fdbfb # v6.3.0
+        uses: gradle/actions/dependency-submission@3f5f9adaf7d9fecd50b5935e54106014257a94e6 # v6.4.0
         with:
           github-token: ${{ steps.generate_github_token.outputs.token }}
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index be598ce55f..b4e4fcfcff 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -50,11 +50,11 @@ jobs:
     - name: Checkout repository
       uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
 
-    -   uses: gradle/actions/wrapper-validation@9c971963bec38e04b3d30dcc455b5382be2fdbfb # v6.3.0
+    -   uses: gradle/actions/wrapper-validation@3f5f9adaf7d9fecd50b5935e54106014257a94e6 # v6.4.0
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28 # v4.37.8
+      uses: github/codeql-action/init@6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee # v4.39.0
       with:
         languages: ${{ matrix.language }}
         # If you wish to specify custom queries, you can do so here or in a config file.
@@ -68,7 +68,7 @@ jobs:
     # Autobuild attempts to build any compiled languages (C/C++, C#, Go, Java, or Swift).
     # If this step fails, then you should remove it and run the build manually (see below)
     - name: Autobuild
-      uses: github/codeql-action/autobuild@db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28 # v4.37.8
+      uses: github/codeql-action/autobuild@6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee # v4.39.0
 
     # ℹ️ Command-line programs to run using the OS shell.
     # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
@@ -81,6 +81,6 @@ jobs:
     #     ./location_of_script_within_repo/buildscript.sh
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28 # v4.37.8
+      uses: github/codeql-action/analyze@6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee # v4.39.0
       with:
         category: "/language:${{matrix.language}}"
diff --git a/.github/workflows/create-pr.yml b/.github/workflows/create-pr.yml
index 06428aa9ba..4a6d2dd187 100644
--- a/.github/workflows/create-pr.yml
+++ b/.github/workflows/create-pr.yml
@@ -36,7 +36,7 @@ jobs:
         with:
           token: ${{ steps.generate_github_token.outputs.token }}
 
-      - uses: gradle/actions/wrapper-validation@9c971963bec38e04b3d30dcc455b5382be2fdbfb # v6.3.0
+      - uses: gradle/actions/wrapper-validation@3f5f9adaf7d9fecd50b5935e54106014257a94e6 # v6.4.0
 
       - uses: jenschude/auto-create-pr-action@a5369414c74963e6ec065dab49066d3711b8c1db # v0.3.2
         if: github.ref_name == 'gen-sdk-updates'
diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml
index fe6239a3eb..1781155c0e 100644
--- a/.github/workflows/docs.yml
+++ b/.github/workflows/docs.yml
@@ -54,7 +54,7 @@ jobs:
           distribution: 'temurin'
           java-version: '17'
 
-      - uses: gradle/actions/wrapper-validation@9c971963bec38e04b3d30dcc455b5382be2fdbfb # v6.3.0
+      - uses: gradle/actions/wrapper-validation@3f5f9adaf7d9fecd50b5935e54106014257a94e6 # v6.4.0
 
       - name: Setup Graphviz
         uses: ts-graphviz/setup-graphviz@b1de5da23ed0a6d14e0aeee8ed52fdd87af2363c # v2.0.2
diff --git a/.github/workflows/release-fix.yml b/.github/workflows/release-fix.yml
index fc44d31fc0..45da3d2230 100644
--- a/.github/workflows/release-fix.yml
+++ b/.github/workflows/release-fix.yml
@@ -37,7 +37,7 @@ jobs:
             ref: main
             token: ${{ steps.generate_github_token.outputs.token }}
 
-      - uses: gradle/actions/wrapper-validation@9c971963bec38e04b3d30dcc455b5382be2fdbfb # v6.3.0
+      - uses: gradle/actions/wrapper-validation@3f5f9adaf7d9fecd50b5935e54106014257a94e6 # v6.4.0
 
       - run: ./gradlew -Pversion=$VERSION writeVersionToExamples writeVersionToReadme setVersion nextMinorVersion snapshotVersion
         env:
diff --git a/.github/workflows/release-snapshot.yml b/.github/workflows/release-snapshot.yml
index 0f40820c39..762711bf89 100644
--- a/.github/workflows/release-snapshot.yml
+++ b/.github/workflows/release-snapshot.yml
@@ -26,7 +26,7 @@ jobs:
         with:
             token: ${{ steps.generate_github_token.outputs.token }}
 
-      - uses: gradle/actions/wrapper-validation@9c971963bec38e04b3d30dcc455b5382be2fdbfb # v6.3.0
+      - uses: gradle/actions/wrapper-validation@3f5f9adaf7d9fecd50b5935e54106014257a94e6 # v6.4.0
 
       - name: Setup Java
         uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index b370e63ef7..9a1678aabd 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -19,7 +19,7 @@ jobs:
       - name: Checkout
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
 
-      - uses: gradle/actions/wrapper-validation@9c971963bec38e04b3d30dcc455b5382be2fdbfb # v6.3.0
+      - uses: gradle/actions/wrapper-validation@3f5f9adaf7d9fecd50b5935e54106014257a94e6 # v6.4.0
 
       - name: Setup Java
         uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5
@@ -75,7 +75,7 @@ jobs:
             ref: main
             token: ${{ steps.generate_github_token.outputs.token }}
 
-      - uses: gradle/actions/wrapper-validation@9c971963bec38e04b3d30dcc455b5382be2fdbfb # v6.3.0
+      - uses: gradle/actions/wrapper-validation@3f5f9adaf7d9fecd50b5935e54106014257a94e6 # v6.4.0
 
       - run: ./gradlew -Pversion=$REF_NAME writeVersionToExamples writeVersionToReadme setVersion nextMinorVersion snapshotVersion
         env:
diff --git a/.github/workflows/semgrep.yml b/.github/workflows/semgrep.yml
index 8fca5957b3..1735abb447 100644
--- a/.github/workflows/semgrep.yml
+++ b/.github/workflows/semgrep.yml
@@ -36,7 +36,7 @@ jobs:
             - name: Run Semgrep
               run: semgrep scan --sarif --output=semgrep.sarif --config=p/auto --config=p/dockerfile --config=p/typescript --config=p/javascript --config=p/java --metrics=off --verbose
             - name: Upload SARIF file for GitHub Advanced Security Dashboard
-              uses: github/codeql-action/upload-sarif@db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28 # v4.37.8
+              uses: github/codeql-action/upload-sarif@6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee # v4.39.0
               with:
                   sarif_file: semgrep.sarif
               if: always()
diff --git a/build.gradle b/build.gradle
index 9811d5d056..add09e49cc 100644
--- a/build.gradle
+++ b/build.gradle
@@ -72,13 +72,13 @@ allprojects {
 
     configurations {
         taglet {
-            resolutionStrategy.force("net.sourceforge.plantuml:plantuml:1.2026.6")
+            resolutionStrategy.force("net.sourceforge.plantuml:plantuml:1.2026.9")
         }
     }
 
     dependencies {
         taglet 'com.commercetools.build.taglets:commercetools-taglets:3.6.3'
-        taglet 'com.google.guava:guava:33.7.1-jre'
+        taglet 'com.google.guava:guava:33.7.2-jre'
         taglet 'org.jdrupes.taglets:plantuml-taglet:3.1.0'
     }
 }
diff --git a/commercetools/commercetools-apachehttp-client/build.gradle b/commercetools/commercetools-apachehttp-client/build.gradle
index 16a1307e92..d8f43c590a 100644
--- a/commercetools/commercetools-apachehttp-client/build.gradle
+++ b/commercetools/commercetools-apachehttp-client/build.gradle
@@ -1,7 +1,7 @@
 
 dependencies {
     api project(":rmf:rmf-java-base")
-    api "org.apache.httpcomponents.client5:httpclient5:5.6.4" version {
+    api "org.apache.httpcomponents.client5:httpclient5:5.6.5" version {
         strictly "[5.4.4,5.99999]"
         prefer "5.6.2"
     }
diff --git a/commercetools/commercetools-async-http-client/build.gradle b/commercetools/commercetools-async-http-client/build.gradle
index 866ab2b343..57a951c5da 100644
--- a/commercetools/commercetools-async-http-client/build.gradle
+++ b/commercetools/commercetools-async-http-client/build.gradle
@@ -6,10 +6,10 @@ dependencies {
         strictly '[2.8.0,)'
         prefer '2.22.0'
     }
-    api "io.netty:netty-codec:4.2.17.Final"
-    api "io.netty:netty-codec-http:4.2.17.Final"
-    api "io.netty:netty-codec-socks:4.2.17.Final"
-    api "io.netty:netty-handler-proxy:4.2.17.Final"
-    api "io.netty:netty-handler:4.2.17.Final"
+    api "io.netty:netty-codec:4.2.19.Final"
+    api "io.netty:netty-codec-http:4.2.19.Final"
+    api "io.netty:netty-codec-socks:4.2.19.Final"
+    api "io.netty:netty-handler-proxy:4.2.19.Final"
+    api "io.netty:netty-handler:4.2.19.Final"
     implementation 'jakarta.validation:jakarta.validation-api:3.1.1'
 }
diff --git a/commercetools/commercetools-graphql-api/build.gradle b/commercetools/commercetools-graphql-api/build.gradle
index dd9fcc5f82..0a62a03fdf 100644
--- a/commercetools/commercetools-graphql-api/build.gradle
+++ b/commercetools/commercetools-graphql-api/build.gradle
@@ -1,7 +1,7 @@
 import com.commercetools.sdk.plugins.GraphQLPlugin
 
 plugins {
-    id "com.netflix.dgs.codegen" version "8.6.0"
+    id "com.netflix.dgs.codegen" version "8.7.0"
     id 'java'
 }
 
@@ -36,7 +36,7 @@ dependencies {
     api 'tools.jackson.core:jackson-databind:3.2.3'
     api 'tools.jackson.core:jackson-core:3.2.3'
     //api jackson_core.datatype
-    api 'com.netflix.graphql.dgs.codegen:graphql-dgs-codegen-shared-core:8.6.0'
+    api 'com.netflix.graphql.dgs.codegen:graphql-dgs-codegen-shared-core:8.7.0'
     constraints {
         implementation("com.fasterxml.jackson.core:jackson-core:2.22.3") {
             because("security update")
diff --git a/commercetools/commercetools-monitoring-datadog/build.gradle b/commercetools/commercetools-monitoring-datadog/build.gradle
index 8c4f204a99..ea69296aed 100644
--- a/commercetools/commercetools-monitoring-datadog/build.gradle
+++ b/commercetools/commercetools-monitoring-datadog/build.gradle
@@ -1,7 +1,7 @@
 dependencies {
     api project(":rmf:rmf-java-base")
     implementation "com.datadoghq:java-dogstatsd-client:4.4.5"
-    implementation "com.datadoghq:datadog-api-client:2.59.0"
+    implementation "com.datadoghq:datadog-api-client:2.62.0"
     constraints {
         implementation("com.fasterxml.jackson.core:jackson-core:2.22.3") {
             because("security update")
diff --git a/commercetools/commercetools-monitoring-newrelic/build.gradle b/commercetools/commercetools-monitoring-newrelic/build.gradle
index 17fb0af0a9..4e0aa992b3 100644
--- a/commercetools/commercetools-monitoring-newrelic/build.gradle
+++ b/commercetools/commercetools-monitoring-newrelic/build.gradle
@@ -1,7 +1,7 @@
 
 dependencies {
     api project(":rmf:rmf-java-base")
-    implementation 'com.newrelic.agent.java:newrelic-api:9.4.0'
+    implementation 'com.newrelic.agent.java:newrelic-api:9.5.0'
 
     testImplementation project(":commercetools:commercetools-sdk-java-api")
 }
diff --git a/commercetools/commercetools-monitoring-opentelemetry/build.gradle b/commercetools/commercetools-monitoring-opentelemetry/build.gradle
index 40478c4bd4..ed53aba416 100644
--- a/commercetools/commercetools-monitoring-opentelemetry/build.gradle
+++ b/commercetools/commercetools-monitoring-opentelemetry/build.gradle
@@ -1,7 +1,7 @@
 
 dependencies {
     api project(":rmf:rmf-java-base")
-    implementation 'io.opentelemetry:opentelemetry-api:1.65.0'
+    implementation 'io.opentelemetry:opentelemetry-api:1.67.0'
 
     testImplementation project(":commercetools:commercetools-sdk-java-api")
 }
diff --git a/commercetools/commercetools-okhttp-client3/build.gradle b/commercetools/commercetools-okhttp-client3/build.gradle
index 3db9f4cb0e..cc8f2c5b0c 100644
--- a/commercetools/commercetools-okhttp-client3/build.gradle
+++ b/commercetools/commercetools-okhttp-client3/build.gradle
@@ -12,7 +12,7 @@ jmh {
 dependencies {
     api project(":rmf:rmf-java-base")
 
-    implementation "com.squareup.okio:okio:3.18.1"
+    implementation "com.squareup.okio:okio:3.18.2"
     api "com.squareup.okhttp3:okhttp:3.14.9" version {
         strictly "[3.0,3.99999]"
         prefer "3.14.9"
diff --git a/commercetools/commercetools-okhttp-client4/build.gradle b/commercetools/commercetools-okhttp-client4/build.gradle
index a6e63f13c5..5e2d0460c0 100644
--- a/commercetools/commercetools-okhttp-client4/build.gradle
+++ b/commercetools/commercetools-okhttp-client4/build.gradle
@@ -15,7 +15,7 @@ dependencies {
         strictly '[4.0,4.99999]'
         prefer "4.12.0"
     }
-    implementation "com.squareup.okio:okio:3.18.1"
+    implementation "com.squareup.okio:okio:3.18.2"
 
     implementation 'jakarta.validation:jakarta.validation-api:3.1.1'
 }
diff --git a/commercetools/commercetools-okhttp-client5/build.gradle b/commercetools/commercetools-okhttp-client5/build.gradle
index 0ab934a17f..86613b2148 100644
--- a/commercetools/commercetools-okhttp-client5/build.gradle
+++ b/commercetools/commercetools-okhttp-client5/build.gradle
@@ -15,7 +15,7 @@ dependencies {
         strictly '[5.0,5.99999]'
         prefer "5.5.0"
     }
-    implementation "com.squareup.okio:okio:3.18.1"
+    implementation "com.squareup.okio:okio:3.18.2"
 
     implementation 'jakarta.validation:jakarta.validation-api:3.1.1'
 }
diff --git a/commercetools/commercetools-sdk-compat-v1/build.gradle b/commercetools/commercetools-sdk-compat-v1/build.gradle
index 3b10da5148..9818b45d77 100644
--- a/commercetools/commercetools-sdk-compat-v1/build.gradle
+++ b/commercetools/commercetools-sdk-compat-v1/build.gradle
@@ -21,8 +21,8 @@ dependencies {
     api project(':commercetools:commercetools-sdk-java-api')
     api ctsdkv1.client version ctsdkv1.version
     api ctsdkv1.models version ctsdkv1.version
-    api "io.netty:netty-codec:4.2.17.Final"
-    api "io.netty:netty-codec-http:4.2.17.Final"
+    api "io.netty:netty-codec:4.2.19.Final"
+    api "io.netty:netty-codec-http:4.2.19.Final"
 
     jmhImplementation project(':commercetools:commercetools-async-http-client')
     jmhImplementation project(':commercetools:commercetools-apachehttp-client')
diff --git a/commercetools/commercetools-sdk-java-api/build.gradle b/commercetools/commercetools-sdk-java-api/build.gradle
index 37f3955efd..3267e7ee07 100644
--- a/commercetools/commercetools-sdk-java-api/build.gradle
+++ b/commercetools/commercetools-sdk-java-api/build.gradle
@@ -6,8 +6,8 @@ dependencies {
     api 'tools.jackson.core:jackson-databind:3.2.3'
     implementation 'com.google.code.findbugs:jsr305:3.0.2'
     implementation 'jakarta.validation:jakarta.validation-api:3.1.1'
-    api 'org.apache.commons:commons-lang3:3.20.0'
-    api 'org.slf4j:slf4j-api:2.0.18'
+    api 'org.apache.commons:commons-lang3:3.21.0'
+    api 'org.slf4j:slf4j-api:2.0.20'
 
     testImplementation project(':commercetools:commercetools-http-client')
     testImplementation project(':commercetools:commercetools-okhttp-client4')
diff --git a/commercetools/commercetools-sdk-java-checkout/build.gradle b/commercetools/commercetools-sdk-java-checkout/build.gradle
index 7d62c6ff09..6a722b9121 100644
--- a/commercetools/commercetools-sdk-java-checkout/build.gradle
+++ b/commercetools/commercetools-sdk-java-checkout/build.gradle
@@ -5,7 +5,7 @@ dependencies {
     api 'tools.jackson.core:jackson-databind:3.2.3'
     implementation 'com.google.code.findbugs:jsr305:3.0.2'
     implementation 'jakarta.validation:jakarta.validation-api:3.1.1'
-    api 'org.apache.commons:commons-lang3:3.20.0'
+    api 'org.apache.commons:commons-lang3:3.21.0'
 
     integrationTestImplementation project(':commercetools:commercetools-http-client')
     integrationTestImplementation project(':commercetools:commercetools-sdk-java-api')
diff --git a/commercetools/commercetools-sdk-java-history/build.gradle b/commercetools/commercetools-sdk-java-history/build.gradle
index b98876779f..742cac1f35 100644
--- a/commercetools/commercetools-sdk-java-history/build.gradle
+++ b/commercetools/commercetools-sdk-java-history/build.gradle
@@ -5,7 +5,7 @@ dependencies {
     api 'tools.jackson.core:jackson-databind:3.2.3'
     implementation 'com.google.code.findbugs:jsr305:3.0.2'
     implementation 'jakarta.validation:jakarta.validation-api:3.1.1'
-    api 'org.apache.commons:commons-lang3:3.20.0'
+    api 'org.apache.commons:commons-lang3:3.21.0'
 
     integrationTestImplementation project(':commercetools:commercetools-http-client')
 }
diff --git a/commercetools/commercetools-sdk-java-importapi/build.gradle b/commercetools/commercetools-sdk-java-importapi/build.gradle
index 7d62c6ff09..6a722b9121 100644
--- a/commercetools/commercetools-sdk-java-importapi/build.gradle
+++ b/commercetools/commercetools-sdk-java-importapi/build.gradle
@@ -5,7 +5,7 @@ dependencies {
     api 'tools.jackson.core:jackson-databind:3.2.3'
     implementation 'com.google.code.findbugs:jsr305:3.0.2'
     implementation 'jakarta.validation:jakarta.validation-api:3.1.1'
-    api 'org.apache.commons:commons-lang3:3.20.0'
+    api 'org.apache.commons:commons-lang3:3.21.0'
 
     integrationTestImplementation project(':commercetools:commercetools-http-client')
     integrationTestImplementation project(':commercetools:commercetools-sdk-java-api')
diff --git a/common-plugins/build.gradle b/common-plugins/build.gradle
index f68dd080cb..354ddb4f4b 100644
--- a/common-plugins/build.gradle
+++ b/common-plugins/build.gradle
@@ -1,7 +1,7 @@
 plugins {
     id 'java-gradle-plugin'
     id 'idea'
-    id 'org.jetbrains.kotlin.jvm' version "2.4.10"
+    id 'org.jetbrains.kotlin.jvm' version "2.4.21"
 }
 
 repositories {
@@ -32,5 +32,5 @@ dependencies {
     implementation project(path: ':javaparser', configuration: 'shadow')
     implementation "com.google.code.gson:gson:2.14.0"
     implementation 'com.squareup:javapoet:1.13.0'
-    implementation 'com.google.guava:guava:33.7.1-jre'
+    implementation 'com.google.guava:guava:33.7.2-jre'
 }
diff --git a/gradle-scripts/subproject-dependencies.gradle b/gradle-scripts/subproject-dependencies.gradle
index a11f5ef0f8..cd457e9cd4 100644
--- a/gradle-scripts/subproject-dependencies.gradle
+++ b/gradle-scripts/subproject-dependencies.gradle
@@ -6,7 +6,7 @@ dependencies {
     testImplementation 'org.skyscreamer:jsonassert:1.5.3'
     testImplementation 'com.google.code.gson:gson:2.14.0'
     testImplementation 'org.mockito:mockito-inline:5.2.0'
-    testImplementation 'org.mockito:mockito-junit-jupiter:5.23.0'
+    testImplementation 'org.mockito:mockito-junit-jupiter:5.24.0'
     testRuntimeOnly 'org.junit.platform:junit-platform-launcher'
     testImplementation 'com.vdurmont:semver4j:3.1.0'
 }
diff --git a/gradle/wrapper/gradle-wrapper.properties b/gradle/wrapper/gradle-wrapper.properties
index c42672d95b..1a31fd1b83 100644
--- a/gradle/wrapper/gradle-wrapper.properties
+++ b/gradle/wrapper/gradle-wrapper.properties
@@ -1,6 +1,6 @@
 distributionBase=GRADLE_USER_HOME
 distributionPath=wrapper/dists
-distributionUrl=https\://services.gradle.org/distributions/gradle-9.7.1-bin.zip
+distributionUrl=https\://services.gradle.org/distributions/gradle-9.8.1-bin.zip
 networkTimeout=10000
 validateDistributionUrl=true
 zipStoreBase=GRADLE_USER_HOME
diff --git a/package.json b/package.json
index 436e8482a3..c856eeeec8 100644
--- a/package.json
+++ b/package.json
@@ -11,12 +11,12 @@
   },
   "dependencies": {
     "husky": "9.1.7",
-    "lint-staged": "17.3.0"
+    "lint-staged": "17.6.0"
   },
   "scripts": {
     "postinstall": "husky",
     "format": "./gradlew spotlessApply",
     "prepare": "husky"
   },
-  "packageManager": "yarn@4.18.0"
+  "packageManager": "yarn@4.18.1"
 }
diff --git a/rmf/rmf-java-base/build.gradle b/rmf/rmf-java-base/build.gradle
index 997358af02..4e536170f0 100644
--- a/rmf/rmf-java-base/build.gradle
+++ b/rmf/rmf-java-base/build.gradle
@@ -4,8 +4,8 @@ dependencies {
     api 'tools.jackson.core:jackson-databind:3.2.3'
     api 'tools.jackson.core:jackson-core:3.2.3'
 //    api jackson_core.datatype
-    api 'org.apache.commons:commons-lang3:3.20.0'
-    api 'org.slf4j:slf4j-api:2.0.18'
+    api 'org.apache.commons:commons-lang3:3.21.0'
+    api 'org.slf4j:slf4j-api:2.0.20'
     api 'dev.failsafe:failsafe:3.3.2'
     api "com.spotify:completable-futures:0.3.6"
     api "org.reflections:reflections:0.10.2"
diff --git a/yarn.lock b/yarn.lock
index b932304197..7fd9502382 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -10,7 +10,7 @@ __metadata:
   resolution: "commercetools-sdk-java-v2@workspace:."
   dependencies:
     husky: "npm:9.1.7"
-    lint-staged: "npm:17.3.0"
+    lint-staged: "npm:17.6.0"
   languageName: unknown
   linkType: soft
 
@@ -23,27 +23,27 @@ __metadata:
   languageName: node
   linkType: hard
 
-"lint-staged@npm:17.3.0":
-  version: 17.3.0
-  resolution: "lint-staged@npm:17.3.0"
+"lint-staged@npm:17.6.0":
+  version: 17.6.0
+  resolution: "lint-staged@npm:17.6.0"
   dependencies:
-    picomatch: "npm:^4.0.5"
+    picomatch: "npm:^4.0.7"
     string-argv: "npm:^0.3.2"
-    tinyexec: "npm:^1.2.4"
-    yaml: "npm:^2.9.0"
+    tinyexec: "npm:^1.3.1"
+    yaml: "npm:^2.9.1"
   dependenciesMeta:
     yaml:
       optional: true
   bin:
     lint-staged: bin/lint-staged.js
-  checksum: 10c0/48703bf88fd834a5575b4f7fc77aadc7be21017ca66db4255b8962515f7b3df523ec23a1f198fb89eddc838268f2472a613723a7b058ad9260367a1698ce76e1
+  checksum: 10c0/016905cebb46de70ff8de63db8527592d595709b31982f274677f252ac2037f2e446c92e0662ef6ba6a0dbf42e36324ae30df4d8b4cbc5032d219343cc306512
   languageName: node
   linkType: hard
 
-"picomatch@npm:^4.0.5":
-  version: 4.0.5
-  resolution: "picomatch@npm:4.0.5"
-  checksum: 10c0/947bc6b6e1ff1e6c5aaf95b107a0839d12802f4f7b867663f67d47accba939ca1cb582cf99dfc30438efa1c4648ac5990967e783e8929c36b03e8440704ef1bd
+"picomatch@npm:^4.0.7":
+  version: 4.0.7
+  resolution: "picomatch@npm:4.0.7"
+  checksum: 10c0/beb6ae02c43ae44e84883b90830196d9046b1726ead292adcf7f57945e0bb0d992d68563d87e03b484b6f3c9a5c6defda7523477f047d7f0e663f126cc01787f
   languageName: node
   linkType: hard
 
@@ -54,18 +54,18 @@ __metadata:
   languageName: node
   linkType: hard
 
-"tinyexec@npm:^1.2.4":
-  version: 1.3.0
-  resolution: "tinyexec@npm:1.3.0"
-  checksum: 10c0/e9b89f97489d2aab2cef408da279e6b32547e738d1275032ccb8fd0028a006d93eb70fc51c6cffd9fc2f5aca6c2a273d8b6f73b52d46ee5116da6b94969ef958
+"tinyexec@npm:^1.3.1":
+  version: 1.3.1
+  resolution: "tinyexec@npm:1.3.1"
+  checksum: 10c0/c590369cb3fa73cc18a3998caec8a00f9712d91309c881be3ac52b160fb2f80c7b1fbf3591858ab6abab47ad55385b0c86ec19982e32441a01f55298dab9ccd2
   languageName: node
   linkType: hard
 
-"yaml@npm:^2.9.0":
-  version: 2.9.0
-  resolution: "yaml@npm:2.9.0"
+"yaml@npm:^2.9.1":
+  version: 2.9.1
+  resolution: "yaml@npm:2.9.1"
   bin:
     yaml: bin.mjs
-  checksum: 10c0/f340718df45e97a9551b9bf9dac61c80050bc464513b710debfb5067c380c8472e3b67809cffacb4ab5ffb5e66ef9310816c88b05f371cec60abfedd8c88e0a2
+  checksum: 10c0/9d06676ef02b89559a8b10a71882bd2cdae81e8393dc8dbc871615c3259475d9609ad973d19cb3c9e71e72d6206e3d1e7aa241c7e55f3d16fd2e77db305827d6
   languageName: node
   linkType: hard