diff --git a/gradle.properties b/gradle.properties
index 72b4f299fb..be4c2fa4e7 100644
--- a/gradle.properties
+++ b/gradle.properties
@@ -126,7 +126,7 @@ commonmarkVersion=0.27.1
 # the beanutils version is not the default version brought from commons-validator and/or commons-digester
 # in the :server:api module but is required for some of our code to compile
 commonsBeanutilsVersion=1.11.0
-commonsCodecVersion=1.20.0
+commonsCodecVersion=1.21.0
 commonsCollections4Version=4.5.0
 commonsCollectionsVersion=3.2.2
 commonsCompressVersion=1.28.0
@@ -136,14 +136,14 @@ commonsDiscoveryVersion=0.2
 commonsIoVersion=2.21.0
 commonsLang3Version=3.20.0
 commonsLangVersion=2.6
-commonsLoggingVersion=1.3.5
+commonsLoggingVersion=1.3.6
 commonsMath3Version=3.6.1
 commonsPoolVersion=1.6
 commonsTextVersion=1.15.0
 commonsValidatorVersion=1.10.1
 commonsVfs2Version=2.10.0
 
-datadogVersion=1.58.2
+datadogVersion=1.60.1
 
 dom4jVersion=2.2.0
 
@@ -161,7 +161,7 @@ fopVersion=2.11
 googleApiVersion=2.47.0
 googleAuthVersion=1.40.0
 googleAutoValueAnnotationsVersion=1.10.4
-googleErrorProneAnnotationsVersion=2.46.0
+googleErrorProneAnnotationsVersion=2.48.0
 googleHttpClientVersion=2.1.0
 googleOauthClientVersion=1.39.0
 googleProtocolBufVersion=3.25.8
@@ -172,13 +172,13 @@ googleProtocolBufVersion=3.25.8
 # "java.lang.NoSuchMethodError: 'void com.google.gson.internal.ConstructorConstructor.<init>(java.util.Map)'" errors
 gsonVersion=2.8.9
 
-grpcVersion=1.78.0
+grpcVersion=1.79.0
 
 guavaVersion=33.5.0-jre
 
 # Note: You won't find usages in the product sources; this property is used by the gradle plugin.
-gwtVersion=2.12.2
-gwtServletJakartaVersion=2.12.2
+gwtVersion=2.13.0
+gwtServletJakartaVersion=2.13.0
 
 # force hadoop-hdfs-client for CVE-2021-37404, CVE-2022-25168, CVE-2022-26612, CVE-2021-25642, CVE-2021-33036, CVE-2023-26031,
 hadoopHdfsClientVersion=3.4.1
@@ -189,7 +189,7 @@ hamcrestVersion=2.2
 htsjdkVersion=4.3.0
 
 httpclient5Version=5.5.2
-httpcore5Version=5.4
+httpcore5Version=5.4.1
 
 # Not used directly, but these are widely used transitive dependencies
 httpclientVersion=4.5.14
@@ -219,7 +219,7 @@ jaxbApiOldVersion=2.3.1
 jaxbOldVersion=2.3.3
 
 # All other direct and indirect uses of JAXB use the current, jakarta-packaged versions
-jaxbApiVersion=4.0.4
+jaxbApiVersion=4.0.5
 jaxbVersion=4.0.6
 
 jaxrpcVersion=1.1
@@ -253,7 +253,7 @@ log4j2Version=2.25.3
 
 lombokVersion=1.18.42
 
-luceneVersion=10.3.2
+luceneVersion=10.4.0
 
 # Microsoft library for sending OAuth2-authenticated notification emails via the Microsoft Graph API
 microsoftGraphVersion=6.59.0
@@ -275,11 +275,11 @@ openTracingVersion=0.33.0
 pdfboxVersion=3.0.4
 
 # sync with version Tika ships
-poiVersion=5.4.0
+poiVersion=5.5.1
 
 pollingWatchVersion=0.2.0
 
-postgresqlDriverVersion=42.7.9
+postgresqlDriverVersion=42.7.10
 
 quartzVersion=2.5.2
 
@@ -307,7 +307,7 @@ springBootVersion=4.0.3
 springVersion=7.0.5
 springAiVersion=2.0.0-M2
 
-sqliteJdbcVersion=3.51.1.0
+sqliteJdbcVersion=3.51.2.0
 
 # NLP and SAML bring stax2-api in as a transitive dependency but with very different versions. We force the later version.
 stax2ApiVersion=4.2.2
@@ -318,7 +318,7 @@ thumbnailatorVersion=0.4.21
 tikaVersion=3.2.3
 
 # sync with Tika
-tukaaniXZVersion=1.10
+tukaaniXZVersion=1.12
 
 validationApiVersion=1.1.0.Final
 validationJakartaApiVersion=3.0.2