diff --git a/gradle/libs.versions.toml b/gradle/libs.versions.toml
index e67dfb57..1c1278bc 100644
--- a/gradle/libs.versions.toml
+++ b/gradle/libs.versions.toml
@@ -1,11 +1,11 @@
 [versions]
-agp = "9.2.1"
+agp = "9.5.1"
 # Kotlin version bundled by AGP 9.2.1's built-in Kotlin support. The compose and
 # serialization compiler plugins must track this exactly. See memory/plan.md §11.
-kotlin = "2.2.10"
+kotlin = "2.4.21"
 # Independently versioned since KSP 2.3.0 — it no longer tracks `kotlin` above. 2.3.6 is the
 # minimum that registers generated sources without `android.disallowKotlinSourceSets=false`.
-ksp = "2.3.6"
+ksp = "2.3.13"
 
 
 activityCompose = "1.10.1"
@@ -14,13 +14,13 @@ composeBom = "2026.09.00"
 
 material3 = "1.5.0-alpha25"
 composeCore = "1.12.0-rc01"
-coreKtx = "1.10.1"
+coreKtx = "1.19.1"
 credentials = "1.6.0"
-datastore = "1.1.1"
+datastore = "1.3.0"
 espressoCore = "3.7.0"
 # `GetSignInWithGoogleOption` and `GoogleIdTokenCredential`. Versioned independently of
 # androidx.credentials and published only to Google's maven, not Maven Central.
-googleid = "1.2.0"
+googleid = "1.2.1"
 # Google Play Billing for the managed cloud-storage subscription. This is intentionally separate
 # from Sign in with Google: identity and payment are different Play services with different
 # credentials and lifecycles. 9.1.0 is the current stable line as of 2026-09-03.
@@ -31,13 +31,13 @@ ink = "1.1.0-alpha06"
 junit = "4.13.2"
 junitVersion = "1.3.0"
 # Room 2.8's migration-test serializers require the default interface methods added in 1.8.
-kotlinxSerialization = "1.8.1"
+kotlinxSerialization = "1.12.0"
 lifecycle = "2.8.7"
-room = "2.8.1"
-ratex = "0.1.13"
-onnxRuntime = "1.27.0"
-chaquopy = "17.0.0"
-work = "2.11.2"
+room = "2.8.5"
+ratex = "0.1.15"
+onnxRuntime = "1.31.1"
+chaquopy = "17.2.0"
+work = "2.12.0"
 
 [libraries]
 androidx-activity-compose = { group = "androidx.activity", name = "activity-compose", version.ref = "activityCompose" }
@@ -74,7 +74,7 @@ google-identity-googleid = { group = "com.google.android.libraries.identity.goog
 google-play-billing = { group = "com.android.billingclient", name = "billing", version.ref = "playBilling" }
 google-play-review-ktx = { group = "com.google.android.play", name = "review-ktx", version.ref = "playReview" }
 junit = { group = "junit", name = "junit", version.ref = "junit" }
-kotlinx-coroutines-test = { group = "org.jetbrains.kotlinx", name = "kotlinx-coroutines-test", version = "1.9.0" }
+kotlinx-coroutines-test = { group = "org.jetbrains.kotlinx", name = "kotlinx-coroutines-test", version = "1.11.0" }
 kotlinx-serialization-cbor = { group = "org.jetbrains.kotlinx", name = "kotlinx-serialization-cbor", version.ref = "kotlinxSerialization" }
 kotlinx-serialization-json = { group = "org.jetbrains.kotlinx", name = "kotlinx-serialization-json", version.ref = "kotlinxSerialization" }
 ratex-android = { group = "io.github.erweixin", name = "ratex-android", version.ref = "ratex" }
diff --git a/gradle/wrapper/gradle-wrapper.jar b/gradle/wrapper/gradle-wrapper.jar
index b1b8ef56..9fa7f288 100644
Binary files a/gradle/wrapper/gradle-wrapper.jar and b/gradle/wrapper/gradle-wrapper.jar differ
diff --git a/gradle/wrapper/gradle-wrapper.properties b/gradle/wrapper/gradle-wrapper.properties
index 69dd0d04..91c4fc64 100644
--- a/gradle/wrapper/gradle-wrapper.properties
+++ b/gradle/wrapper/gradle-wrapper.properties
@@ -1,6 +1,6 @@
 distributionBase=GRADLE_USER_HOME
 distributionPath=wrapper/dists
-distributionUrl=https\://services.gradle.org/distributions/gradle-9.7.0-bin.zip
+distributionUrl=https\://services.gradle.org/distributions/gradle-9.8.2-bin.zip
 networkTimeout=10000
 retries=0
 retryBackOffMs=500