diff --git a/.config/dotnet-tools.json b/.config/dotnet-tools.json
index 1611eda7..39007e02 100644
--- a/.config/dotnet-tools.json
+++ b/.config/dotnet-tools.json
@@ -3,11 +3,11 @@
   "isRoot": true,
   "tools": {
     "dotnet-ef": {
-      "version": "10.0.12",
+      "version": "10.0.13",
       "commands": [
         "dotnet-ef"
       ],
       "rollForward": false
     }
   }
-}
+}
\ No newline at end of file
diff --git a/Directory.Packages.props b/Directory.Packages.props
index eada19b9..cb2edc59 100644
--- a/Directory.Packages.props
+++ b/Directory.Packages.props
@@ -8,7 +8,7 @@
   </PropertyGroup>
 
   <ItemGroup>
-    <PackageVersion Include="Azure.Extensions.AspNetCore.DataProtection.Keys" Version="1.6.4" />
+    <PackageVersion Include="Azure.Extensions.AspNetCore.DataProtection.Keys" Version="1.6.5" />
     <!-- Microsoft.Data.SqlClient asks for Azure.Identity 1.17.1, which defines its own credential types. From 1.21.0
          the package only forwards them to Azure.Core, which the Key Vault package brings in at 1.61, so a lower
          Azure.Identity would put a second copy of every credential type in the app. -->
@@ -16,15 +16,15 @@
     <PackageVersion Include="Azure.Monitor.OpenTelemetry.AspNetCore" Version="1.6.0" />
     <PackageVersion Include="Azure.Security.KeyVault.Secrets" Version="4.11.2" />
     <PackageVersion Include="DocumentFormat.OpenXml" Version="3.5.1" />
-    <PackageVersion Include="Microsoft.AspNetCore.DataProtection.EntityFrameworkCore" Version="10.0.12" />
-    <PackageVersion Include="Microsoft.AspNetCore.Identity.EntityFrameworkCore" Version="10.0.12" />
+    <PackageVersion Include="Microsoft.AspNetCore.DataProtection.EntityFrameworkCore" Version="10.0.13" />
+    <PackageVersion Include="Microsoft.AspNetCore.Identity.EntityFrameworkCore" Version="10.0.13" />
     <!-- The 6.1 line that EF Core 10's SQL Server provider uses; it keeps managed-identity authentication built in
          (design.md §7.5, §9.4). -->
     <PackageVersion Include="Microsoft.Data.SqlClient" Version="6.1.7" />
-    <PackageVersion Include="Microsoft.EntityFrameworkCore.Design" Version="10.0.12" />
-    <PackageVersion Include="Microsoft.EntityFrameworkCore.SqlServer" Version="10.0.12" />
-    <PackageVersion Include="PDFsharp-MigraDoc" Version="6.2.4" />
-    <PackageVersion Include="QRCoder" Version="1.8.0" />
+    <PackageVersion Include="Microsoft.EntityFrameworkCore.Design" Version="10.0.13" />
+    <PackageVersion Include="Microsoft.EntityFrameworkCore.SqlServer" Version="10.0.13" />
+    <PackageVersion Include="PDFsharp-MigraDoc" Version="6.5.0" />
+    <PackageVersion Include="QRCoder" Version="1.8.1" />
   </ItemGroup>
 
   <!-- Transitive packages pinned past high-severity advisories, which fail the restore (Directory.Build.props).
@@ -37,18 +37,18 @@
   </ItemGroup>
 
   <ItemGroup Label="Tests">
-    <PackageVersion Include="Microsoft.AspNetCore.Mvc.Testing" Version="10.0.12" />
-    <PackageVersion Include="Microsoft.Extensions.TimeProvider.Testing" Version="10.10.0" />
+    <PackageVersion Include="Microsoft.AspNetCore.Mvc.Testing" Version="10.0.13" />
+    <PackageVersion Include="Microsoft.Extensions.TimeProvider.Testing" Version="10.11.0" />
     <!-- xUnit.net v3 without Microsoft Testing Platform, run through VSTest: the .NET 10 SDK's default dotnet test
          mode, which takes `dotnet test Grow2Notes.slnx` as written. The plain xunit.v3 package brings in Microsoft
          Testing Platform v2, which stops dotnet test in that mode. -->
-    <PackageVersion Include="Microsoft.NET.Test.Sdk" Version="18.10.1" />
+    <PackageVersion Include="Microsoft.NET.Test.Sdk" Version="18.11.0" />
     <!-- Reads the text of the PDF files back (Apache-2.0). The package id is PdfPig; UglyToad.PdfPig on the feed has
          no stable release. -->
     <PackageVersion Include="PdfPig" Version="0.1.16" />
-    <PackageVersion Include="Testcontainers.MsSql" Version="4.15.0" />
-    <PackageVersion Include="xunit.runner.visualstudio" Version="4.0.0" />
-    <PackageVersion Include="xunit.v3.mtp-off" Version="4.0.1" />
+    <PackageVersion Include="Testcontainers.MsSql" Version="4.16.0" />
+    <PackageVersion Include="xunit.runner.visualstudio" Version="4.0.1" />
+    <PackageVersion Include="xunit.v3.mtp-off" Version="4.0.2" />
   </ItemGroup>
 
 </Project>