diff --git a/log4j-compress/pom.xml b/log4j-compress/pom.xml
index 47ba798a314..3c9de72c371 100644
--- a/log4j-compress/pom.xml
+++ b/log4j-compress/pom.xml
@@ -29,9 +29,9 @@
   <description>Add additional compression formats to Log4j Core.</description>
 
   <properties>
-    <commons-compress.version>1.27.1</commons-compress.version>
+    <commons-compress.version>1.28.0</commons-compress.version>
     <jimfs.version>1.3.1</jimfs.version>
-    <xz.version>1.10</xz.version>
+    <xz.version>1.12</xz.version>
     <zstd.version>1.5.7-4</zstd.version>
   </properties>
 
diff --git a/log4j-core-test/pom.xml b/log4j-core-test/pom.xml
index 545a2d98a7c..af265f567a1 100644
--- a/log4j-core-test/pom.xml
+++ b/log4j-core-test/pom.xml
@@ -63,7 +63,7 @@
     </bnd-extra-module-options>
 
     <!-- Dependency versions -->
-    <slf4j2.version>2.0.17</slf4j2.version>
+    <slf4j2.version>2.0.18</slf4j2.version>
     <wiremock.version>3.13.1</wiremock.version>
   </properties>
 
@@ -83,7 +83,7 @@
       <dependency>
         <groupId>com.google.code.gson</groupId>
         <artifactId>gson</artifactId>
-        <version>2.13.1</version>
+        <version>2.14.0</version>
       </dependency>
 
     </dependencies>
diff --git a/log4j-kit/pom.xml b/log4j-kit/pom.xml
index 9384222456a..0ad39e6ab54 100644
--- a/log4j-kit/pom.xml
+++ b/log4j-kit/pom.xml
@@ -81,7 +81,7 @@
     <dependency>
       <groupId>org.javassist</groupId>
       <artifactId>javassist</artifactId>
-      <version>3.30.2-GA</version>
+      <version>3.32.0-GA</version>
       <scope>test</scope>
     </dependency>
 
diff --git a/log4j-layout-template-json-test/pom.xml b/log4j-layout-template-json-test/pom.xml
index 1057beba429..58e535c37b4 100644
--- a/log4j-layout-template-json-test/pom.xml
+++ b/log4j-layout-template-json-test/pom.xml
@@ -49,7 +49,7 @@
          2. The Docker image version of the ELK-stack
 
          As of 2024-09-16, these all (Maven artifacts and Elastic products) get released with the same version. -->
-    <elastic.version>9.2.0</elastic.version>
+    <elastic.version>9.4.3</elastic.version>
 
   </properties>
 
@@ -140,7 +140,7 @@
     <dependency>
       <groupId>co.elastic.logging</groupId>
       <artifactId>log4j2-ecs-layout</artifactId>
-      <version>1.7.0</version>
+      <version>1.8.0</version>
       <scope>test</scope>
     </dependency>
 
diff --git a/log4j-mongodb/pom.xml b/log4j-mongodb/pom.xml
index ae414d6cdd9..c24ab4203b4 100644
--- a/log4j-mongodb/pom.xml
+++ b/log4j-mongodb/pom.xml
@@ -37,8 +37,8 @@
     <Fragment-Host>org.apache.logging.log4j.core</Fragment-Host>
 
     <!-- Dependency properties -->
-    <mongodb.version>5.5.1</mongodb.version>
-    <slf4j2.version>2.0.17</slf4j2.version>
+    <mongodb.version>5.9.0</mongodb.version>
+    <slf4j2.version>2.0.18</slf4j2.version>
   </properties>
 
   <dependencyManagement>
diff --git a/log4j-osgi-test/pom.xml b/log4j-osgi-test/pom.xml
index d8272f710e0..46285481262 100644
--- a/log4j-osgi-test/pom.xml
+++ b/log4j-osgi-test/pom.xml
@@ -46,7 +46,7 @@
 
     <!-- Dependency versions -->
     <spifly.version>1.3.7</spifly.version>
-    <logback.version>1.5.18</logback.version>
+    <logback.version>1.5.38</logback.version>
   </properties>
 
   <dependencyManagement>
diff --git a/log4j-parent/pom.xml b/log4j-parent/pom.xml
index 3875cd61bc5..2102c512624 100644
--- a/log4j-parent/pom.xml
+++ b/log4j-parent/pom.xml
@@ -85,7 +85,7 @@
          Plugin version properties (in alphabetical order)
          ================================================= -->
     <asciidoctor-maven-plugin.version>2.2.4</asciidoctor-maven-plugin.version>
-    <docker-maven-plugin.version>0.46.0</docker-maven-plugin.version>
+    <docker-maven-plugin.version>0.48.1</docker-maven-plugin.version>
     <exam-maven-plugin.version>4.14.0</exam-maven-plugin.version>
     <!-- `surefire.version` property used in `apache.org:apache`: -->
     <surefire.version>3.5.2</surefire.version>
@@ -93,32 +93,32 @@
     <!-- =====================================================
          Direct dependency version properties (in alphabetical order)
          ===================================================== -->
-    <assertj.version>3.27.3</assertj.version>
+    <assertj.version>3.27.7</assertj.version>
     <awaitility.version>4.3.0</awaitility.version>
     <bsh.version>2.0b6</bsh.version>
-    <bnd.annotation.version>7.1.0</bnd.annotation.version>
-    <commons-codec.version>1.18.0</commons-codec.version>
-    <commons-csv.version>1.14.0</commons-csv.version>
-    <commons-dbcp2.version>2.13.0</commons-dbcp2.version>
-    <commons-io.version>2.20.0</commons-io.version>
-    <commons-lang3.version>3.17.0</commons-lang3.version>
+    <bnd.annotation.version>7.3.0</bnd.annotation.version>
+    <commons-codec.version>1.22.0</commons-codec.version>
+    <commons-csv.version>1.14.1</commons-csv.version>
+    <commons-dbcp2.version>2.14.0</commons-dbcp2.version>
+    <commons-io.version>2.22.0</commons-io.version>
+    <commons-lang3.version>3.20.0</commons-lang3.version>
     <disruptor.version>4.0.0</disruptor.version>
     <embedded-ldap.version>0.9.0</embedded-ldap.version>
     <felix.version>7.0.5</felix.version>
     <groovy.version>4.0.27</groovy.version>
-    <guava.version>33.4.8-jre</guava.version>
-    <h2.version>2.3.232</h2.version>
+    <guava.version>33.6.0-jre</guava.version>
+    <h2.version>2.4.240</h2.version>
     <hamcrest.version>3.0</hamcrest.version>
     <HdrHistogram.version>2.2.2</HdrHistogram.version>
     <hsqldb.version>2.7.4</hsqldb.version>
     <!-- wiremock and elasticsearch-java libraries used for testing require Jackson 2 -->
     <!-- The log4j project is using Jackson 3. -->
-    <jackson2.test.version>2.20.0</jackson2.test.version>
-    <jackson-bom.version>3.0.0</jackson-bom.version>
+    <jackson2.test.version>2.22.1</jackson2.test.version>
+    <jackson-bom.version>3.2.1</jackson-bom.version>
     <javax-jms.version>2.0.1</javax-jms.version>
-    <java-allocation-instrumenter.version>3.3.4</java-allocation-instrumenter.version>
-    <jctools.version>4.0.5</jctools.version>
-    <jmdns.version>3.6.1</jmdns.version>
+    <java-allocation-instrumenter.version>3.3.5</java-allocation-instrumenter.version>
+    <jctools.version>4.0.6</jctools.version>
+    <jmdns.version>3.6.3</jmdns.version>
     <jmh.version>1.37</jmh.version>
     <json-unit.version>4.1.1</json-unit.version>
     <jspecify.version>1.0.0</jspecify.version>
@@ -127,11 +127,11 @@
     <junit-pioneer.version>2.3.0</junit-pioneer.version>
     <log4j2-custom-layout.version>1.1.0</log4j2-custom-layout.version>
     <log4j2-logstash-layout.version>0.18</log4j2-logstash-layout.version>
-    <maven.version>3.9.10</maven.version>
-    <mockito.version>5.18.0</mockito.version>
-    <nashorn.version>15.6</nashorn.version>
+    <maven.version>3.9.16</maven.version>
+    <mockito.version>5.23.0</mockito.version>
+    <nashorn.version>15.7</nashorn.version>
     <opentest4j.version>1.3.0</opentest4j.version>
-    <org.eclipse.osgi.version>3.23.100</org.eclipse.osgi.version>
+    <org.eclipse.osgi.version>3.24.200</org.eclipse.osgi.version>
     <oro.version>2.0.8</oro.version>
     <!-- The OSGi API version MUST always be the MINIMUM version Log4j supports -->
     <osgi.framework.version>1.10.0</osgi.framework.version>
@@ -139,11 +139,11 @@
     <osgi.annotation.bundle.version>2.0.0</osgi.annotation.bundle.version>
     <osgi.annotation.versioning.version>1.1.2</osgi.annotation.versioning.version>
     <pax-exam.version>4.14.0</pax-exam.version>
-    <plexus-utils.version>3.6.0</plexus-utils.version>
-    <spotbugs-annotations.version>4.9.3</spotbugs-annotations.version>
+    <plexus-utils.version>3.6.1</plexus-utils.version>
+    <spotbugs-annotations.version>4.10.3</spotbugs-annotations.version>
     <system-stubs.version>2.1.8</system-stubs.version>
     <velocity.version>1.7</velocity.version>
-    <xmlunit.version>2.10.3</xmlunit.version>
+    <xmlunit.version>2.12.0</xmlunit.version>
 
     <!-- =====================================================
          Pinned transitive dependency version properties (in alphabetical order)
@@ -153,11 +153,11 @@
          of dependencies (requireUpperBoundDeps rule).
          ===================================================== -->
     <asm.version>9.6</asm.version>
-    <byte-buddy.version>1.17.6</byte-buddy.version>
-    <commons-pool2.version>2.12.1</commons-pool2.version>
+    <byte-buddy.version>1.18.11</byte-buddy.version>
+    <commons-pool2.version>2.13.1</commons-pool2.version>
     <httpclient.version>4.5.14</httpclient.version>
     <httpcore.version>4.4.16</httpcore.version>
-    <jna.version>5.17.0</jna.version>
+    <jna.version>5.19.1</jna.version>
 
   </properties>
 
diff --git a/log4j-perf-test/pom.xml b/log4j-perf-test/pom.xml
index 2803d4ca53d..a3ae30951e0 100644
--- a/log4j-perf-test/pom.xml
+++ b/log4j-perf-test/pom.xml
@@ -40,9 +40,9 @@
 
     <!-- Dependency versions -->
     <reload4j.version>1.2.26</reload4j.version>
-    <log4j2-ecs-layout.version>1.7.0</log4j2-ecs-layout.version>
-    <logback.version>1.5.18</logback.version>
-    <slf4j2.version>2.0.17</slf4j2.version>
+    <log4j2-ecs-layout.version>1.8.0</log4j2-ecs-layout.version>
+    <logback.version>1.5.38</logback.version>
+    <slf4j2.version>2.0.18</slf4j2.version>
   </properties>
 
   <dependencyManagement>
diff --git a/log4j-spring-cloud-config-client/pom.xml b/log4j-spring-cloud-config-client/pom.xml
index 807dcdc52b5..b445b3c1216 100644
--- a/log4j-spring-cloud-config-client/pom.xml
+++ b/log4j-spring-cloud-config-client/pom.xml
@@ -35,7 +35,7 @@
   <properties>
     <!-- Dependency version -->
     <spring-boot.version>3.5.3</spring-boot.version>
-    <commons-logging.version>1.3.5</commons-logging.version>
+    <commons-logging.version>1.4.0</commons-logging.version>
     <spring-cloud.version>4.3.0</spring-cloud.version>
     <spring-framework.version>6.2.9</spring-framework.version>
 
diff --git a/pom.xml b/pom.xml
index da61feb444f..4c16efaf83f 100644
--- a/pom.xml
+++ b/pom.xml
@@ -320,7 +320,7 @@
     <project.build.outputTimestamp>2024-11-09T05:50:28Z</project.build.outputTimestamp>
 
     <!-- Version of Log4j API required -->
-    <log4j-api.version>2.24.3</log4j-api.version>
+    <log4j-api.version>2.26.1</log4j-api.version>
 
     <!-- ========================
          Site-specific properties
@@ -334,16 +334,16 @@
     <!-- Skipping `maven-site-plugin` globally. -->
     <maven.site.skip>true</maven.site.skip>
     <maven.site.deploy.skip>true</maven.site.deploy.skip>
-    <site-commons-csv.version>1.14.0</site-commons-csv.version>
-    <site-commons-logging.version>1.3.5</site-commons-logging.version>
+    <site-commons-csv.version>1.14.1</site-commons-csv.version>
+    <site-commons-logging.version>1.4.0</site-commons-logging.version>
     <site-conversant.version>1.2.21</site-conversant.version>
     <site-flume.version>1.11.0</site-flume.version>
     <site-je.version>18.3.12</site-je.version>
     <site-log4j-core.version>3.0.0-beta3</site-log4j-core.version>
     <site-log4j-jakarta.version>3.0.0-alpha1</site-log4j-jakarta.version>
     <site-log4j-layout-template-json.version>3.0.0-beta3</site-log4j-layout-template-json.version>
-    <site-logback.version>1.5.18</site-logback.version>
-    <site-slf4j.version>2.0.17</site-slf4j.version>
+    <site-logback.version>1.5.38</site-logback.version>
+    <site-slf4j.version>2.0.18</site-slf4j.version>
 
     <!-- =====================================================
          Direct dependency version properties (in alphabetical order)