diff --git a/gradle/libs.versions.toml b/gradle/libs.versions.toml
index 237583e..e8bcb51 100644
--- a/gradle/libs.versions.toml
+++ b/gradle/libs.versions.toml
@@ -15,8 +15,8 @@ java = "21"
 # intermittently fail class loading on Gradle 9 / JDK 21 under a *cached* build, which is why the
 # Gradle build cache stays disabled (see gradle.properties) — `./gradlew check` itself runs clean
 # on 8.x. The earlier 7.x pin (and its dependabot ignore) has been retired.
-spotless = "8.10.0"
-errorprone-plugin = "5.1.0"
+spotless = "8.10.1"
+errorprone-plugin = "5.1.1"
 errorprone-core = "2.50.0"
 google-java-format = "1.25.2"
 jspecify = "1.0.1"
@@ -35,10 +35,10 @@ argon2-jvm = "2.12"
 
 # Persistence
 jdbi = "3.54.0"
-flyway = "13.3.0"
+flyway = "13.4.0"
 postgresql = "42.7.13"
 hikaricp = "7.1.0"
-aws-sdk = "2.54.2"
+aws-sdk = "2.54.7"
 testcontainers = "1.21.4"
 
 # Spring Boot adapter (Phase 8). Spring Boot 4 / Spring Security 7. Spring Boot 4 standardized