diff --git a/CHANGELOG.md b/CHANGELOG.md
index a15194216..0268cf137 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -162,12 +162,12 @@ Version 5.x is JDK17 LTS bytecode compatible, with Docker and JUnit / direct Jav
   * Move all controller-related code from "com.adobe.testing.s3mock" to "com.adobe.testing.s3mock.controller" package.
   * Remove Apache libraries like "commons-compress", "commons-codec" or "commons-lang3" from dependencies. Kotlin and Java standard library provide similar functionality.
 * Version updates (deliverable dependencies)
-  * Bump spring-boot.version from 3.5.8 to 4.0.2
+  * Bump spring-boot.version from 3.5.8 to 4.0.3
   * Bump Java version from 17 to 25
     * Compile with Java 25, target Java 17. [This follows Spring guidance](https://spring.io/blog/2025/11/13/spring-framework-7-0-general-availability)
     * Docker container runs Java 25
   * Bump Bump testcontainers.version from 1.21.3 to 2.0.2
-  * Bump kotlin.version from 2.2.21 to 2.3.0
+  * Bump kotlin.version from 2.2.21 to 2.3.10
     * Compile with Kotlin 2.3, target Kotlin 2.2. [This follows Spring guidance](https://spring.io/blog/2025/12/18/next-level-kotlin-support-in-spring-boot-4#kotlin-2-baseline)
   * Bump alpine from 3.23.0 to 3.23.3 in /docker
   * Bump org.testng:testng from 7.11.0 to 7.12.0
@@ -189,9 +189,9 @@ Version 5.x is JDK17 LTS bytecode compatible, with Docker and JUnit / direct Jav
   * Bump actions/dependency-review-action from 4.8.2 to 4.8.3
   * Bump actions/setup-java from 5.0.0 to 5.2.0
   * Bump actions/stale from 10.1.1 to 10.2.0
-  * Bump actions/upload-artifact from 5.0.0 to 6.0.0
+  * Bump actions/upload-artifact from 5.0.0 to 7.0.0
   * Bump github/codeql-action from 4.31.6 to 4.32.4
-  * Bump step-security/harden-runner from 2.13.3 to 2.14.2
+  * Bump step-security/harden-runner from 2.13.3 to 2.15.0
 
 # DEPRECATED - 4.x
 Version 4.x is JDK17 LTS bytecode compatible, with Docker and JUnit / direct Java integration.