diff --git a/dependencies.toml b/dependencies.toml
index 2f78ce30f..1306af520 100644
--- a/dependencies.toml
+++ b/dependencies.toml
@@ -3,14 +3,14 @@
 #     If its classes are exposed in Javadoc, update offline links as well.
 #
 [versions]
-armeria = "1.39.0"
+armeria = "1.40.0"
 assertj = "3.27.7"
 awaitility = "4.3.0"
 bouncycastle = "1.84"
 caffeine = "3.2.4"
 checkstyle = "10.3.3"
 conscrypt = "2.5.2"
-controlplane = "1.0.52"
+controlplane = "1.0.53"
 # Ensure that we use the same ZooKeeper version as what Curator depends on.
 # See: https://github.com/apache/curator/blob/master/pom.xml
 #      (Switch to the right tag to find out the right version.)
@@ -19,19 +19,19 @@ curator = "5.9.0"
 cron-utils = "9.2.0"
 diffutils = "1.3.0"
 download = "5.7.0"
-dropwizard-metrics = "4.2.38"
+dropwizard-metrics = "4.2.39"
 eddsa = "0.3.0"
 findbugs = "3.0.2"
 freemarker = "2.3.34"
 futures-completable = "0.3.6"
-grpc-java = "1.81.0"
+grpc-java = "1.82.0"
 guava = "33.6.0-jre"
 guava-failureaccess = "1.0.1"
 hamcrest-library = "3.0"
 hibernate-validator6 = "6.2.5.Final"
 hibernate-validator8 = "8.0.3.Final"
 hibernate-validator9 = "9.1.0.Final"
-jackson = "2.21.3"
+jackson = "2.22.0"
 javassist = "3.31.0-GA"
 javax-annotation = "1.3.2"
 javax-inject = "1"
@@ -43,7 +43,7 @@ jetty-alpn-agent = "2.0.10"
 jgit6 = "6.10.1.202505221210-r"
 junit4 = "4.13.2"
 # junit6 requires java 17
-junit5 = "5.14.2"
+junit5 = "5.14.4"
 junit-pioneer = "2.3.0"
 jsch = "0.1.55"
 # Don't update `json-path` version
@@ -56,33 +56,33 @@ jmh-core = "1.37"
 jmh-gradle-plugin = "0.7.3"
 jxr = "0.2.1"
 kubernetes-client = "7.7.0"
-logback15 = "1.5.32"
-micrometer = "1.16.5"
-mina-sshd = "2.17.1"
+logback15 = "1.5.34"
+micrometer = "1.17.0"
+mina-sshd = "2.18.0"
 mockito = "5.23.0"
-nimbus-jose-jwt = "10.9"
+nimbus-jose-jwt = "10.9.1"
 nexus-publish-plugin = "2.0.0"
 node-gradle-plugin = "7.1.0"
 osdetector = "1.7.3"
 owasp = "1.4.0"
-proguard = "7.8.1"
-prometheus-metrics = "1.6.1"
-protobuf = "3.25.8"
-protobuf-gradle-plugin = "0.9.5"
+proguard = "7.9.1"
+prometheus-metrics = "1.8.0"
+protobuf = "3.25.9"
+protobuf-gradle-plugin = "0.10.0"
 quartz = "2.5.2"
 reflections = "0.9.11"
 rocksdb = "10.10.1.1"
-shadow-gradle-plugin = "8.3.9"
+shadow-gradle-plugin = "9.4.2"
 # Don't update `shiro` version
 shiro = "1.3.2"
-slf4j2 = "2.0.17"
+slf4j2 = "2.0.18"
 # Ensure that we use the same Snappy version as what Curator depends on.
 # See: https://github.com/apache/curator/blob/master/pom.xml
 snappy = "1.1.10.8"
 sphinx = "2.10.1"
 spring-boot2 = "2.7.18"
-spring-boot3 = "3.5.10"
-spring-boot4 = "4.0.6"
+spring-boot3 = "3.5.15"
+spring-boot4 = "4.1.0"
 spring-test-junit5 = "1.5.0"
 testcontainers = "2.0.5"
 thrift09 = { strictly = "0.9.3-1" }
@@ -90,7 +90,7 @@ thrift09 = { strictly = "0.9.3-1" }
 # See: https://github.com/apache/curator/blob/master/pom.xml
 #      (Switch to the right tag to find out the right version.)
 zookeeper = "3.9.3"
-zstd = "1.5.7-8"
+zstd = "1.5.7-11"
 
 [boms]
 armeria = { module = "com.linecorp.armeria:armeria-bom", version.ref = "armeria" }