diff --git a/pom.xml b/pom.xml
index 980c125f8..a47f3a4cb 100644
--- a/pom.xml
+++ b/pom.xml
@@ -47,7 +47,7 @@
 		<maven.source.plugin.version>3.4.0</maven.source.plugin.version>
 		<!-- make sure that spring core and spring boot versions are compatible-->
 		<spring.boot.version>4.0.6</spring.boot.version>
-		<spring.core.version>7.0.7</spring.core.version>
+		<spring.core.version>7.0.8</spring.core.version>
 		<spring.security.version>7.0.5</spring.security.version>
 		<spring.security.oauth2.version>7.0.5</spring.security.oauth2.version>
 		<spring.security.jwt.version>1.1.1.RELEASE</spring.security.jwt.version>
@@ -57,8 +57,8 @@
 		<legacy3.spring.security.version>6.5.10</legacy3.spring.security.version>
 		<legacy3.spring.security.oauth2.version>6.5.10</legacy3.spring.security.oauth2.version>
 		<legacy3.reactor.version>3.8.2</legacy3.reactor.version>
-		<org.eclipse.jetty.version>12.1.9</org.eclipse.jetty.version>
-		<reactor.version>3.8.5</reactor.version>
+		<org.eclipse.jetty.version>12.1.10</org.eclipse.jetty.version>
+		<reactor.version>3.8.6</reactor.version>
 		<log4j2.version>2.26.0</log4j2.version>
 		<slf4j.api.version>2.0.18</slf4j.api.version> <!--see also here http://www.slf4j.org/faq.html#changesInVersion18 -->
 		<org.json.version>20251224</org.json.version>
@@ -68,16 +68,16 @@
 		<commons.io.version>2.22.0</commons.io.version>
 		<jakarta.servlet.api.version>6.1.0</jakarta.servlet.api.version>
 		<junit.version>4.13.2</junit.version>
-		<junit-jupiter.version>6.0.3</junit-jupiter.version>
-		<maven-surefire-plugin>3.5.5</maven-surefire-plugin>
+		<junit-jupiter.version>6.1.0</junit-jupiter.version>
+		<maven-surefire-plugin>3.5.6</maven-surefire-plugin>
 		<hamcrest.version>1.3</hamcrest.version>
 		<mockito.version>5.23.0</mockito.version>
 		<assertj.version>3.27.7</assertj.version>
 		<wiremock.version>3.13.2</wiremock.version>
-		<reactor.test.version>3.8.5</reactor.test.version>
+		<reactor.test.version>3.8.6</reactor.test.version>
 		<jakarta.annotation.version>2.1.1</jakarta.annotation.version>
 		<spotbugs.version>4.9.8.3</spotbugs.version>
-		<spotbugs.annotations.version>4.9.8</spotbugs.annotations.version>
+		<spotbugs.annotations.version>4.10.1</spotbugs.annotations.version>
 		<skipTests>false</skipTests>
 		<jacoco.skip>${skipTests}</jacoco.skip>
 	</properties>
@@ -329,7 +329,7 @@
 						<plugin>
 							<groupId>org.jacoco</groupId>
 							<artifactId>jacoco-maven-plugin</artifactId>
-							<version>0.8.14</version>
+							<version>0.8.15</version>
 							<executions>
 								<execution>
 									<id>default-prepare-agent</id>
diff --git a/spring-security-3/pom.xml b/spring-security-3/pom.xml
index 2b51e850a..7bc3bc38d 100644
--- a/spring-security-3/pom.xml
+++ b/spring-security-3/pom.xml
@@ -54,8 +54,8 @@
 		<spring.core.version>${legacy3.spring.core.version}</spring.core.version>
 		<spring.security.version>${legacy3.spring.security.version}</spring.security.version>
 		<spring.security.oauth2.version>${legacy3.spring.security.oauth2.version}</spring.security.oauth2.version>
-		<reactor.version>${legacy3.reactor.version}</reactor.version>
-		<reactor.test.version>${legacy3.reactor.version}</reactor.test.version>
+		<reactor.version>3.8.6</reactor.version>
+		<reactor.test.version>3.8.6</reactor.test.version>
 	</properties>
 
 	<dependencies>
diff --git a/token-client-spring-3/pom.xml b/token-client-spring-3/pom.xml
index d5e37b48b..2582b3aa1 100644
--- a/token-client-spring-3/pom.xml
+++ b/token-client-spring-3/pom.xml
@@ -48,7 +48,7 @@
 
 	<properties>
 		<!-- Override parent's Spring Boot 4.x with Spring Boot 3.x for legacy compatibility -->
-		<spring.core.version>${legacy3.spring.core.version}</spring.core.version>
+		<spring.core.version>7.0.8</spring.core.version>
 	</properties>
 
 	<dependencies>