diff --git a/bom/pom.xml b/bom/pom.xml
index 740afb016..e7cff585a 100644
--- a/bom/pom.xml
+++ b/bom/pom.xml
@@ -159,7 +159,7 @@
                     <plugin>
                         <groupId>org.sonatype.central</groupId>
                         <artifactId>central-publishing-maven-plugin</artifactId>
-                        <version>0.10.0</version>
+                        <version>0.11.0</version>
                         <extensions>true</extensions>
                         <configuration>
                             <publishingServerId>central</publishingServerId>
diff --git a/pom.xml b/pom.xml
index 74c44c22f..01c142f00 100644
--- a/pom.xml
+++ b/pom.xml
@@ -46,10 +46,10 @@
 		<maven.compiler.source>17</maven.compiler.source>
 		<maven.source.plugin.version>3.4.0</maven.source.plugin.version>
 		<!-- make sure that spring core and spring boot versions are compatible-->
-		<spring.boot.version>4.0.6</spring.boot.version>
-		<spring.core.version>7.0.7</spring.core.version>
-		<spring.security.version>7.0.5</spring.security.version>
-		<spring.security.oauth2.version>7.0.5</spring.security.oauth2.version>
+		<spring.boot.version>4.1.0</spring.boot.version>
+		<spring.core.version>7.0.8</spring.core.version>
+		<spring.security.version>7.1.0</spring.security.version>
+		<spring.security.oauth2.version>7.1.0</spring.security.oauth2.version>
 		<spring.security.jwt.version>1.1.1.RELEASE</spring.security.jwt.version>
 		<!-- Spring Boot 3.x / Spring Framework 6.x compatibility versions for legacy modules -->
 		<legacy3.spring.boot.version>3.5.14</legacy3.spring.boot.version>
@@ -57,8 +57,8 @@
 		<legacy3.spring.security.version>6.5.10</legacy3.spring.security.version>
 		<legacy3.spring.security.oauth2.version>6.5.10</legacy3.spring.security.oauth2.version>
 		<legacy3.reactor.version>3.8.2</legacy3.reactor.version>
-		<org.eclipse.jetty.version>12.1.9</org.eclipse.jetty.version>
-		<reactor.version>3.8.5</reactor.version>
+		<org.eclipse.jetty.version>12.1.10</org.eclipse.jetty.version>
+		<reactor.version>3.8.6</reactor.version>
 		<log4j2.version>2.26.0</log4j2.version>
 		<slf4j.api.version>2.0.18</slf4j.api.version> <!--see also here http://www.slf4j.org/faq.html#changesInVersion18 -->
 		<org.json.version>20251224</org.json.version>
@@ -68,16 +68,16 @@
 		<commons.io.version>2.22.0</commons.io.version>
 		<jakarta.servlet.api.version>6.1.0</jakarta.servlet.api.version>
 		<junit.version>4.13.2</junit.version>
-		<junit-jupiter.version>6.0.3</junit-jupiter.version>
-		<maven-surefire-plugin>3.5.5</maven-surefire-plugin>
+		<junit-jupiter.version>6.1.0</junit-jupiter.version>
+		<maven-surefire-plugin>3.5.6</maven-surefire-plugin>
 		<hamcrest.version>1.3</hamcrest.version>
 		<mockito.version>5.23.0</mockito.version>
 		<assertj.version>3.27.7</assertj.version>
 		<wiremock.version>3.13.2</wiremock.version>
-		<reactor.test.version>3.8.5</reactor.test.version>
+		<reactor.test.version>3.8.6</reactor.test.version>
 		<jakarta.annotation.version>2.1.1</jakarta.annotation.version>
-		<spotbugs.version>4.9.8.3</spotbugs.version>
-		<spotbugs.annotations.version>4.9.8</spotbugs.annotations.version>
+		<spotbugs.version>4.10.2.0</spotbugs.version>
+		<spotbugs.annotations.version>4.10.2</spotbugs.annotations.version>
 		<skipTests>false</skipTests>
 		<jacoco.skip>${skipTests}</jacoco.skip>
 	</properties>
@@ -329,7 +329,7 @@
 						<plugin>
 							<groupId>org.jacoco</groupId>
 							<artifactId>jacoco-maven-plugin</artifactId>
-							<version>0.8.14</version>
+							<version>0.8.15</version>
 							<executions>
 								<execution>
 									<id>default-prepare-agent</id>
@@ -460,7 +460,7 @@
 					<plugin>
 						<groupId>org.sonatype.central</groupId>
 						<artifactId>central-publishing-maven-plugin</artifactId>
-						<version>0.10.0</version>
+						<version>0.11.0</version>
 						<extensions>true</extensions>
 						<configuration>
 							<publishingServerId>central</publishingServerId>
diff --git a/spring-security-3-starter/pom.xml b/spring-security-3-starter/pom.xml
index 53aa007fe..88cea818f 100644
--- a/spring-security-3-starter/pom.xml
+++ b/spring-security-3-starter/pom.xml
@@ -58,9 +58,9 @@
 		<project.reporting.outputEncoding>UTF-8</project.reporting.outputEncoding>
 		<java.version>17</java.version>
 		<!-- Override parent's Spring Boot 4.x with Spring Boot 3.x for legacy compatibility -->
-		<spring.boot.version>${legacy3.spring.boot.version}</spring.boot.version>
+		<spring.boot.version>4.1.0</spring.boot.version>
 		<spring.security.version>${legacy3.spring.security.version}</spring.security.version>
-		<spring.security.oauth2.version>${legacy3.spring.security.oauth2.version}</spring.security.oauth2.version>
+		<spring.security.oauth2.version>7.1.0</spring.security.oauth2.version>
 	</properties>
 
 	<dependencies>
diff --git a/spring-security-3/pom.xml b/spring-security-3/pom.xml
index f1df8ebe6..8ac8c4f95 100644
--- a/spring-security-3/pom.xml
+++ b/spring-security-3/pom.xml
@@ -50,12 +50,12 @@
 
 	<properties>
 		<!-- Override parent's Spring Boot 4.x with Spring Boot 3.x for legacy compatibility -->
-		<spring.boot.version>${legacy3.spring.boot.version}</spring.boot.version>
+		<spring.boot.version>4.1.0</spring.boot.version>
 		<spring.core.version>${legacy3.spring.core.version}</spring.core.version>
 		<spring.security.version>${legacy3.spring.security.version}</spring.security.version>
-		<spring.security.oauth2.version>${legacy3.spring.security.oauth2.version}</spring.security.oauth2.version>
-		<reactor.version>${legacy3.reactor.version}</reactor.version>
-		<reactor.test.version>${legacy3.reactor.version}</reactor.test.version>
+		<spring.security.oauth2.version>7.1.0</spring.security.oauth2.version>
+		<reactor.version>3.8.6</reactor.version>
+		<reactor.test.version>3.8.6</reactor.test.version>
 	</properties>
 
 	<dependencies>
diff --git a/token-client-spring-3/pom.xml b/token-client-spring-3/pom.xml
index 2460fd538..8ddf6e19a 100644
--- a/token-client-spring-3/pom.xml
+++ b/token-client-spring-3/pom.xml
@@ -48,7 +48,7 @@
 
 	<properties>
 		<!-- Override parent's Spring Boot 4.x with Spring Boot 3.x for legacy compatibility -->
-		<spring.core.version>${legacy3.spring.core.version}</spring.core.version>
+		<spring.core.version>7.0.8</spring.core.version>
 	</properties>
 
 	<dependencies>