diff --git a/pom.xml b/pom.xml
index d6b575b0..f9e45de0 100644
--- a/pom.xml
+++ b/pom.xml
@@ -47,7 +47,7 @@
         <axonserver.api.version>2026.0.0</axonserver.api.version>
 
         <grpc.version>1.79.0</grpc.version>
-        <protobuf.version>4.34.1</protobuf.version>
+        <protobuf.version>4.35.0</protobuf.version>
 
         <slf4j.version>2.0.16</slf4j.version>
         <log4j.version>2.26.0</log4j.version>
@@ -64,7 +64,7 @@
 
         <httpclient5.version>5.6.1</httpclient5.version>
         <toxiproxy.version>2.1.11</toxiproxy.version>
-        <maven.surefire.plugin.version>3.5.5</maven.surefire.plugin.version>
+        <maven.surefire.plugin.version>3.5.6</maven.surefire.plugin.version>
         <central-publishing-maven-plugin.version>0.10.0</central-publishing-maven-plugin.version>
     </properties>
 
@@ -300,7 +300,7 @@
             <plugin>
                 <groupId>org.apache.maven.plugins</groupId>
                 <artifactId>maven-dependency-plugin</artifactId>
-                <version>3.10.0</version>
+                <version>3.11.0</version>
                 <executions>
                     <execution>
                         <id>unpack</id>
@@ -482,7 +482,7 @@
                 <!-- just to make sure deployed artifacts are always built (and tested) using JDK 8+ -->
                 <groupId>org.apache.maven.plugins</groupId>
                 <artifactId>maven-enforcer-plugin</artifactId>
-                <version>3.6.2</version>
+                <version>3.6.3</version>
                 <executions>
                     <execution>
                         <id>enforce-java</id>