diff --git a/.bazelversion b/.bazelversion
index e7fdef7e2..6d2890793 100644
--- a/.bazelversion
+++ b/.bazelversion
@@ -1 +1 @@
-8.4.2
+8.5.0
diff --git a/.github/workflows/check-formatting.yml b/.github/workflows/check-formatting.yml
index 2e18a8f4e..5530faf0b 100644
--- a/.github/workflows/check-formatting.yml
+++ b/.github/workflows/check-formatting.yml
@@ -10,10 +10,10 @@ on:
 
 jobs:
   check_formatting:
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
 
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
 
       - name: Run format.sh and print changes
         env:
diff --git a/.github/workflows/fuzzing.yml b/.github/workflows/fuzzing.yml
index 8d768e8db..8e263d3c4 100644
--- a/.github/workflows/fuzzing.yml
+++ b/.github/workflows/fuzzing.yml
@@ -32,7 +32,7 @@ jobs:
             bazel_args: "--xcode_version_config=//.github:host_xcodes"
 
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
 
       - name: Set up JDK
         uses: actions/setup-java@v5
@@ -45,7 +45,7 @@ jobs:
         shell: bash
 
       - name: Cache Fuzzing Corpus
-        uses: actions/cache@v4
+        uses: actions/cache@v5
         with:
           path: |
             selffuzz/src/test/resources/.corpus
diff --git a/.github/workflows/prerelease.yaml b/.github/workflows/prerelease.yaml
index 3e0a40693..fe4d3e620 100644
--- a/.github/workflows/prerelease.yaml
+++ b/.github/workflows/prerelease.yaml
@@ -22,7 +22,7 @@ jobs:
             name: windows
 
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
 
       - name: Set up JDK
         uses: actions/setup-java@v5
@@ -54,28 +54,28 @@ jobs:
           cp -L $(bazel cquery --output=files :jazzer_release) jazzer-${{ matrix.name }}.tar.gz
 
       - name: Upload jazzer.jar
-        uses: actions/upload-artifact@v5
+        uses: actions/upload-artifact@v6
         with:
           name: jazzer_tmp_${{ matrix.name }}
           path: jazzer-${{ matrix.name }}.jar
           if-no-files-found: error
 
       - name: Upload release archive
-        uses: actions/upload-artifact@v5
+        uses: actions/upload-artifact@v6
         with:
           name: jazzer_releases_${{ matrix.name }}
           path: jazzer-${{ matrix.name }}.tar.gz
           if-no-files-found: error
 
   merge_jars:
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     needs: build_release
 
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
 
       - name: Download individual jars
-        uses: actions/download-artifact@v6
+        uses: actions/download-artifact@v7
         with:
           pattern: jazzer_tmp_*
           merge-multiple: true
@@ -88,21 +88,21 @@ jobs:
             $(find "$(pwd)/_tmp/" -name '*.jar' -printf "--sources %h/%f ")
 
       - name: Upload merged jar
-        uses: actions/upload-artifact@v5
+        uses: actions/upload-artifact@v6
         with:
           name: jazzer
           path: _tmp/jazzer.jar
           if-no-files-found: error
 
   maven_deploy:
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     needs: merge_jars
 
     environment:
       name: Deploy
 
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
 
       - name: Set up JDK
         uses: actions/setup-java@v5
@@ -119,7 +119,7 @@ jobs:
           echo "build --//deploy:jazzer_version=${TAG#v}" >> .bazelrc
 
       - name: Download merged jar
-        uses: actions/download-artifact@v6
+        uses: actions/download-artifact@v7
         with:
           name: jazzer
           path: _tmp/
@@ -135,7 +135,7 @@ jobs:
 
       # In case something goes wrong, we can still reupload the bundle manually
       - name: Upload Jazzer Bundle to Github Artifacts
-        uses: actions/upload-artifact@v5
+        uses: actions/upload-artifact@v6
         with:
           name: jazzer-maven-central-bundle
           path: _tmp/jazzer-maven-central-bundle.tar.gz
@@ -163,17 +163,17 @@ jobs:
 
     steps:
       - name: checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       - name: Download individual tar.gzs
-        uses: actions/download-artifact@v6
+        uses: actions/download-artifact@v7
         with:
           pattern: jazzer_releases_*
           merge-multiple: true
           path: _releases/
 
       - name: create release
-        uses: softprops/action-gh-release@6da8fa9354ddfdc4aeace5fc48d7f679b5214090 # v2.4.1
+        uses: softprops/action-gh-release@a06a81a03ee405af7f2048a818ed3f03bbf83c7b # v2.5.0
         with:
           generate_release_notes: true
           draft: true
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 15b7b3ce3..cf05e8182 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -9,11 +9,11 @@ on:
 jobs:
 
   generate_docs:
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
 
     steps:
       - name: checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       - name: Build documentation
         run: |
@@ -23,7 +23,7 @@ jobs:
           cp $(bazel cquery --output=files //deploy:jazzer-junit-docs) ./jazzer-junit-docs.jar
 
       - name: Upload jars
-        uses: actions/upload-artifact@v5
+        uses: actions/upload-artifact@v6
         with:
           name: jazzer_docs_jars
           path: |
@@ -33,7 +33,7 @@ jobs:
           if-no-files-found: error
 
   update_docs:
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     needs: generate_docs
 
     environment:
@@ -41,13 +41,13 @@ jobs:
 
     steps:
       - name: checkout docs
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         with:
           repository: 'CodeIntelligenceTesting/jazzer-docs'
           ssh-key: "${{ secrets.JAZZER_DOCS_SSH_KEY_PRIVATE }}"
 
       - name: Download jar
-        uses: actions/download-artifact@v6
+        uses: actions/download-artifact@v7
         with:
           name: jazzer_docs_jars
           path: .
diff --git a/.github/workflows/run-all-tests-pr.yml b/.github/workflows/run-all-tests-pr.yml
index e94248490..6720bf5c7 100644
--- a/.github/workflows/run-all-tests-pr.yml
+++ b/.github/workflows/run-all-tests-pr.yml
@@ -35,7 +35,7 @@ jobs:
             arch: "windows"
 
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
 
       - name: Set up JDK
         uses: actions/setup-java@v5
@@ -54,7 +54,7 @@ jobs:
           echo "C:\Program Files\LLVM\bin" | Out-File -FilePath $env:GITHUB_PATH -Encoding utf8 -Append
 
       - name: Load fuzzing corpus cache
-        uses: actions/cache/restore@v4
+        uses: actions/cache/restore@v5
         with:
           path: |
             selffuzz/src/test/resources/.corpus
@@ -74,7 +74,7 @@ jobs:
 
       - name: Upload test logs
         if: always()
-        uses: actions/upload-artifact@v5
+        uses: actions/upload-artifact@v6
         with:
           name: testlogs-${{ matrix.arch }}-${{ matrix.jdk }}
           # https://github.com/actions/upload-artifact/issues/92#issuecomment-711107236
diff --git a/MODULE.bazel b/MODULE.bazel
index 60c106921..959798b83 100644
--- a/MODULE.bazel
+++ b/MODULE.bazel
@@ -7,28 +7,28 @@ module(name = "jazzer")
 ################################################################################
 
 bazel_dep(name = "abseil-cpp", version = "20250814.1")
-bazel_dep(name = "apple_support", version = "1.24.5")
-bazel_dep(name = "bazel_jar_jar", version = "0.1.11")
-bazel_dep(name = "bazel_skylib", version = "1.8.2")
-bazel_dep(name = "buildifier_prebuilt", version = "8.2.1")
+bazel_dep(name = "apple_support", version = "2.0.0")
+bazel_dep(name = "bazel_jar_jar", version = "0.1.12")
+bazel_dep(name = "bazel_skylib", version = "1.9.0")
+bazel_dep(name = "buildifier_prebuilt", version = "8.2.1.1")
 
 # TODO: Starting with version 0.28.0 the JUnit test runner is compiled for Java 11 which breaks our JDK 8 tests.
 #       https://github.com/bazel-contrib/rules_jvm/pull/307
-bazel_dep(name = "contrib_rules_jvm", version = "0.27.0")
+bazel_dep(name = "contrib_rules_jvm", version = "0.31.1")
 bazel_dep(name = "googletest", version = "1.17.0.bcr.2")
 bazel_dep(name = "platforms", version = "1.0.0")
-bazel_dep(name = "protobuf", version = "33.1")
+bazel_dep(name = "protobuf", version = "33.2")
 bazel_dep(name = "rules_android", version = "0.6.6")
 bazel_dep(name = "rules_android_ndk", version = "0.1.3")
 bazel_dep(name = "rules_foreign_cc", version = "0.15.1")
-bazel_dep(name = "rules_java", version = "9.1.0")
+bazel_dep(name = "rules_java", version = "9.3.0")
 bazel_dep(name = "rules_jni", version = "0.11.1")
 bazel_dep(name = "rules_jvm_external", version = "6.9")
-bazel_dep(name = "rules_kotlin", version = "2.2.0")
+bazel_dep(name = "rules_kotlin", version = "2.2.1")
 bazel_dep(name = "rules_license", version = "1.0.0")
-bazel_dep(name = "rules_pkg", version = "1.1.0")
-bazel_dep(name = "rules_cc", version = "0.2.14")
-bazel_dep(name = "toolchains_llvm", version = "1.5.0")
+bazel_dep(name = "rules_pkg", version = "1.2.0")
+bazel_dep(name = "rules_cc", version = "0.2.16")
+bazel_dep(name = "toolchains_llvm", version = "1.6.0")
 
 ################################################################################
 # Maven dependencies
diff --git a/selffuzz/pom.xml b/selffuzz/pom.xml
index 9d51893e4..065118a4a 100644
--- a/selffuzz/pom.xml
+++ b/selffuzz/pom.xml
@@ -58,31 +58,31 @@
     <dependency>
       <groupId>org.junit.jupiter</groupId>
       <artifactId>junit-jupiter-engine</artifactId>
-      <version>5.10.2</version>
+      <version>6.0.1</version>
       <scope>test</scope>
     </dependency>
     <dependency>
       <groupId>org.junit.jupiter</groupId>
       <artifactId>junit-jupiter-api</artifactId>
-      <version>5.10.2</version>
+      <version>6.0.1</version>
       <scope>test</scope>
     </dependency>
     <dependency>
       <groupId>org.junit.jupiter</groupId>
       <artifactId>junit-jupiter-params</artifactId>
-      <version>5.10.2</version>
+      <version>6.0.1</version>
       <scope>test</scope>
     </dependency>
     <dependency>
       <groupId>org.junit.platform</groupId>
       <artifactId>junit-platform-commons</artifactId>
-      <version>1.10.2</version>
+      <version>6.0.1</version>
       <scope>test</scope>
     </dependency>
     <dependency>
       <groupId>org.junit.platform</groupId>
       <artifactId>junit-platform-launcher</artifactId>
-      <version>1.10.2</version>
+      <version>6.0.1</version>
       <scope>test</scope>
     </dependency>
     <dependency>
@@ -131,7 +131,7 @@
     <dependency>
       <groupId>com.google.truth</groupId>
       <artifactId>truth</artifactId>
-      <version>1.4.0</version>
+      <version>1.4.5</version>
       <scope>test</scope>
     </dependency>
     <!-- https://mvnrepository.com/artifact/com.google.protobuf/protobuf-java
@@ -140,7 +140,7 @@
     <dependency>
       <groupId>com.google.protobuf</groupId>
       <artifactId>protobuf-java</artifactId>
-      <version>3.25.5</version>
+      <version>4.33.2</version>
     </dependency>
   </dependencies>
 
@@ -149,14 +149,14 @@
       <extension>
         <groupId>com.code-intelligence</groupId>
         <artifactId>cifuzz-maven-extension</artifactId>
-        <version>1.7.0</version>
+        <version>1.15.0</version>
       </extension>
     </extensions>
     <plugins>
       <plugin>
         <groupId>org.jacoco</groupId>
         <artifactId>jacoco-maven-plugin</artifactId>
-        <version>0.8.11</version>
+        <version>0.8.14</version>
         <executions>
           <execution>
             <goals>