diff --git a/gradle.properties b/gradle.properties
index 69832f783e..44bc2aa13a 100644
--- a/gradle.properties
+++ b/gradle.properties
@@ -44,7 +44,7 @@ buildFromSource=true
 
 # The default version for LabKey artifacts that are built or that we depend on.
 # override in an individual module's gradle.properties file as necessary 
-labkeyVersion=25.3.17
+labkeyVersion=25.3.18
 labkeyClientApiVersion=6.2.0
 
 # Version numbers for the various binary artifacts that are included when
@@ -99,12 +99,12 @@ apacheDirectoryVersion=2.1.7
 apacheMinaVersion=2.2.4
 
 # Usually matches the version specified as a Spring Boot dependency (see springBootVersion below)
-apacheTomcatVersion=10.1.43
+apacheTomcatVersion=10.1.44
 
 # (mothership) -> json-path -> json-smart -> accessor-smart
 # (core) -> graalvm
 # tika
-asmVersion=9.7.1
+asmVersion=9.8
 
 # Apache Batik -- Batik version needs to be compatible with Apache FOP, but we need to pull in batik-codec separately
 batikVersion=1.18
@@ -125,7 +125,7 @@ commonsBeanutilsVersion=1.11.0
 commonsCodecVersion=1.17.1
 commonsCollections4Version=4.4
 commonsCollectionsVersion=3.2.2
-commonsCompressVersion=1.27.1
+commonsCompressVersion=1.28.0
 commonsDbcpVersion=1.4
 commonsDigesterVersion=1.8.1
 commonsDiscoveryVersion=0.2
@@ -180,7 +180,7 @@ hadoopHdfsClientVersion=3.4.1
 hamcrestVersion=2.2
 
 # Note: if changing this, we might need to match with the picard version in the SequenceAnalysis module build.gradle
-htsjdkVersion=4.0.0
+htsjdkVersion=4.3.0
 
 httpclient5Version=5.4.3
 httpcore5Version=5.3.4
@@ -230,7 +230,7 @@ jsr305Version=3.0.2
 
 orgJsonVersion=20250107
 
-jsoupVersion=1.18.3
+jsoupVersion=1.21.1
 
 junitVersion=4.13.2
 
@@ -259,7 +259,7 @@ opencsvVersion=2.3
 openTracingVersion=0.33.0
 
 # sync with version Tika ships
-pdfboxVersion=3.0.3
+pdfboxVersion=3.0.4
 
 # sync with version Tika ships
 poiVersion=5.4.0
@@ -282,9 +282,9 @@ romeVersion=2.1.0
 servletApiVersion=6.0.0
 
 # this version is forced for compatibility with pipeline and tika
-slf4jLog4j12Version=2.0.16
+slf4jLog4j12Version=2.0.17
 # this version is forced for compatibility with api, LDK, and workflow
-slf4jLog4jApiVersion=2.0.16
+slf4jLog4jApiVersion=2.0.17
 
 # This is a dependency for HTSJDK. Force version for CVE-2023-43642
 snappyJavaVersion=1.1.10.7
@@ -292,7 +292,7 @@ snappyJavaVersion=1.1.10.7
 # Also, update apacheTomcatVersion above to match Spring Boot's Tomcat dependency version
 springBootVersion=3.5.3
 # This usually matches the Spring Framework version dictated by springBootVersion
-springVersion=6.2.8
+springVersion=6.2.10
 
 sqliteJdbcVersion=3.49.1.0
 
@@ -302,7 +302,7 @@ stax2ApiVersion=4.2.2
 thumbnailatorVersion=0.4.20
 
 # used for tika-core in API and tika-parsers in search
-tikaVersion=3.0.0
+tikaVersion=3.2.2
 
 # sync with Tika
 tukaaniXZVersion=1.10