diff --git a/aws/client/aws-client-rulesengine/build.gradle.kts b/aws/client/aws-client-rulesengine/build.gradle.kts
index 01a655553..a8da4790e 100644
--- a/aws/client/aws-client-rulesengine/build.gradle.kts
+++ b/aws/client/aws-client-rulesengine/build.gradle.kts
@@ -25,7 +25,7 @@ dependencies {
     testImplementation(project(":aws:client:aws-client-s3"))
     jmhImplementation(project(":aws:client:aws-client-s3"))
 
-    s3Model("software.amazon.api.models:s3:1.0.20")
+    s3Model("software.amazon.api.models:s3:1.0.21")
     lambdaModel("software.amazon.api.models:lambda:1.0.19")
 }
 
diff --git a/benchmarks/e2e-benchmarks/build.gradle.kts b/benchmarks/e2e-benchmarks/build.gradle.kts
index 080c24f01..95db08940 100644
--- a/benchmarks/e2e-benchmarks/build.gradle.kts
+++ b/benchmarks/e2e-benchmarks/build.gradle.kts
@@ -29,7 +29,7 @@ dependencies {
     // plugin (and the runtime stack) read shape definitions through these
     // JARs at build time and at runtime.
     implementation("software.amazon.api.models:dynamodb:1.0.12")
-    implementation("software.amazon.api.models:s3:1.0.20")
+    implementation("software.amazon.api.models:s3:1.0.21")
 
     // Runtime stack the generated clients depend on.
     implementation(project(":core"))
diff --git a/client/client-http-boringssl/build.gradle.kts b/client/client-http-boringssl/build.gradle.kts
index 64768124e..cd2a0de1f 100644
--- a/client/client-http-boringssl/build.gradle.kts
+++ b/client/client-http-boringssl/build.gradle.kts
@@ -21,11 +21,11 @@ dependencies {
     // on (dev: macOS arm64/x64; benchmark + prod: Linux x64/arm64). At runtime Netty loads whichever
     // matches the host; the others are inert. tcnative is optional — BoringSslEngineFactory.isAvailable()
     // reports false when the native lib is absent, and callers fall back to the JDK provider.
-    implementation("io.netty:netty-tcnative-boringssl-static:2.0.80.Final")
-    runtimeOnly("io.netty:netty-tcnative-boringssl-static:2.0.80.Final:osx-aarch_64")
-    runtimeOnly("io.netty:netty-tcnative-boringssl-static:2.0.80.Final:osx-x86_64")
-    runtimeOnly("io.netty:netty-tcnative-boringssl-static:2.0.80.Final:linux-x86_64")
-    runtimeOnly("io.netty:netty-tcnative-boringssl-static:2.0.80.Final:linux-aarch_64")
+    implementation("io.netty:netty-tcnative-boringssl-static:2.0.81.Final")
+    runtimeOnly("io.netty:netty-tcnative-boringssl-static:2.0.81.Final:osx-aarch_64")
+    runtimeOnly("io.netty:netty-tcnative-boringssl-static:2.0.81.Final:osx-x86_64")
+    runtimeOnly("io.netty:netty-tcnative-boringssl-static:2.0.81.Final:linux-x86_64")
+    runtimeOnly("io.netty:netty-tcnative-boringssl-static:2.0.81.Final:linux-aarch_64")
 
     testImplementation(project(":codecs:json-codec", configuration = "shadow"))
 }
diff --git a/gradle/libs.versions.toml b/gradle/libs.versions.toml
index 6a6796c60..1e376f398 100644
--- a/gradle/libs.versions.toml
+++ b/gradle/libs.versions.toml
@@ -1,7 +1,7 @@
 [versions]
 junit5 = "6.1.2"
 hamcrest = "3.0"
-smithy = "1.72.0"
+smithy = "1.72.1"
 jmh = "0.7.3"
 jmhCore = "1.37"
 test-logger-plugin = "4.0.0"
@@ -12,14 +12,14 @@ assertj = "3.27.7"
 jackson = "3.2.1"
 fastdoubleparser = "2.0.1"
 netty = "4.2.16.Final"
-dep-analysis = "3.16.1"
-aws-sdk = "2.47.6"
+dep-analysis = "3.17.0"
+aws-sdk = "2.49.5"
 osdetector = "1.7.3"
 accp = "2.4.1" # Amazon Corretto Crypto Provider
 jreleaser = "1.25.0"
 picocli = "4.7.7"
-graalvm-native = "1.1.4"
-shadow = "9.5.1"
+graalvm-native = "1.1.5"
+shadow = "9.6.1"
 jazzer = "0.30.0"
 pitest-junit5 = "1.2.3"
 pitest-gradle = "1.19.0"
@@ -28,7 +28,7 @@ opentelemetry = "1.64.0"
 jspecify = "1.0.0"
 commonmark = "0.29.0"
 jsoup = "1.22.2"
-aws-api-models = "1.0.269"
+aws-api-models = "1.0.275"
 
 [libraries]
 smithy-model = { module = "software.amazon.smithy:smithy-model", version.ref = "smithy" }
diff --git a/http/http-client/build.gradle.kts b/http/http-client/build.gradle.kts
index e166724fe..3c47bc5b9 100644
--- a/http/http-client/build.gradle.kts
+++ b/http/http-client/build.gradle.kts
@@ -51,8 +51,8 @@ dependencies {
     jmh("org.apache.httpcomponents.client5:httpclient5:5.6.2")
 
     // Helidon WebClient for benchmarking comparison
-    jmh("io.helidon.webclient:helidon-webclient:4.5.0")
-    jmh("io.helidon.webclient:helidon-webclient-http2:4.5.0")
+    jmh("io.helidon.webclient:helidon-webclient:4.5.1")
+    jmh("io.helidon.webclient:helidon-webclient-http2:4.5.1")
 
     // Netty for raw HTTP/2 benchmarking
     jmh("io.netty:netty-all:4.2.16.Final")