diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index cd11eff1d8e..e4dd758e8a7 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -67,6 +67,6 @@ jobs:
 
       # Upload the results to GitHub's code scanning dashboard.
       - name: "Upload to code-scanning"
-        uses: github/codeql-action/upload-sarif@407ffafae6a767df3e0230c3df91b6443ae8df75 # v2.22.8
+        uses: github/codeql-action/upload-sarif@03e7845b7bfcd5e7fb63d1ae8c61b0e791134fab # v2.22.11
         with:
           sarif_file: results.sarif
diff --git a/build.gradle b/build.gradle
index 06d6281c241..29eb3e6c398 100644
--- a/build.gradle
+++ b/build.gradle
@@ -63,7 +63,7 @@ allprojects {
 
     configurations {
         taglet {
-            resolutionStrategy.force("net.sourceforge.plantuml:plantuml:1.2023.12")
+            resolutionStrategy.force("net.sourceforge.plantuml:plantuml:1.2023.13")
         }
     }
 
diff --git a/commercetools/commercetools-apachehttp-client/build.gradle b/commercetools/commercetools-apachehttp-client/build.gradle
index 6c0850a0c36..374a4db5ced 100644
--- a/commercetools/commercetools-apachehttp-client/build.gradle
+++ b/commercetools/commercetools-apachehttp-client/build.gradle
@@ -1,7 +1,7 @@
 
 dependencies {
     api project(":rmf:rmf-java-base")
-    api "org.apache.httpcomponents.client5:httpclient5:5.2.3" version {
+    api "org.apache.httpcomponents.client5:httpclient5:5.3" version {
         strictly "[5.0,6.0["
         prefer "5.1.3"
     }
diff --git a/commercetools/commercetools-monitoring-opentelemetry/build.gradle b/commercetools/commercetools-monitoring-opentelemetry/build.gradle
index e8987ed4094..97d7decab02 100644
--- a/commercetools/commercetools-monitoring-opentelemetry/build.gradle
+++ b/commercetools/commercetools-monitoring-opentelemetry/build.gradle
@@ -1,7 +1,7 @@
 
 dependencies {
     api project(":rmf:rmf-java-base")
-    implementation 'io.opentelemetry:opentelemetry-api:1.32.0'
+    implementation 'io.opentelemetry:opentelemetry-api:1.33.0'
 
     testImplementation project(":commercetools:commercetools-sdk-java-api")
 }
diff --git a/commercetools/commercetools-reactornetty-client/build.gradle b/commercetools/commercetools-reactornetty-client/build.gradle
index 288379e6028..d1c4db6cc46 100644
--- a/commercetools/commercetools-reactornetty-client/build.gradle
+++ b/commercetools/commercetools-reactornetty-client/build.gradle
@@ -2,8 +2,8 @@
 dependencies {
     api project(":rmf:rmf-java-base")
 
-    api "io.projectreactor.netty:reactor-netty-http:1.1.13"
-    api "io.projectreactor.netty:reactor-netty-core:1.1.13"
+    api "io.projectreactor.netty:reactor-netty-http:1.1.14"
+    api "io.projectreactor.netty:reactor-netty-core:1.1.14"
 
     implementation javax.validation
 }
diff --git a/gradle-scripts/extensions.gradle b/gradle-scripts/extensions.gradle
index 0dd8b48f744..f3adffe6e2c 100644
--- a/gradle-scripts/extensions.gradle
+++ b/gradle-scripts/extensions.gradle
@@ -67,7 +67,7 @@ ext {
     ]
 
     spotify = [
-            completableFutures: "com.spotify:completable-futures:0.3.5"
+            completableFutures: "com.spotify:completable-futures:0.3.6"
     ]
 
     scmProjectName = rootProject.name