diff --git a/Dockerfile b/Dockerfile
index 27f0dfca..727f1bc3 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,4 +1,4 @@
-FROM docker.io/library/gradle:8.8.0-jdk21@sha256:c582bc70eb666f62d90525367974dd66122bf069c1d45a70f621b0d08bd2182c AS build
+FROM docker.io/library/gradle:8.9.0-jdk21@sha256:0c13b320f227a67179fca5d5746ab889c011ed143023c80c5fc8520609fe427f AS build
 WORKDIR /home/gradle/project
 
 COPY --chown=gradle:gradle . .
@@ -14,7 +14,7 @@ WORKDIR /test
 COPY --from=build /home/gradle/project/build/reports/ .
 ENTRYPOINT [ "true" ]
 
-FROM docker.io/library/debian:12.5-slim@sha256:67f3931ad8cb1967beec602d8c0506af1e37e8d73c2a0b38b181ec5d8560d395 AS jemalloc
+FROM docker.io/library/debian:12.6-slim@sha256:5f7d5664eae4a192c2d2d6cb67fc3f3c7891a8722cd2903cc35aa649a12b0c8d AS jemalloc
 # hadolint ignore=DL3008
 RUN <<EOF
 apt-get update
diff --git a/deploy/compose.yaml b/deploy/compose.yaml
index d9923a06..e62eb0b4 100644
--- a/deploy/compose.yaml
+++ b/deploy/compose.yaml
@@ -1,7 +1,7 @@
 #checkov:skip=CKV_SECRET_6: all dev setup
 services:
   oracle:
-    image: docker.io/gvenzl/oracle-free:23.3-slim-faststart@sha256:f8faced31a95e515eb2664ae0b082eff5d7eb0052780d3819669e306d33777ce
+    image: docker.io/gvenzl/oracle-free:23.4-slim-faststart@sha256:7d40f1174fd64070aecec7722db0156b5c935b8a2ae1277bac656d0346662fad
     cap_drop:
       - ALL
     privileged: false
@@ -17,7 +17,7 @@ services:
       - ./oracle/init:/docker-entrypoint-initdb.d/setup
 
   kafka:
-    image: docker.io/bitnami/kafka:3.7.0@sha256:25e33405c88edb664ab049fc9a351b0ef700eb6df070066be53a2a676d8d1b86
+    image: docker.io/bitnami/kafka:3.7.1@sha256:dfa51517c4823ad8ce97cd5b5ed06798067c40634c06144384ee91097ceeabb2
     restart: unless-stopped
     cap_drop:
       - ALL
@@ -69,7 +69,7 @@ services:
       - kafka
 
   akhq:
-    image: docker.io/tchiotludo/akhq:0.25.0@sha256:942807a2291f25b22047f8f56287e93cf9a43bf76f67a0eeca7e1eecc911c54c
+    image: docker.io/tchiotludo/akhq:0.25.1@sha256:cfaef8f419c4e4b78c583597d6428b63166e90eeb194af890264d68051a22180
     restart: unless-stopped
     cap_drop:
       - ALL
diff --git a/gradle/wrapper/gradle-wrapper.properties b/gradle/wrapper/gradle-wrapper.properties
index a4413138..09523c0e 100644
--- a/gradle/wrapper/gradle-wrapper.properties
+++ b/gradle/wrapper/gradle-wrapper.properties
@@ -1,6 +1,6 @@
 distributionBase=GRADLE_USER_HOME
 distributionPath=wrapper/dists
-distributionUrl=https\://services.gradle.org/distributions/gradle-8.8-bin.zip
+distributionUrl=https\://services.gradle.org/distributions/gradle-8.9-bin.zip
 networkTimeout=10000
 validateDistributionUrl=true
 zipStoreBase=GRADLE_USER_HOME
diff --git a/package.json b/package.json
index cfdb3310..d3916289 100644
--- a/package.json
+++ b/package.json
@@ -4,7 +4,7 @@
   "description": "Creates FHIR resources from oBDS-XML data",
   "dependencies": {
     "hl7.fhir.r4.core": "4.0.1",
-    "de.dktk.oncology": "1.3.0",
+    "de.dktk.oncology": "1.6.0",
     "de.medizininformatikinitiative.kerndatensatz.person": "2024.0.0"
   },
   "fhirVersions": [