diff --git a/versions.lock b/versions.lock
index 614dd3a70..439e87f40 100644
--- a/versions.lock
+++ b/versions.lock
@@ -44,10 +44,10 @@ com.palantir.tritium:tritium-core:0.81.0 (1 constraints: 41104ba2)
 com.palantir.tritium:tritium-metrics:0.81.0 (1 constraints: 3b05423b)
 com.palantir.tritium:tritium-registry:0.81.0 (4 constraints: 13467487)
 com.squareup:javapoet:1.13.0 (2 constraints: 2b113eee)
-io.dropwizard.metrics:metrics-core:4.2.22 (4 constraints: bf421b0e)
+io.dropwizard.metrics:metrics-core:4.2.23 (4 constraints: c042c70e)
 javax.annotation:javax.annotation-api:1.3.2 (1 constraints: 0805fb35)
 joda-time:joda-time:2.10.14 (1 constraints: 5b160f08)
-org.apache.httpcomponents.client5:httpclient5:5.2.3 (1 constraints: 0c050d36)
+org.apache.httpcomponents.client5:httpclient5:5.3 (1 constraints: ac04292c)
 org.apache.httpcomponents.core5:httpcore5:5.2.4 (3 constraints: a42a7daa)
 org.apache.httpcomponents.core5:httpcore5-h2:5.2.4 (1 constraints: 3f130d3c)
 org.checkerframework:checker-qual:3.37.0 (3 constraints: e2245464)
diff --git a/versions.props b/versions.props
index e31ed24d8..e4cbc673f 100644
--- a/versions.props
+++ b/versions.props
@@ -16,8 +16,8 @@ com.palantir.tracing:* = 6.18.0
 com.palantir.tritium:* = 0.81.0
 com.squareup:javapoet = 1.13.0
 com.uber.nullaway:nullaway = 0.10.18
-io.dropwizard.metrics:metrics-core = 4.2.22
-org.apache.httpcomponents.client5:* = 5.2.3
+io.dropwizard.metrics:metrics-core = 4.2.23
+org.apache.httpcomponents.client5:* = 5.3
 org.apache.httpcomponents.core5:* = 5.2.4
 org.derive4j:* = 1.1.1
 org.immutables:* = 2.10.0