diff --git a/.github/workflows/beyond-doubt.yaml b/.github/workflows/beyond-doubt.yaml
index 4d086098..101f30d5 100644
--- a/.github/workflows/beyond-doubt.yaml
+++ b/.github/workflows/beyond-doubt.yaml
@@ -114,7 +114,7 @@ jobs:
           -e devenv=${{ matrix.env.dev }}
           -e purpose=${{ matrix.purpose }}
           -e opsenv=${{ matrix.env.ops }}
-      - uses: actions/upload-artifact@v4.3.0
+      - uses: actions/upload-artifact@v4.3.1
         with:
           name: solution-${{ matrix.purpose }}-${{ matrix.env.ops }}
           path: stack/solution/target/image-context
@@ -146,7 +146,7 @@ jobs:
         with:
           devenv: ${{ matrix.env.dev }}
           token: ${{ secrets.GITHUB_TOKEN }}
-      - uses: actions/download-artifact@v4.1.1
+      - uses: actions/download-artifact@v4.1.2
         continue-on-error: true  # it's ok because stack building can be skipped
         with:
           name: solution-${{ matrix.purpose }}-${{ matrix.env.ops }}
@@ -168,7 +168,7 @@ jobs:
           -e opsenv=${{ matrix.env.ops }}
           -e reminder=${{ matrix.shard }}
           -e modulus=2
-      - uses: actions/upload-artifact@v4.3.0
+      - uses: actions/upload-artifact@v4.3.1
         if: ${{ !cancelled() }}
         with:
           name: e2e-test-report-${{ matrix.shard }}-${{ matrix.purpose }}-${{ matrix.env.ops }}
@@ -202,7 +202,7 @@ jobs:
         with:
           devenv: ${{ matrix.env.dev }}
           token: ${{ secrets.GITHUB_TOKEN }}
-      - uses: actions/download-artifact@v4.1.1
+      - uses: actions/download-artifact@v4.1.2
         continue-on-error: true  # it's ok because stack building can be skipped
         with:
           name: solution-${{ matrix.purpose }}-${{ matrix.env.ops }}
@@ -230,7 +230,7 @@ jobs:
     permissions:
       checks: write
     steps:
-      - uses: actions/download-artifact@v4.1.1
+      - uses: actions/download-artifact@v4.1.2
         with:
           path: artifacts
       - uses: mikepenz/action-junit-report@v4.1.0
diff --git a/.github/workflows/convincing.yaml b/.github/workflows/convincing.yaml
index 16fa10c9..c9449403 100644
--- a/.github/workflows/convincing.yaml
+++ b/.github/workflows/convincing.yaml
@@ -73,7 +73,7 @@ jobs:
           require_tests: "${{ steps.images.outcome == 'failure' }}"
           fail_on_failure: false
           job_summary: false
-      - uses: actions/upload-artifact@v4.3.0
+      - uses: actions/upload-artifact@v4.3.1
         if: ${{ !cancelled() }}
         with:
           name: test-coverage-report
diff --git a/.github/workflows/template.yaml b/.github/workflows/template.yaml
index db257100..579993ab 100644
--- a/.github/workflows/template.yaml
+++ b/.github/workflows/template.yaml
@@ -10,7 +10,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - id: orgbot
-        uses: actions/create-github-app-token@v1.7.0
+        uses: actions/create-github-app-token@v1.8.0
         with:
           app-id: ${{ secrets.ORGBOT_APP_ID }}
           private-key: ${{ secrets.ORGBOT_PRIVATE_KEY }}
@@ -18,7 +18,7 @@ jobs:
         with:
           token: ${{ steps.orgbot.outputs.token }}
           persist-credentials: false
-      - uses: AndreasAugustin/actions-template-sync@v1.4.0
+      - uses: AndreasAugustin/actions-template-sync@v1.5.0
         with:
           pr_title: Syncing with template
           source_repo_path: smecalculus/bezmen
diff --git a/libs/pom.xml b/libs/pom.xml
index e5526ff7..a94e7cd8 100644
--- a/libs/pom.xml
+++ b/libs/pom.xml
@@ -137,7 +137,7 @@
       <dependency>
         <groupId>org.eclipse.jetty.ee10</groupId>
         <artifactId>jetty-ee10-bom</artifactId>
-        <version>12.0.5</version>
+        <version>12.0.6</version>
         <scope>import</scope>
         <type>pom</type>
       </dependency>
diff --git a/stack/gear/church/requirements.txt b/stack/gear/church/requirements.txt
index a2abb4d9..ca484dab 100644
--- a/stack/gear/church/requirements.txt
+++ b/stack/gear/church/requirements.txt
@@ -1,3 +1,3 @@
-ansible-core==2.16.2
+ansible-core==2.16.3
 ansible-lint==6.22.1
-yamllint==1.33.0
+yamllint==1.35.1
diff --git a/stack/gear/turing/requirements.txt b/stack/gear/turing/requirements.txt
index 74931394..2eb9ee49 100644
--- a/stack/gear/turing/requirements.txt
+++ b/stack/gear/turing/requirements.txt
@@ -1,3 +1,3 @@
-ansible-core==2.15.8
+ansible-core==2.15.9
 ansible-lint==24.2.0
-yamllint==1.33.0
+yamllint==1.33.1
diff --git a/tools/pom.xml b/tools/pom.xml
index 34ccf4fa..a9f6f57a 100644
--- a/tools/pom.xml
+++ b/tools/pom.xml
@@ -40,7 +40,7 @@
       <dependency>
         <groupId>org.junit</groupId>
         <artifactId>junit-bom</artifactId>
-        <version>5.10.1</version>
+        <version>5.10.2</version>
         <scope>import</scope>
         <type>pom</type>
       </dependency>
@@ -59,7 +59,7 @@
       <dependency>
         <groupId>org.assertj</groupId>
         <artifactId>assertj-bom</artifactId>
-        <version>3.25.2</version>
+        <version>3.25.3</version>
         <scope>import</scope>
         <type>pom</type>
       </dependency>
@@ -101,7 +101,7 @@
       <dependency>
         <groupId>net.bytebuddy</groupId>
         <artifactId>byte-buddy</artifactId>
-        <version>1.14.11</version>
+        <version>1.14.12</version>
       </dependency>
     </dependencies>
   </dependencyManagement>