diff --git a/pom.xml b/pom.xml
index 8720b308..a20f288f 100644
--- a/pom.xml
+++ b/pom.xml
@@ -552,16 +552,16 @@
         <servlet.api.version>4.0.1</servlet.api.version>
         <javax.ws.rs.api.version>2.1.1</javax.ws.rs.api.version>
         <javax.validation.api.version>2.0.1.Final</javax.validation.api.version>
-        <testng.version>7.8.0</testng.version>
+        <testng.version>7.12.0</testng.version>
         <mockito.version>5.23.0</mockito.version>
         <slf4j.version>1.7.36</slf4j.version>
-        <h2.version>2.2.224</h2.version>
-        <testcontainers.version>1.20.6</testcontainers.version>
+        <h2.version>2.4.240</h2.version>
+        <testcontainers.version>1.21.4</testcontainers.version>
         <mysql.connector.version>8.3.0</mysql.connector.version>
-        <postgresql.driver.version>42.7.3</postgresql.driver.version>
-        <sqlite.jdbc.version>3.45.3.0</sqlite.jdbc.version>
+        <postgresql.driver.version>42.7.13</postgresql.driver.version>
+        <sqlite.jdbc.version>3.53.4.0</sqlite.jdbc.version>
         <jersey.version>2.39</jersey.version>
-        <jacoco.version>0.8.11</jacoco.version>
+        <jacoco.version>0.8.15</jacoco.version>
         <junit.jupiter.version>6.1.3</junit.jupiter.version>
 
         <carbon.kernel.version>4.12.34</carbon.kernel.version>
@@ -588,7 +588,7 @@
         <!-- WSO2's OSGi-wrapped Quartz orbit jar - same coordinates the Financial Services
              accelerator pins for its own periodical consent expiry job. -->
         <quartz.version>2.3.2.wso2v1</quartz.version>
-        <gson.version>2.9.0</gson.version>
+        <gson.version>2.14.0</gson.version>
         <gson.imp.pkg.version.range>[2.8.0, 3.0.0)</gson.imp.pkg.version.range>
         <!-- Jackson ships as a family and moves together, but not at the same version on every
              pack the accelerator has to run on: a U2-updated IS 7.3.0 (the supported target) has
@@ -602,28 +602,28 @@
              "CXF3" webapp-classloading environment our endpoint webapp declares, so it must
              compile against the same versions it will actually run against. -->
         <cxf.version>3.6.12</cxf.version>
-        <jackson.databind.version>2.21.4</jackson.databind.version>
+        <jackson.databind.version>2.22.2</jackson.databind.version>
         <!-- jackson-annotations trails the core/databind/jaxrs release train and is only ever
              published at major.minor granularity (no patch digit), unlike its siblings above. -->
-        <jackson.annotations.version>2.21</jackson.annotations.version>
-        <jackson.jaxrs.version>2.21.2</jackson.jaxrs.version>
-        <swagger.annotations.version>1.6.14</swagger.annotations.version>
+        <jackson.annotations.version>2.22</jackson.annotations.version>
+        <jackson.jaxrs.version>2.22.2</jackson.jaxrs.version>
+        <swagger.annotations.version>1.6.16</swagger.annotations.version>
         <axiom.version>1.2.11-wso2v16</axiom.version>
         <securevault.version>1.2.0</securevault.version>
-        <commons.logging.version>1.2</commons.logging.version>
-        <osgi.service.component.annotations.version>1.4.0</osgi.service.component.annotations.version>
+        <commons.logging.version>1.4.0</commons.logging.version>
+        <osgi.service.component.annotations.version>1.5.1</osgi.service.component.annotations.version>
         <osgi.version>7.0.0</osgi.version>
         <osgi.framework.imp.pkg.version.range>[1.7.0, 2.0.0)</osgi.framework.imp.pkg.version.range>
         <osgi.service.component.imp.pkg.version.range>[1.2.0, 2.0.0)</osgi.service.component.imp.pkg.version.range>
         <commons.logging.imp.pkg.version.range>[1.2.0, 2.0.0)</commons.logging.imp.pkg.version.range>
         <maven.bundle.plugin.version>5.1.9</maven.bundle.plugin.version>
-        <maven.war.plugin.version>3.3.2</maven.war.plugin.version>
-        <exec.maven.plugin.version>3.1.0</exec.maven.plugin.version>
-        <maven.assembly.plugin.version>3.6.0</maven.assembly.plugin.version>
+        <maven.war.plugin.version>3.5.1</maven.war.plugin.version>
+        <exec.maven.plugin.version>3.6.3</exec.maven.plugin.version>
+        <maven.assembly.plugin.version>3.8.0</maven.assembly.plugin.version>
         <maven.antrun.plugin.version>1.8</maven.antrun.plugin.version>
-        <maven.clean.plugin.version>3.1.0</maven.clean.plugin.version>
-        <maven.dependency.plugin.version>3.6.1</maven.dependency.plugin.version>
-        <build.helper.maven.plugin.version>3.5.0</build.helper.maven.plugin.version>
+        <maven.clean.plugin.version>3.5.0</maven.clean.plugin.version>
+        <maven.dependency.plugin.version>3.11.0</maven.dependency.plugin.version>
+        <build.helper.maven.plugin.version>3.6.1</build.helper.maven.plugin.version>
         <openapi.generator.plugin.version>6.6.0</openapi.generator.plugin.version>
 
         <!-- Set to false (e.g. -Ddpdp.dto.codegen.skip=false) to regenerate the consent-history