diff --git a/pom.xml b/pom.xml
index 86ae95c64..de3ffafe9 100644
--- a/pom.xml
+++ b/pom.xml
@@ -46,10 +46,10 @@
 		<maven.compiler.source>17</maven.compiler.source>
 		<maven.source.plugin.version>3.4.0</maven.source.plugin.version>
 		<!-- make sure that spring core and spring boot versions are compatible-->
-		<spring.boot.version>4.0.3</spring.boot.version>
-		<spring.core.version>7.0.5</spring.core.version>
-		<spring.security.version>7.0.3</spring.security.version>
-		<spring.security.oauth2.version>7.0.3</spring.security.oauth2.version>
+		<spring.boot.version>4.0.5</spring.boot.version>
+		<spring.core.version>7.0.7</spring.core.version>
+		<spring.security.version>7.0.5</spring.security.version>
+		<spring.security.oauth2.version>7.0.5</spring.security.oauth2.version>
 		<spring.security.jwt.version>1.1.1.RELEASE</spring.security.jwt.version>
 		<!-- Spring Boot 3.x / Spring Framework 6.x compatibility versions for legacy modules -->
 		<legacy3.spring.boot.version>3.5.9</legacy3.spring.boot.version>
@@ -57,12 +57,12 @@
 		<legacy3.spring.security.version>6.5.7</legacy3.spring.security.version>
 		<legacy3.spring.security.oauth2.version>6.5.7</legacy3.spring.security.oauth2.version>
 		<legacy3.reactor.version>3.8.2</legacy3.reactor.version>
-		<org.eclipse.jetty.version>12.1.7</org.eclipse.jetty.version>
-		<reactor.version>3.8.3</reactor.version>
-		<log4j2.version>2.25.3</log4j2.version>
+		<org.eclipse.jetty.version>12.1.8</org.eclipse.jetty.version>
+		<reactor.version>3.8.5</reactor.version>
+		<log4j2.version>2.25.4</log4j2.version>
 		<slf4j.api.version>2.0.17</slf4j.api.version> <!--see also here http://www.slf4j.org/faq.html#changesInVersion18 -->
 		<org.json.version>20251224</org.json.version>
-		<sap.cloud.env.servicebinding.version>0.21.0</sap.cloud.env.servicebinding.version>
+		<sap.cloud.env.servicebinding.version>0.30.0</sap.cloud.env.servicebinding.version>
 		<apache.httpclient.version>4.5.14</apache.httpclient.version>
 		<caffeine.version>3.2.0</caffeine.version>
 		<commons.io.version>2.21.0</commons.io.version>
@@ -71,10 +71,10 @@
 		<junit-jupiter.version>6.0.3</junit-jupiter.version>
 		<maven-surefire-plugin>3.5.5</maven-surefire-plugin>
 		<hamcrest.version>1.3</hamcrest.version>
-		<mockito.version>5.22.0</mockito.version>
+		<mockito.version>5.23.0</mockito.version>
 		<assertj.version>3.27.7</assertj.version>
 		<wiremock.version>3.13.2</wiremock.version>
-		<reactor.test.version>3.8.3</reactor.test.version>
+		<reactor.test.version>3.8.5</reactor.test.version>
 		<jakarta.annotation.version>2.1.1</jakarta.annotation.version>
 		<spotbugs.version>4.9.8.2</spotbugs.version>
 		<spotbugs.annotations.version>4.9.8</spotbugs.annotations.version>
diff --git a/spring-security-3-starter/pom.xml b/spring-security-3-starter/pom.xml
index d4a1be510..ed33cddd6 100644
--- a/spring-security-3-starter/pom.xml
+++ b/spring-security-3-starter/pom.xml
@@ -58,9 +58,9 @@
 		<project.reporting.outputEncoding>UTF-8</project.reporting.outputEncoding>
 		<java.version>17</java.version>
 		<!-- Override parent's Spring Boot 4.x with Spring Boot 3.x for legacy compatibility -->
-		<spring.boot.version>${legacy3.spring.boot.version}</spring.boot.version>
+		<spring.boot.version>4.0.5</spring.boot.version>
 		<spring.security.version>${legacy3.spring.security.version}</spring.security.version>
-		<spring.security.oauth2.version>${legacy3.spring.security.oauth2.version}</spring.security.oauth2.version>
+		<spring.security.oauth2.version>7.0.5</spring.security.oauth2.version>
 	</properties>
 
 	<dependencies>
diff --git a/spring-security-3/pom.xml b/spring-security-3/pom.xml
index adfde961d..5d62b1dfd 100644
--- a/spring-security-3/pom.xml
+++ b/spring-security-3/pom.xml
@@ -50,12 +50,12 @@
 
 	<properties>
 		<!-- Override parent's Spring Boot 4.x with Spring Boot 3.x for legacy compatibility -->
-		<spring.boot.version>${legacy3.spring.boot.version}</spring.boot.version>
+		<spring.boot.version>4.0.5</spring.boot.version>
 		<spring.core.version>${legacy3.spring.core.version}</spring.core.version>
 		<spring.security.version>${legacy3.spring.security.version}</spring.security.version>
-		<spring.security.oauth2.version>${legacy3.spring.security.oauth2.version}</spring.security.oauth2.version>
-		<reactor.version>${legacy3.reactor.version}</reactor.version>
-		<reactor.test.version>${legacy3.reactor.version}</reactor.test.version>
+		<spring.security.oauth2.version>7.0.5</spring.security.oauth2.version>
+		<reactor.version>3.8.5</reactor.version>
+		<reactor.test.version>3.8.5</reactor.test.version>
 	</properties>
 
 	<dependencies>
diff --git a/token-client-spring-3/pom.xml b/token-client-spring-3/pom.xml
index 24b406ef4..2fc1fbe73 100644
--- a/token-client-spring-3/pom.xml
+++ b/token-client-spring-3/pom.xml
@@ -48,7 +48,7 @@
 
 	<properties>
 		<!-- Override parent's Spring Boot 4.x with Spring Boot 3.x for legacy compatibility -->
-		<spring.core.version>${legacy3.spring.core.version}</spring.core.version>
+		<spring.core.version>7.0.7</spring.core.version>
 	</properties>
 
 	<dependencies>