Update dependencies

Author: labkey-adam

gradle.properties

@@ -102,7 +102,7 @@ apacheTomcatVersion=11.0.22
 # (mothership) -> json-path -> json-smart -> accessor-smart
 # (core) -> graalvm
 # tika
-asmVersion=9.9.1
+asmVersion=9.10
 
 awsSdkVersion=2.29.50
 
@@ -194,15 +194,15 @@ httpcoreVersion=4.4.16
 intellijKotlinVersion=2.3.10
 
 # Update the three Jackson dependency versions below in tandem, unless one gets a patch release out-of-sync with the others
-jacksonVersion=2.21.3
-jacksonDatabindVersion=2.21.3
-jacksonJaxrsBaseVersion=2.21.3
+jacksonVersion=2.21.4
+jacksonDatabindVersion=2.21.4
+jacksonJaxrsBaseVersion=2.21.4
 
 # Note the inconsistent version numbering for "annotations"... it no longer matches the above
 jacksonAnnotationsVersion=2.21
 
 # Spring Boot brings in a transitive dependency on Jackson 3.x. It has changed package names and can coexist with Jackson 2.x.
-jackson3Version=3.1.3
+jackson3Version=3.1.4
 
 # The Jakarta Activation API version that Angus Activation implements. Keep in sync with angusActivationVersion (above).
 jakartaActivationApiVersion=2.1.4
@@ -219,7 +219,7 @@ jaxbOldVersion=2.3.3
 
 # All other direct and indirect uses of JAXB use the current, jakarta-packaged versions
 jaxbApiVersion=4.0.5
-jaxbVersion=4.0.7
+jaxbVersion=4.0.8
 
 jaxrpcVersion=1.1
 
@@ -233,12 +233,12 @@ jmockVersion=2.6.0
 # Transitive dependency via azure-identity and docker; force for consistency
 jnaVersion=5.18.1
 
-jodaTimeVersion=2.14.1
+jodaTimeVersion=2.14.2
 
 # brought in transitively by Cloud, FileTransfer, SequenceAnalysis, etc. Need to resolve consistently
 jsr305Version=3.0.2
 
-orgJsonVersion=20251224
+orgJsonVersion=20260522
 
 jsoupVersion=1.22.2
 
@@ -255,12 +255,12 @@ lombokVersion=1.18.46
 luceneVersion=10.4.0
 
 # Microsoft library for sending OAuth2-authenticated notification emails via the Microsoft Graph API
-microsoftGraphVersion=6.59.0
+microsoftGraphVersion=6.65.0
 
 mssqlJdbcVersion=13.4.0.jre11
 
 # Netty - transitive dependency via azure-core-http-netty; force for CVE-2026-33871, CVE-2026-33870
-nettyVersion=4.2.13.Final
+nettyVersion=4.2.14.Final
 # Reactor - transitive dependency via azure-core; force for version consistency across modules
 reactorCoreVersion=3.8.1
 
@@ -293,9 +293,9 @@ romeVersion=2.1.0
 servletApiVersion=6.1.0
 
 # this version is forced for compatibility with pipeline and tika
-slf4jLog4j12Version=2.0.17
+slf4jLog4j12Version=2.0.18
 # this version is forced for compatibility with api, LDK, and workflow
-slf4jLog4jApiVersion=2.0.17
+slf4jLog4jApiVersion=2.0.18
 
 # This is a dependency for HTSJDK. Force version for CVE-2023-43642
 snappyJavaVersion=1.1.10.8
@@ -306,23 +306,23 @@ springBootVersion=4.0.6
 springVersion=7.0.7
 springAiVersion=2.0.0-M6
 
-sqliteJdbcVersion=3.53.0.0
+sqliteJdbcVersion=3.53.1.0
 
 # NLP and SAML bring stax2-api in as a transitive dependency but with very different versions. We force the later version.
 stax2ApiVersion=4.2.2
 
 thumbnailatorVersion=0.4.21
 
 # used for tika-core in API and tika-parsers in search
-tikaVersion=3.3.0
+tikaVersion=3.3.1
 
 # sync with Tika
 tukaaniXZVersion=1.12
 
 validationApiVersion=1.1.0.Final
 
 # NLP and SAML bring woodstox-core in as a transitive dependency but with very different versions. We force the later version.
-woodstoxCoreVersion=7.1.1
+woodstoxCoreVersion=7.2.0
 
 # saml and query bring in different versions transitively; we force the later one
 xalanVersion=2.7.2