diff --git a/gradle/libs.versions.toml b/gradle/libs.versions.toml
index f11e274..3aa36a7 100644
--- a/gradle/libs.versions.toml
+++ b/gradle/libs.versions.toml
@@ -7,9 +7,9 @@
 # on `com.fasterxml.jackson.core` (pulled in transitively by databind).
 
 [versions]
-jackson = "3.2.0"
-bouncycastle = "1.84"
-junit-jupiter = "6.1.1"
+jackson = "3.2.1"
+bouncycastle = "1.85"
+junit-jupiter = "6.1.2"
 # pk-auth: the passkeys-first auth library set, consumed from Maven Central (NOT vendored).
 # mini-oidc depends on pk-auth-core for the passkey credential layer.
 pk-auth = "2.2.0"