diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 16828eee4..e4fba10fe 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -42,7 +42,7 @@ jobs:
         uses: gradle/actions/setup-gradle@4d9f0ba0025fe599b4ebab900eb7f3a1d93ef4c2 # v5.0.0
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@cdefb33c0f6224e58673d9004f47f7cb3e328b89 # v4.31.10
+        uses: github/codeql-action/init@19b2f06db2b6f5108140aeb04014ef02b648f789 # v4.31.11
         with:
           languages: ${{ matrix.language }}
           # using "linked" helps to keep up with the latest Kotlin support
@@ -59,7 +59,7 @@ jobs:
           DEVELOCITY_ACCESS_KEY: ${{ secrets.DEVELOCITY_ACCESS_KEY }}
 
       - name: Perform CodeQL analysis
-        uses: github/codeql-action/analyze@cdefb33c0f6224e58673d9004f47f7cb3e328b89 # v4.31.10
+        uses: github/codeql-action/analyze@19b2f06db2b6f5108140aeb04014ef02b648f789 # v4.31.11
         with:
           category: "/language:${{matrix.language}}"
 
diff --git a/.github/workflows/ossf-scorecard.yml b/.github/workflows/ossf-scorecard.yml
index b46cbda83..0b763fcf0 100644
--- a/.github/workflows/ossf-scorecard.yml
+++ b/.github/workflows/ossf-scorecard.yml
@@ -44,6 +44,6 @@ jobs:
       # Upload the results to GitHub's code scanning dashboard (optional).
       # Commenting out will disable upload of results to your repo's Code Scanning dashboard
       - name: "Upload to code-scanning"
-        uses: github/codeql-action/upload-sarif@cdefb33c0f6224e58673d9004f47f7cb3e328b89 # v4.31.10
+        uses: github/codeql-action/upload-sarif@19b2f06db2b6f5108140aeb04014ef02b648f789 # v4.31.11
         with:
           sarif_file: results.sarif
diff --git a/log-appender/build.gradle.kts b/log-appender/build.gradle.kts
index 3712f4b22..636f735cd 100644
--- a/log-appender/build.gradle.kts
+++ b/log-appender/build.gradle.kts
@@ -16,8 +16,8 @@ java {
 dependencies {
     // Slf4J / logback
     implementation("org.slf4j:slf4j-api:2.0.17")
-    implementation("ch.qos.logback:logback-core:1.5.25")
-    implementation("ch.qos.logback:logback-classic:1.5.25")
+    implementation("ch.qos.logback:logback-core:1.5.26")
+    implementation("ch.qos.logback:logback-classic:1.5.26")
 
     // JUL to SLF4J bridge
     implementation("org.slf4j:jul-to-slf4j:2.0.17")
diff --git a/telemetry-testing/build.gradle.kts b/telemetry-testing/build.gradle.kts
index 9571ecea6..480867efc 100644
--- a/telemetry-testing/build.gradle.kts
+++ b/telemetry-testing/build.gradle.kts
@@ -42,7 +42,7 @@ dependencies {
     testImplementation("org.mock-server:mockserver-netty:5.15.0")
     testImplementation("org.awaitility:awaitility:4.3.0")
     testImplementation("io.opentelemetry.proto:opentelemetry-proto:1.9.0-alpha")
-    testImplementation("org.assertj:assertj-core:3.27.6")
+    testImplementation("org.assertj:assertj-core:3.27.7")
 
     agent("io.opentelemetry.javaagent:opentelemetry-javaagent:2.24.0")
 }