diff --git a/flink-shaded-asm-9/pom.xml b/flink-shaded-asm-9/pom.xml
index 5d577272..fce8b18c 100644
--- a/flink-shaded-asm-9/pom.xml
+++ b/flink-shaded-asm-9/pom.xml
@@ -35,7 +35,7 @@ under the License.
 
     <properties>
         <asm.major.version>9</asm.major.version>
-        <asm.version>${asm.major.version}.8</asm.version>
+        <asm.version>${asm.major.version}.9.1</asm.version>
     </properties>
 
     <dependencies>
diff --git a/flink-shaded-asm-9/src/main/resources/META-INF/NOTICE b/flink-shaded-asm-9/src/main/resources/META-INF/NOTICE
index df00c293..22cc5363 100644
--- a/flink-shaded-asm-9/src/main/resources/META-INF/NOTICE
+++ b/flink-shaded-asm-9/src/main/resources/META-INF/NOTICE
@@ -7,7 +7,7 @@ The Apache Software Foundation (http://www.apache.org/).
 This project bundles the following dependencies under the BSD license.
 See bundled license files for details.
 
-- org.ow2.asm:asm-analysis:9.8
-- org.ow2.asm:asm-commons:9.8
-- org.ow2.asm:asm-tree:9.8
-- org.ow2.asm:asm:9.8
+- org.ow2.asm:asm-analysis:9.9.1
+- org.ow2.asm:asm-commons:9.9.1
+- org.ow2.asm:asm-tree:9.9.1
+- org.ow2.asm:asm:9.9.1
diff --git a/flink-shaded-guava-33/src/main/resources/META-INF/NOTICE b/flink-shaded-guava-33/src/main/resources/META-INF/NOTICE
index c863e5a9..72d010ee 100644
--- a/flink-shaded-guava-33/src/main/resources/META-INF/NOTICE
+++ b/flink-shaded-guava-33/src/main/resources/META-INF/NOTICE
@@ -6,5 +6,5 @@ The Apache Software Foundation (http://www.apache.org/).
 
 This project bundles the following dependencies under the Apache Software License 2.0 (http://www.apache.org/licenses/LICENSE-2.0.txt)
 
-- com.google.guava:guava:33.4.0-jre
-- com.google.guava:failureaccess:1.0.2
\ No newline at end of file
+- com.google.guava:guava:33.5.0-jre
+- com.google.guava:failureaccess:1.0.3
diff --git a/flink-shaded-jackson-parent/flink-shaded-jackson-2/pom.xml b/flink-shaded-jackson-parent/flink-shaded-jackson-2/pom.xml
index ec6a7403..e755e71a 100644
--- a/flink-shaded-jackson-parent/flink-shaded-jackson-2/pom.xml
+++ b/flink-shaded-jackson-parent/flink-shaded-jackson-2/pom.xml
@@ -25,7 +25,7 @@ under the License.
     <parent>
         <groupId>org.apache.flink</groupId>
         <artifactId>flink-shaded-jackson-parent</artifactId>
-        <version>2.18.2-21.0</version>
+        <version>2.20.1-21.0</version>
     </parent>
 
     <artifactId>flink-shaded-jackson${flink.ci.license.suffix}</artifactId>
@@ -110,4 +110,4 @@ under the License.
             </plugin>
         </plugins>
     </build>
-</project>
\ No newline at end of file
+</project>
diff --git a/flink-shaded-jackson-parent/flink-shaded-jackson-2/src/main/resources/META-INF/NOTICE b/flink-shaded-jackson-parent/flink-shaded-jackson-2/src/main/resources/META-INF/NOTICE
index 68ed0a40..32e81032 100644
--- a/flink-shaded-jackson-parent/flink-shaded-jackson-2/src/main/resources/META-INF/NOTICE
+++ b/flink-shaded-jackson-parent/flink-shaded-jackson-2/src/main/resources/META-INF/NOTICE
@@ -6,12 +6,12 @@ The Apache Software Foundation (http://www.apache.org/).
 
 This project bundles the following dependencies under the Apache Software License 2.0 (http://www.apache.org/licenses/LICENSE-2.0.txt)
 
-- com.fasterxml.jackson.core:jackson-annotations:2.18.2
-- com.fasterxml.jackson.core:jackson-core:2.18.2
-- com.fasterxml.jackson.core:jackson-databind:2.18.2
-- com.fasterxml.jackson.dataformat:jackson-dataformat-csv:2.18.2
-- com.fasterxml.jackson.dataformat:jackson-dataformat-smile:2.18.2
-- com.fasterxml.jackson.dataformat:jackson-dataformat-yaml:2.18.2
-- com.fasterxml.jackson.datatype:jackson-datatype-jdk8:2.18.2
-- com.fasterxml.jackson.datatype:jackson-datatype-jsr310:2.18.2
-- org.yaml:snakeyaml:2.3
+- com.fasterxml.jackson.core:jackson-annotations:2.20
+- com.fasterxml.jackson.core:jackson-core:2.20.1
+- com.fasterxml.jackson.core:jackson-databind:2.20.1
+- com.fasterxml.jackson.dataformat:jackson-dataformat-csv:2.20.1
+- com.fasterxml.jackson.dataformat:jackson-dataformat-smile:2.20.1
+- com.fasterxml.jackson.dataformat:jackson-dataformat-yaml:2.20.1
+- com.fasterxml.jackson.datatype:jackson-datatype-jdk8:2.20.1
+- com.fasterxml.jackson.datatype:jackson-datatype-jsr310:2.20.1
+- org.yaml:snakeyaml:2.4
diff --git a/flink-shaded-jackson-parent/flink-shaded-jackson-module-jsonSchema-2/pom.xml b/flink-shaded-jackson-parent/flink-shaded-jackson-module-jsonSchema-2/pom.xml
index 68d5cee4..ef23b4e4 100644
--- a/flink-shaded-jackson-parent/flink-shaded-jackson-module-jsonSchema-2/pom.xml
+++ b/flink-shaded-jackson-parent/flink-shaded-jackson-module-jsonSchema-2/pom.xml
@@ -25,7 +25,7 @@ under the License.
     <parent>
         <groupId>org.apache.flink</groupId>
         <artifactId>flink-shaded-jackson-parent</artifactId>
-        <version>2.18.2-21.0</version>
+        <version>2.20.1-21.0</version>
     </parent>
 
     <artifactId>flink-shaded-jackson-module-jsonSchema${flink.ci.license.suffix}</artifactId>
@@ -92,4 +92,4 @@ under the License.
             </plugin>
         </plugins>
     </build>
-</project>
\ No newline at end of file
+</project>
diff --git a/flink-shaded-jackson-parent/flink-shaded-jackson-module-jsonSchema-2/src/main/resources/META-INF/NOTICE b/flink-shaded-jackson-parent/flink-shaded-jackson-module-jsonSchema-2/src/main/resources/META-INF/NOTICE
index a17b7862..492d8084 100644
--- a/flink-shaded-jackson-parent/flink-shaded-jackson-module-jsonSchema-2/src/main/resources/META-INF/NOTICE
+++ b/flink-shaded-jackson-parent/flink-shaded-jackson-module-jsonSchema-2/src/main/resources/META-INF/NOTICE
@@ -6,8 +6,8 @@ The Apache Software Foundation (http://www.apache.org/).
 
 This project bundles the following dependencies under the Apache Software License 2.0 (http://www.apache.org/licenses/LICENSE-2.0.txt)
 
-- com.fasterxml.jackson.core:jackson-annotations:2.18.2
-- com.fasterxml.jackson.core:jackson-core:2.18.2
-- com.fasterxml.jackson.core:jackson-databind:2.18.2
-- com.fasterxml.jackson.module:jackson-module-jsonSchema:2.18.2
-- javax.validation:validation-api:1.1.0.Final
\ No newline at end of file
+- com.fasterxml.jackson.core:jackson-annotations:2.20
+- com.fasterxml.jackson.core:jackson-core:2.20.1
+- com.fasterxml.jackson.core:jackson-databind:2.20.1
+- com.fasterxml.jackson.module:jackson-module-jsonSchema:2.20.1
+- javax.validation:validation-api:1.1.0.Final
diff --git a/flink-shaded-jackson-parent/flink-shaded-jsonpath/pom.xml b/flink-shaded-jackson-parent/flink-shaded-jsonpath/pom.xml
index f38d4c93..b57d3d36 100644
--- a/flink-shaded-jackson-parent/flink-shaded-jsonpath/pom.xml
+++ b/flink-shaded-jackson-parent/flink-shaded-jsonpath/pom.xml
@@ -25,13 +25,13 @@ under the License.
     <parent>
         <groupId>org.apache.flink</groupId>
         <artifactId>flink-shaded-jackson-parent</artifactId>
-        <version>2.18.2-21.0</version>
+        <version>2.20.1-21.0</version>
     </parent>
 
     <artifactId>flink-shaded-jsonpath</artifactId>
     <name>flink-shaded-jsonpath</name>
     <!-- override version to jsonpath version -->
-    <version>2.9.0-21.0</version>
+    <version>2.10.0-21.0</version>
 
     <dependencies>
         <dependency>
@@ -74,4 +74,4 @@ under the License.
             </plugin>
         </plugins>
     </build>
-</project>
\ No newline at end of file
+</project>
diff --git a/flink-shaded-jackson-parent/flink-shaded-jsonpath/src/main/resources/META-INF/NOTICE b/flink-shaded-jackson-parent/flink-shaded-jsonpath/src/main/resources/META-INF/NOTICE
index cd020560..9c0ca8c8 100644
--- a/flink-shaded-jackson-parent/flink-shaded-jsonpath/src/main/resources/META-INF/NOTICE
+++ b/flink-shaded-jackson-parent/flink-shaded-jsonpath/src/main/resources/META-INF/NOTICE
@@ -6,4 +6,4 @@ The Apache Software Foundation (http://www.apache.org/).
 
 This project bundles the following dependencies under the Apache Software License 2.0 (http://www.apache.org/licenses/LICENSE-2.0.txt)
 
-- com.jayway.jsonpath:json-path:2.9.0
+- com.jayway.jsonpath:json-path:2.10.0
diff --git a/flink-shaded-jackson-parent/pom.xml b/flink-shaded-jackson-parent/pom.xml
index 2180a443..7ddcdf2c 100644
--- a/flink-shaded-jackson-parent/pom.xml
+++ b/flink-shaded-jackson-parent/pom.xml
@@ -31,7 +31,7 @@ under the License.
     <artifactId>flink-shaded-jackson-parent</artifactId>
     <name>flink-shaded-jackson-parent</name>
     <packaging>pom</packaging>
-    <version>2.18.2-21.0</version>
+    <version>2.20.1-21.0</version>
 
     <modules>
         <module>flink-shaded-jackson-2</module>
@@ -88,4 +88,4 @@ under the License.
         </plugins>
     </build>
 
-</project>
\ No newline at end of file
+</project>
diff --git a/flink-shaded-swagger/pom.xml b/flink-shaded-swagger/pom.xml
index baf6f902..beec0033 100644
--- a/flink-shaded-swagger/pom.xml
+++ b/flink-shaded-swagger/pom.xml
@@ -32,11 +32,15 @@ under the License.
     <artifactId>flink-shaded-swagger</artifactId>
     <name>flink-shaded-swagger</name>
 
+    <properties>
+        <swagger.core.version>2.2.41</swagger.core.version>
+    </properties>
+
     <dependencies>
         <dependency>
             <groupId>io.swagger.core.v3</groupId>
             <artifactId>swagger-core</artifactId>
-            <version>2.2.19</version>
+            <version>${swagger.core.version}</version>
             <exclusions>
                 <exclusion>
                     <groupId>org.slf4j</groupId>
@@ -51,7 +55,7 @@ under the License.
             <dependency>
                 <groupId>org.yaml</groupId>
                 <artifactId>snakeyaml</artifactId>
-                <version>2.1</version>
+                <version>2.4</version>
             </dependency>
             <dependency>
                 <groupId>com.fasterxml.jackson</groupId>
@@ -99,4 +103,4 @@ under the License.
         </plugins>
     </build>
 
-</project>
\ No newline at end of file
+</project>
diff --git a/flink-shaded-swagger/src/main/resources/META-INF/NOTICE b/flink-shaded-swagger/src/main/resources/META-INF/NOTICE
index 09fa3960..ba7a9e45 100644
--- a/flink-shaded-swagger/src/main/resources/META-INF/NOTICE
+++ b/flink-shaded-swagger/src/main/resources/META-INF/NOTICE
@@ -6,16 +6,16 @@ The Apache Software Foundation (http://www.apache.org/).
 
 This project bundles the following dependencies under the Apache Software License 2.0 (http://www.apache.org/licenses/LICENSE-2.0.txt)
 
-- com.fasterxml.jackson.dataformat:jackson-dataformat-yaml:2.18.2
-- com.fasterxml.jackson.datatype:jackson-datatype-jsr310:2.18.2
-- io.swagger.core.v3:swagger-annotations:2.2.19
-- io.swagger.core.v3:swagger-core:2.2.19
-- io.swagger.core.v3:swagger-models:2.2.19
+- com.fasterxml.jackson.dataformat:jackson-dataformat-yaml:2.20.1
+- com.fasterxml.jackson.datatype:jackson-datatype-jsr310:2.20.1
+- io.swagger.core.v3:swagger-annotations:2.2.41
+- io.swagger.core.v3:swagger-core:2.2.41
+- io.swagger.core.v3:swagger-models:2.2.41
 - jakarta.validation:jakarta.validation-api:2.0.2
-- org.apache.commons:commons-lang3:3.13.0
-- org.yaml:snakeyaml:2.1
+- org.apache.commons:commons-lang3:3.18.0
+- org.yaml:snakeyaml:2.4
 
 This project bundles the following dependencies under the Eclipse Distribution License 1.0 (https://www.eclipse.org/org/documents/edl-v10.php)
 
-- jakarta.activation:jakarta.activation-api:1.2.1
-- jakarta.xml.bind:jakarta.xml.bind-api:2.3.2
\ No newline at end of file
+- jakarta.activation:jakarta.activation-api:1.2.2
+- jakarta.xml.bind:jakarta.xml.bind-api:2.3.3
diff --git a/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-35/pom.xml b/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-35/pom.xml
index 6e25450d..7fcade39 100644
--- a/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-35/pom.xml
+++ b/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-35/pom.xml
@@ -34,7 +34,7 @@ under the License.
 
     <properties>
         <zookeeper.version>3.5.10</zookeeper.version>
-        <curator.version>5.4.0</curator.version>
+        <curator.version>5.9.0</curator.version>
     </properties>
 
     <dependencies>
@@ -84,6 +84,10 @@ under the License.
                     <groupId>com.google.guava</groupId>
                     <artifactId>listenablefuture</artifactId>
                 </exclusion>
+                <exclusion>
+                    <groupId>org.jspecify</groupId>
+                    <artifactId>jspecify</artifactId>
+                </exclusion>
                 <exclusion>
                     <!-- not relevant at runtime -->
                     <groupId>com.google.j2objc</groupId>
@@ -139,4 +143,4 @@ under the License.
             </properties>
         </profile>
     </profiles>
-</project>
\ No newline at end of file
+</project>
diff --git a/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-35/src/main/resources/META-INF/NOTICE b/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-35/src/main/resources/META-INF/NOTICE
index fc05ca18..a03933d1 100644
--- a/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-35/src/main/resources/META-INF/NOTICE
+++ b/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-35/src/main/resources/META-INF/NOTICE
@@ -6,7 +6,7 @@ The Apache Software Foundation (http://www.apache.org/).
 
 This project bundles the following dependencies under the Apache Software License 2.0 (http://www.apache.org/licenses/LICENSE-2.0.txt)
 
-- com.google.guava:guava:33.4.0-jre
+- com.google.guava:guava:33.5.0-jre
 - io.netty:netty-buffer:4.2.6.Final
 - io.netty:netty-codec-base:4.2.6.Final
 - io.netty:netty-common:4.2.6.Final
@@ -16,8 +16,8 @@ This project bundles the following dependencies under the Apache Software Licens
 - io.netty:netty-transport-native-epoll:4.2.6.Final
 - io.netty:netty-transport-native-unix-common:4.2.6.Final
 - io.netty:netty-transport:4.2.6.Final
-- org.apache.curator:curator-client:5.4.0
-- org.apache.curator:curator-framework:5.4.0
-- org.apache.curator:curator-recipes:5.4.0
+- org.apache.curator:curator-client:5.9.0
+- org.apache.curator:curator-framework:5.9.0
+- org.apache.curator:curator-recipes:5.9.0
 - org.apache.zookeeper:zookeeper-jute:3.5.10
 - org.apache.zookeeper:zookeeper:3.5.10
diff --git a/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-36/pom.xml b/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-36/pom.xml
index 15a7cdca..65dd8c86 100644
--- a/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-36/pom.xml
+++ b/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-36/pom.xml
@@ -34,7 +34,7 @@ under the License.
 
     <properties>
         <zookeeper.version>3.6.4</zookeeper.version>
-        <curator.version>5.4.0</curator.version>
+        <curator.version>5.9.0</curator.version>
     </properties>
 
     <dependencies>
@@ -109,6 +109,10 @@ under the License.
                     <groupId>com.google.guava</groupId>
                     <artifactId>listenablefuture</artifactId>
                 </exclusion>
+                <exclusion>
+                    <groupId>org.jspecify</groupId>
+                    <artifactId>jspecify</artifactId>
+                </exclusion>
                 <exclusion>
                     <!-- not relevant at runtime -->
                     <groupId>com.google.j2objc</groupId>
@@ -164,4 +168,4 @@ under the License.
             </properties>
         </profile>
     </profiles>
-</project>
\ No newline at end of file
+</project>
diff --git a/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-36/src/main/resources/META-INF/NOTICE b/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-36/src/main/resources/META-INF/NOTICE
index 391e23da..bcf6295e 100644
--- a/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-36/src/main/resources/META-INF/NOTICE
+++ b/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-36/src/main/resources/META-INF/NOTICE
@@ -6,7 +6,7 @@ The Apache Software Foundation (http://www.apache.org/).
 
 This project bundles the following dependencies under the Apache Software License 2.0 (http://www.apache.org/licenses/LICENSE-2.0.txt)
 
-- com.google.guava:guava:33.4.0-jre
+- com.google.guava:guava:33.5.0-jre
 - io.dropwizard.metrics:metrics-core:3.2.5
 - io.netty:netty-buffer:4.2.6.Final
 - io.netty:netty-codec-base:4.2.6.Final
@@ -17,8 +17,8 @@ This project bundles the following dependencies under the Apache Software Licens
 - io.netty:netty-transport-native-epoll:4.2.6.Final
 - io.netty:netty-transport-native-unix-common:4.2.6.Final
 - io.netty:netty-transport:4.2.6.Final
-- org.apache.curator:curator-client:5.4.0
-- org.apache.curator:curator-framework:5.4.0
-- org.apache.curator:curator-recipes:5.4.0
+- org.apache.curator:curator-client:5.9.0
+- org.apache.curator:curator-framework:5.9.0
+- org.apache.curator:curator-recipes:5.9.0
 - org.apache.zookeeper:zookeeper-jute:3.6.4
 - org.apache.zookeeper:zookeeper:3.6.4
diff --git a/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-37/pom.xml b/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-37/pom.xml
index b0c56a06..7cac3b20 100644
--- a/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-37/pom.xml
+++ b/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-37/pom.xml
@@ -34,7 +34,7 @@ under the License.
 
     <properties>
         <zookeeper.version>3.7.2</zookeeper.version>
-        <curator.version>5.4.0</curator.version>
+        <curator.version>5.9.0</curator.version>
     </properties>
 
     <dependencies>
@@ -94,6 +94,10 @@ under the License.
                     <groupId>com.google.guava</groupId>
                     <artifactId>listenablefuture</artifactId>
                 </exclusion>
+                <exclusion>
+                    <groupId>org.jspecify</groupId>
+                    <artifactId>jspecify</artifactId>
+                </exclusion>
                 <exclusion>
                     <!-- not relevant at runtime -->
                     <groupId>com.google.j2objc</groupId>
@@ -149,4 +153,4 @@ under the License.
             </properties>
         </profile>
     </profiles>
-</project>
\ No newline at end of file
+</project>
diff --git a/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-37/src/main/resources/META-INF/NOTICE b/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-37/src/main/resources/META-INF/NOTICE
index 94745616..9577fdd0 100644
--- a/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-37/src/main/resources/META-INF/NOTICE
+++ b/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-37/src/main/resources/META-INF/NOTICE
@@ -6,7 +6,7 @@ The Apache Software Foundation (http://www.apache.org/).
 
 This project bundles the following dependencies under the Apache Software License 2.0 (http://www.apache.org/licenses/LICENSE-2.0.txt)
 
-- com.google.guava:guava:33.4.0-jre
+- com.google.guava:guava:33.5.0-jre
 - io.dropwizard.metrics:metrics-core:4.1.12.1
 - io.netty:netty-buffer:4.2.6.Final
 - io.netty:netty-codec-base:4.2.6.Final
@@ -17,8 +17,8 @@ This project bundles the following dependencies under the Apache Software Licens
 - io.netty:netty-transport-native-epoll:4.2.6.Final
 - io.netty:netty-transport-native-unix-common:4.2.6.Final
 - io.netty:netty-transport:4.2.6.Final
-- org.apache.curator:curator-client:5.4.0
-- org.apache.curator:curator-framework:5.4.0
-- org.apache.curator:curator-recipes:5.4.0
+- org.apache.curator:curator-client:5.9.0
+- org.apache.curator:curator-framework:5.9.0
+- org.apache.curator:curator-recipes:5.9.0
 - org.apache.zookeeper:zookeeper-jute:3.7.2
 - org.apache.zookeeper:zookeeper:3.7.2
diff --git a/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-38/pom.xml b/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-38/pom.xml
index eca5e0d5..c1deec63 100644
--- a/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-38/pom.xml
+++ b/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-38/pom.xml
@@ -33,8 +33,8 @@ under the License.
     <version>${zookeeper.version}-21.0</version>
 
     <properties>
-        <zookeeper.version>3.8.4</zookeeper.version>
-        <curator.version>5.4.0</curator.version>
+        <zookeeper.version>3.8.5</zookeeper.version>
+        <curator.version>5.9.0</curator.version>
     </properties>
 
     <dependencies>
@@ -98,6 +98,10 @@ under the License.
                     <groupId>com.google.guava</groupId>
                     <artifactId>listenablefuture</artifactId>
                 </exclusion>
+                <exclusion>
+                    <groupId>org.jspecify</groupId>
+                    <artifactId>jspecify</artifactId>
+                </exclusion>
                 <exclusion>
                     <!-- not relevant at runtime -->
                     <groupId>com.google.j2objc</groupId>
@@ -153,4 +157,4 @@ under the License.
             </properties>
         </profile>
     </profiles>
-</project>
\ No newline at end of file
+</project>
diff --git a/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-38/src/main/resources/META-INF/NOTICE b/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-38/src/main/resources/META-INF/NOTICE
index 99a3f7dc..abb4dcb1 100644
--- a/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-38/src/main/resources/META-INF/NOTICE
+++ b/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-38/src/main/resources/META-INF/NOTICE
@@ -6,8 +6,8 @@ The Apache Software Foundation (http://www.apache.org/).
 
 This project bundles the following dependencies under the Apache Software License 2.0 (http://www.apache.org/licenses/LICENSE-2.0.txt)
 
-- com.google.guava:guava:33.4.0-jre
-- commons-io:commons-io:2.11.0
+- com.google.guava:guava:33.5.0-jre
+- commons-io:commons-io:2.17.0
 - io.dropwizard.metrics:metrics-core:4.1.12.1
 - io.netty:netty-buffer:4.2.6.Final
 - io.netty:netty-codec-base:4.2.6.Final
@@ -18,8 +18,8 @@ This project bundles the following dependencies under the Apache Software Licens
 - io.netty:netty-transport-native-epoll:4.2.6.Final
 - io.netty:netty-transport-native-unix-common:4.2.6.Final
 - io.netty:netty-transport:4.2.6.Final
-- org.apache.curator:curator-client:5.4.0
-- org.apache.curator:curator-framework:5.4.0
-- org.apache.curator:curator-recipes:5.4.0
-- org.apache.zookeeper:zookeeper-jute:3.8.4
-- org.apache.zookeeper:zookeeper:3.8.4
+- org.apache.curator:curator-client:5.9.0
+- org.apache.curator:curator-framework:5.9.0
+- org.apache.curator:curator-recipes:5.9.0
+- org.apache.zookeeper:zookeeper-jute:3.8.5
+- org.apache.zookeeper:zookeeper:3.8.5
diff --git a/pom.xml b/pom.xml
index 46bc2430..eaba2340 100644
--- a/pom.xml
+++ b/pom.xml
@@ -63,9 +63,9 @@ under the License.
     <properties>
         <shading.prefix>org.apache.flink.shaded</shading.prefix>
         <netty.version>4.2.6.Final</netty.version>
-        <jackson.version>2.18.2</jackson.version>
-        <jsonpath.version>2.9.0</jsonpath.version>
-        <guava.version>33.4.0-jre</guava.version>
+        <jackson.version>2.20.1</jackson.version>
+        <jsonpath.version>2.10.0</jsonpath.version>
+        <guava.version>33.5.0-jre</guava.version>
         <!-- The license check requires the artifactId to match the directory that the module resides in.
              This is not the case for several modules in flink-shaded for legacy reasons.
              This property can be used by modules to add a suffix to the artifactId to match the directory name on CI