diff --git a/.github/workflows/build_mpsqa.yml b/.github/workflows/build_mpsqa.yml
index 56378a45..6757fbaf 100644
--- a/.github/workflows/build_mpsqa.yml
+++ b/.github/workflows/build_mpsqa.yml
@@ -23,16 +23,16 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5
 
     - name: Set up JDK
-      uses: actions/setup-java@v4
+      uses: actions/setup-java@dded0888837ed1f317902acf8a20df0ad188d165 # v5
       with:
         java-version: 17
         distribution: temurin
 
     - name: Set up Gradle
-      uses: gradle/actions/setup-gradle@v4
+      uses: gradle/actions/setup-gradle@4d9f0ba0025fe599b4ebab900eb7f3a1d93ef4c2 # v5
 
     - name: Build MPS-QA and migrate
       run: |
diff --git a/build.gradle.kts b/build.gradle.kts
index 6f82c502..b11cdad1 100644
--- a/build.gradle.kts
+++ b/build.gradle.kts
@@ -13,7 +13,7 @@ plugins {
 
     id("de.itemis.mps.gradle.launcher") version "2.7.0.+"
 
-    id("org.cyclonedx.bom") version "2.2.0"
+    id("org.cyclonedx.bom") version "3.0.2"
 }
 
 val jbrVers = "21.0.6-b895.109"
@@ -63,19 +63,19 @@ val jacoco by configurations.creating { isTransitive = false }
 dependencies {
     // Use the following dependency for published releases:
     //   mps("com.jetbrains:mps:$mpsVersion")
-    mps("com.jetbrains.mps:mps-prerelease:251.23774.10102")
+    mps("com.jetbrains.mps:mps-prerelease:253.28294.10012")
 
-    plantuml("net.sourceforge.plantuml:plantuml-asl:1.2025.2")
+    plantuml("net.sourceforge.plantuml:plantuml-asl:1.2025.10")
 
-    baseLib("org.apache.commons:commons-lang3:3.17.0")
-    baseLib("commons-cli:commons-cli:1.10.0")
-    baseLib("commons-io:commons-io:2.20.0")
+    baseLib("org.apache.commons:commons-lang3:3.20.0")
+    baseLib("commons-cli:commons-cli:1.11.0")
+    baseLib("commons-io:commons-io:2.21.0")
 
     treemap("net.sf.jtreemap:jtreemap:1.1.3")
     treemap("net.sf.jtreemap:ktreemap:1.1.0-atlassian-01")
 
-    val asmVersion = "9.8"
-    val jacocoVersion = "0.8.13"
+    val asmVersion = "9.9"
+    val jacocoVersion = "0.8.14"
 
     jacoco("org.ow2.asm:asm:$asmVersion")
     jacoco("org.ow2.asm:asm-commons:$asmVersion")
diff --git a/gradle/wrapper/gradle-wrapper.properties b/gradle/wrapper/gradle-wrapper.properties
index 78cb6e16..8a848873 100644
--- a/gradle/wrapper/gradle-wrapper.properties
+++ b/gradle/wrapper/gradle-wrapper.properties
@@ -1,7 +1,7 @@
 distributionBase=GRADLE_USER_HOME
 distributionPath=wrapper/dists
-distributionSha256Sum=bd71102213493060956ec229d946beee57158dbd89d0e62b91bca0fa2c5f3531
-distributionUrl=https\://services.gradle.org/distributions/gradle-8.14.3-bin.zip
+distributionSha256Sum=72f44c9f8ebcb1af43838f45ee5c4aa9c5444898b3468ab3f4af7b6076c5bc3f
+distributionUrl=https\://services.gradle.org/distributions/gradle-9.2.1-bin.zip
 networkTimeout=10000
 validateDistributionUrl=true
 zipStoreBase=GRADLE_USER_HOME