diff --git a/.github/workflows/azure-integration.yml b/.github/workflows/azure-integration.yml
index 3186448d35..0e112317c3 100644
--- a/.github/workflows/azure-integration.yml
+++ b/.github/workflows/azure-integration.yml
@@ -24,7 +24,7 @@ jobs:
       matrix:
         java-version: [ 17, 21 ]
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v7
     - uses: actions/setup-java@v5
       with:
         distribution: 'temurin'
@@ -53,7 +53,7 @@ jobs:
     #  !contains(needs.*.result, 'cancelled') &&
     #  !contains(needs.*.result, 'failure')
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v7
     - uses: actions/setup-java@v5
       with:
         distribution: 'temurin'
diff --git a/.github/workflows/backport.yml b/.github/workflows/backport.yml
index f3a05ac498..060f7f4c05 100644
--- a/.github/workflows/backport.yml
+++ b/.github/workflows/backport.yml
@@ -13,7 +13,7 @@ jobs:
       - name: Backport Bot
         id: backport
         if: github.event.pull_request.merged && ( ( github.event.action == 'closed' && contains( join( github.event.pull_request.labels.*.name ), 'backport') ) || contains( github.event.label.name, 'backport' ) )
-        uses: m-kuhn/backport@v1.2.7
+        uses: m-kuhn/backport@v1.2.8
         with:
           github_token: ${{ secrets.GH_TOKEN_BOT }}
 
diff --git a/.github/workflows/diskquota-jdbc-integration.yml b/.github/workflows/diskquota-jdbc-integration.yml
index 63ec78c382..18d0f726c7 100644
--- a/.github/workflows/diskquota-jdbc-integration.yml
+++ b/.github/workflows/diskquota-jdbc-integration.yml
@@ -24,7 +24,7 @@ jobs:
       matrix:
         java-version: [ 17, 21 ]
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v7
     - uses: actions/setup-java@v5
       with:
         distribution: 'temurin'
diff --git a/.github/workflows/gcs-integration.yml b/.github/workflows/gcs-integration.yml
index f057ad30fe..df3230f552 100644
--- a/.github/workflows/gcs-integration.yml
+++ b/.github/workflows/gcs-integration.yml
@@ -24,7 +24,7 @@ jobs:
       matrix:
         java-version: [ 17, 21 ]
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v7
     - uses: actions/setup-java@v5
       with:
         distribution: 'temurin'
diff --git a/.github/workflows/integration.yml b/.github/workflows/integration.yml
index 1608d29e61..099b081bcc 100644
--- a/.github/workflows/integration.yml
+++ b/.github/workflows/integration.yml
@@ -21,9 +21,9 @@ jobs:
       with:
         java-version: 17
         distribution: 'temurin'
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v7
     - name: Maven repository caching
-      uses: actions/cache@v5
+      uses: actions/cache@v6
       with:
         path: ~/.m2/repository
         key: gwc-integration-${{ runner.os }}-maven-${{ hashFiles('**/pom.xml') }}
diff --git a/.github/workflows/linux.yml b/.github/workflows/linux.yml
index 3360d527ae..cb9e65c777 100644
--- a/.github/workflows/linux.yml
+++ b/.github/workflows/linux.yml
@@ -13,14 +13,14 @@ jobs:
   openjdk17:
     runs-on: [ubuntu-22.04]
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v7
     - name: Set up JDK 17
       uses: actions/setup-java@v5
       with:
         java-version: 17
         distribution: 'temurin'
     - name: Maven repository caching
-      uses: actions/cache@v5
+      uses: actions/cache@v6
       with:
         path: ~/.m2/repository
         key: gwc-${{ runner.os }}-maven-${{ hashFiles('**/pom.xml') }}
@@ -35,14 +35,14 @@ jobs:
   openjdk21:
     runs-on: [ubuntu-22.04]
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v7
     - name: Set up JDK 21
       uses: actions/setup-java@v5
       with:
         java-version: 21
         distribution: 'temurin'
     - name: Maven repository caching
-      uses: actions/cache@v5
+      uses: actions/cache@v6
       with:
         path: ~/.m2/repository
         key: gwc-${{ runner.os }}-maven-${{ hashFiles('**/pom.xml') }}
@@ -57,14 +57,14 @@ jobs:
   openjdk25:
     runs-on: [ubuntu-22.04]
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v7
     - name: Set up JDK 25
       uses: actions/setup-java@v5
       with:
         java-version: 25
         distribution: 'temurin'
     - name: Maven repository caching
-      uses: actions/cache@v5
+      uses: actions/cache@v6
       with:
         path: ~/.m2/repository
         key: gwc-${{ runner.os }}-maven-${{ hashFiles('**/pom.xml') }}
@@ -80,14 +80,14 @@ jobs:
   QA:
     runs-on: [ubuntu-22.04]
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v7
     - name: Set up JDK 17
       uses: actions/setup-java@v5
       with:
         java-version: 17
         distribution: 'temurin'
     - name: Maven repository caching
-      uses: actions/cache@v5
+      uses: actions/cache@v6
       with:
         path: ~/.m2/repository
         key: gwc-${{ runner.os }}-maven-${{ hashFiles('**/pom.xml') }}
diff --git a/.github/workflows/macos.yml b/.github/workflows/macos.yml
index 66382bdc7d..253eddc393 100644
--- a/.github/workflows/macos.yml
+++ b/.github/workflows/macos.yml
@@ -12,14 +12,14 @@ jobs:
     runs-on: [macos-latest]
 
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v7
     - name: Set up JDK 17
       uses: actions/setup-java@v5
       with:
         java-version: 17
         distribution: 'temurin'
     - name: Maven repository caching
-      uses: actions/cache@v5
+      uses: actions/cache@v6
       with:
         path: ~/.m2/repository
         key: gs-${{ runner.os }}-maven-${{ hashFiles('**/pom.xml') }}
diff --git a/.github/workflows/windows.yml b/.github/workflows/windows.yml
index ea06818092..56f83a6653 100644
--- a/.github/workflows/windows.yml
+++ b/.github/workflows/windows.yml
@@ -12,14 +12,14 @@ jobs:
     runs-on: [windows-latest]
 
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v7
     - name: Set up JDK 17
       uses: actions/setup-java@v5
       with:
         java-version: 17
         distribution: 'temurin'
     - name: Maven repository caching
-      uses: actions/cache@v5
+      uses: actions/cache@v6
       with:
         path: ~/.m2/repository
         key: gwc-${{ runner.os }}-maven-${{ hashFiles('**/pom.xml') }}
diff --git a/geowebcache/pom.xml b/geowebcache/pom.xml
index e65e918b4e..c802657941 100644
--- a/geowebcache/pom.xml
+++ b/geowebcache/pom.xml
@@ -53,10 +53,10 @@
   <properties>
     <gt.version>36-SNAPSHOT</gt.version>
     <spring.version>7.0.7</spring.version>
-    <spring.security.version>7.0.4</spring.security.version>
+    <spring.security.version>7.0.5</spring.security.version>
     <xstream.version>1.4.21</xstream.version>
     <cloud-dependencies-bom.version>1.0.2</cloud-dependencies-bom.version>
-    <commons-codec.version>1.18.0</commons-codec.version>
+    <commons-codec.version>1.22.0</commons-codec.version>
     <commons-fileupload.version>2.0.0-M5</commons-fileupload.version>
     <hamcrest.version>3.0</hamcrest.version>
     <java.awt.headless>true</java.awt.headless>