diff --git a/.github/workflows/maven.yml b/.github/workflows/maven.yml
index c20bf249..6799ab3a 100644
--- a/.github/workflows/maven.yml
+++ b/.github/workflows/maven.yml
@@ -52,11 +52,11 @@ jobs:
       - name: Install avro tools
         if: matrix.java_version == '17'
         run: |
-          wget https://dlcdn.apache.org/avro/avro-1.11.3/java/avro-tools-1.11.3.jar
+          wget https://dlcdn.apache.org/avro/avro-1.11.5/java/avro-tools-1.11.5.jar
           mkdir -p /opt/avro
-          mv avro-tools-1.11.3.jar /opt/avro/
-          chmod +x /opt/avro/avro-tools-1.11.3.jar
-          echo "alias avro-tools='java -jar /opt/avro/avro-tools-1.11.3.jar'" > ~/.bashrc
+          mv avro-tools-1.11.5.jar /opt/avro/
+          chmod +x /opt/avro/avro-tools-1.11.5.jar
+          echo "alias avro-tools='java -jar /opt/avro/avro-tools-1.11.5.jar'" > ~/.bashrc
       - name: End to end tests
         shell: bash
         if: matrix.java_version == '17'
diff --git a/dbeam-bom/pom.xml b/dbeam-bom/pom.xml
index 4e7d364e..5c6d6e56 100644
--- a/dbeam-bom/pom.xml
+++ b/dbeam-bom/pom.xml
@@ -47,7 +47,7 @@
       <plugin>
         <groupId>org.codehaus.mojo</groupId>
         <artifactId>build-helper-maven-plugin</artifactId>
-        <version>3.6.0</version>
+        <version>3.6.1</version>
         <executions>
           <execution>
             <id>attach-effective-pom</id>
diff --git a/pom.xml b/pom.xml
index b38ac1ae..388402f2 100644
--- a/pom.xml
+++ b/pom.xml
@@ -106,30 +106,30 @@
     <project.reporting.outputEncoding>UTF-8</project.reporting.outputEncoding>
 
     <!-- apache beam BOM -->
-    <!-- https://github.com/apache/beam/blob/release-2.65/buildSrc/src/main/groovy/org/apache/beam/gradle/BeamModulePlugin.groovy#L588 -->
-    <beam.version>2.65.0</beam.version>
+    <!-- https://github.com/apache/beam/blob/release-2.72/buildSrc/src/main/groovy/org/apache/beam/gradle/BeamModulePlugin.groovy#L588 -->
+    <beam.version>2.72.0</beam.version>
     <!-- versions from beam -->
     <auto-value.version>1.9</auto-value.version>
-    <avro.version>1.11.4</avro.version>
+    <avro.version>1.11.5</avro.version>
     <checker-qual.version>3.42.0</checker-qual.version>
     <commons-codec.version>1.17.1</commons-codec.version>
     <commons-compress.version>1.26.2</commons-compress.version>
-    <errorprone.version>2.10.0</errorprone.version>
-    <guava.version>33.1.0-jre</guava.version>
+    <errorprone.version>2.31.0</errorprone.version>
+    <guava.version>33.5.0-jre</guava.version>
     <hamcrest.version>2.1</hamcrest.version>
     <httpclient.version>4.5.13</httpclient.version>
     <httpcore.version>4.4.14</httpcore.version>
-    <jackson.version>2.15.4</jackson.version>
-    <joda-time.version>2.10.14</joda-time.version>
-    <netty.version>4.1.121.Final</netty.version>
-    <slf4j.version>1.7.30</slf4j.version>
+    <jackson.version>2.18.2</jackson.version>
+    <joda-time.version>2.14.0</joda-time.version>
+    <netty.version>4.1.124.Final</netty.version>
+    <slf4j.version>2.0.16</slf4j.version>
     <threetenbp.version>1.6.8</threetenbp.version>
-    <zstd-jni.version>1.5.6-3</zstd-jni.version>
+    <zstd-jni.version>1.5.7-7</zstd-jni.version>
 
     <!-- GCP BOM -->
     <!-- https://github.com/googleapis/java-cloud-bom/releases -->
-    <!-- https://storage.googleapis.com/cloud-opensource-java-dashboard/com.google.cloud/libraries-bom/26.45.0/index.html -->
-    <google-cloud-libraries-bom.version>26.57.0</google-cloud-libraries-bom.version>
+    <!-- https://storage.googleapis.com/cloud-opensource-java-dashboard/com.google.cloud/libraries-bom/26.76.0/index.html -->
+    <google-cloud-libraries-bom.version>26.76.0</google-cloud-libraries-bom.version>
     <!-- versions from GCP bom -->
     <opencensus.version>0.31.1</opencensus.version>
 
@@ -137,9 +137,9 @@
     <bouncycastle.version>1.78.1</bouncycastle.version>
     <junit.version>4.13.2</junit.version>
     <mysql.version>8.4.0</mysql.version>
-    <mariadb.version>3.5.3</mariadb.version>
-    <postgresql.version>42.7.4</postgresql.version>
-    <socket-factory.version>1.18.0</socket-factory.version>
+    <mariadb.version>3.5.8</mariadb.version>
+    <postgresql.version>42.7.8</postgresql.version>
+    <socket-factory.version>1.25.0</socket-factory.version>
   </properties>
 
   <dependencyManagement>
@@ -238,6 +238,27 @@
         <artifactId>opencensus-contrib-grpc-metrics</artifactId>
         <version>${opencensus.version}</version>
       </dependency>
+      <!-- resolve google-cloud-bigtable convergence: beam io brings 2.73.1 vs libraries-bom 2.73.0 -->
+      <dependency>
+        <groupId>com.google.cloud</groupId>
+        <artifactId>google-cloud-bigtable</artifactId>
+        <version>2.73.1</version>
+      </dependency>
+      <dependency>
+        <groupId>com.google.api.grpc</groupId>
+        <artifactId>grpc-google-cloud-bigtable-v2</artifactId>
+        <version>2.73.1</version>
+      </dependency>
+      <dependency>
+        <groupId>com.google.api.grpc</groupId>
+        <artifactId>proto-google-cloud-bigtable-v2</artifactId>
+        <version>2.73.1</version>
+      </dependency>
+      <dependency>
+        <groupId>com.google.api.grpc</groupId>
+        <artifactId>proto-google-cloud-bigtable-admin-v2</artifactId>
+        <version>2.73.1</version>
+      </dependency>
       <!-- overrides to resolve dependency conflicts - end-->
       <!-- overrides with vulnerability fixes - start-->
       <!-- overrides with vulnerability fixes - end-->
@@ -265,7 +286,7 @@
       <dependency>
         <groupId>com.google.apis</groupId>
         <artifactId>google-api-services-cloudkms</artifactId>
-        <version>v1-rev20240314-2.0.0</version>
+        <version>v1-rev20260319-2.0.0</version>
       </dependency>
 
       <!-- Runners -->
@@ -420,7 +441,7 @@
       <dependency>
         <groupId>org.mockito</groupId>
         <artifactId>mockito-core</artifactId>
-        <version>5.17.0</version>
+        <version>5.20.0</version>
         <scope>test</scope>
       </dependency>
       <dependency>
@@ -458,7 +479,7 @@
         <plugin>
           <groupId>org.apache.maven.plugins</groupId>
           <artifactId>maven-compiler-plugin</artifactId>
-          <version>3.13.0</version>
+          <version>3.14.1</version>
           <executions>
             <execution>
               <goals>
@@ -519,7 +540,7 @@
         <plugin>
           <groupId>org.apache.maven.plugins</groupId>
           <artifactId>maven-project-info-reports-plugin</artifactId>
-          <version>3.8.0</version>
+          <version>3.9.0</version>
         </plugin>
         <plugin>
           <artifactId>maven-surefire-plugin</artifactId>
@@ -532,7 +553,7 @@
         <plugin>
           <groupId>org.apache.maven.plugins</groupId>
           <artifactId>maven-enforcer-plugin</artifactId>
-          <version>3.5.0</version>
+          <version>3.6.2</version>
           <executions>
             <execution>
               <id>enforce</id>
@@ -653,7 +674,7 @@
           <plugin>
             <groupId>org.apache.maven.plugins</groupId>
             <artifactId>maven-gpg-plugin</artifactId>
-            <version>3.2.7</version>
+            <version>3.2.8</version>
             <executions>
               <execution>
                 <id>sign-artifacts</id>
@@ -675,7 +696,7 @@
           <plugin>
             <groupId>org.apache.maven.plugins</groupId>
             <artifactId>maven-javadoc-plugin</artifactId>
-            <version>3.11.2</version>
+            <version>3.12.0</version>
             <configuration>
               <source>8</source>
             </configuration>