diff --git a/build.gradle b/build.gradle
index 46c5bf97..effb3577 100644
--- a/build.gradle
+++ b/build.gradle
@@ -3,7 +3,6 @@ plugins {
   id 'application'
   id 'jacoco'
   id 'org.sonarqube' version '7.4.0.8496'
-  id 'io.github.ben-manes.versions' version '0.60.0'
 }
 
 group = 'de.komoot.photon'
@@ -41,7 +40,7 @@ dependencies {
     }
 
     implementation 'org.opensearch.client:opensearch-java:3.9.0'
-    implementation 'org.apache.httpcomponents.client5:httpclient5:5.6.3'
+    implementation 'org.apache.httpcomponents.client5:httpclient5:5.6.4'
 
     implementation('org.codelibs.opensearch:opensearch-runner:' + opensearchVersion) {
         exclude(module: 'repository-url')
@@ -71,15 +70,15 @@ dependencies {
     }
     implementation 'org.locationtech.jts:jts-core:1.20.0'
     implementation 'org.locationtech.jts.io:jts-io-common:1.20.0'
-    implementation 'io.javalin:javalin:7.2.2'
-    implementation 'io.javalin:javalin-micrometer:7.2.2'
+    implementation 'io.javalin:javalin:7.2.3'
+    implementation 'io.javalin:javalin-micrometer:7.2.3'
     implementation 'io.micrometer:micrometer-registry-prometheus:1.17.0'
     implementation 'com.fasterxml.jackson.core:jackson-databind:2.22.1'
 
     testImplementation 'com.h2database:h2:2.4.240'
     testImplementation 'org.junit.jupiter:junit-jupiter:6.1.3'
     testImplementation 'org.assertj:assertj-core:3.27.7'
-    testImplementation 'net.javacrumbs.json-unit:json-unit-assertj:6.0.1'
+    testImplementation 'net.javacrumbs.json-unit:json-unit-assertj:6.2.0'
 
     testRuntimeOnly 'org.junit.platform:junit-platform-launcher:6.1.3'
 }
@@ -87,7 +86,7 @@ dependencies {
 configurations.configureEach {
     resolutionStrategy.eachDependency { details ->
         if (details.requested.group == 'io.netty') {
-            details.useVersion '4.2.15.Final'
+            details.useVersion '4.2.17.Final'
             details.because 'force latest version to fix CVE-2026-45416 and more'
         }
     }
diff --git a/settings.gradle b/settings.gradle
index 8cf3f354..fa2cbfe6 100644
--- a/settings.gradle
+++ b/settings.gradle
@@ -1,2 +1,4 @@
+plugins {
+    id 'io.github.ben-manes.versions.settings' version '0.61.0'
+}
 rootProject.name = 'photon'
-