diff --git a/.github/workflows/docker-contrib.yml b/.github/workflows/docker-contrib.yml
index 9b5c188..31f8c3d 100644
--- a/.github/workflows/docker-contrib.yml
+++ b/.github/workflows/docker-contrib.yml
@@ -29,13 +29,13 @@ jobs:
       # multi-platform images and export cache
       # https://github.com/docker/build-push-action
       - name: Setup Docker Buildx
-        uses: docker/setup-buildx-action@988b5a0280414f521da01fcc63a27aeeb4b104db # v3.6.1
+        uses: docker/setup-buildx-action@c47758b77c9736f4b2ef4073d4d51994fabfe349 # v3.7.1
 
       # Build locally Docker image with Buildx
       # https://github.com/docker/build-push-action
       - name: Docker build with unit tests
         id: build-and-test
-        uses: docker/build-push-action@5cd11c3a4ced054e52742c5fd54dca954e0edd85 # v6.7.0
+        uses: docker/build-push-action@4f58ea79222b3b9dc2c8bbdd6debcef730109a75 # v6.9.0
         with:
           context: .
           load: true
diff --git a/.github/workflows/docker-publish-when-release.yml b/.github/workflows/docker-publish-when-release.yml
index 236da19..69c4a5d 100644
--- a/.github/workflows/docker-publish-when-release.yml
+++ b/.github/workflows/docker-publish-when-release.yml
@@ -46,7 +46,7 @@ jobs:
       # https://github.com/sigstore/cosign-installer
       - name: Install Cosign
         if: ${{ github.repository == env.ORIGIN_REPOSITORY }}
-        uses: sigstore/cosign-installer@4959ce089c160fddf62f7b42464195ba1a56d382 # v3.6.0
+        uses: sigstore/cosign-installer@dc72c7d5c4d10cd6bcb8cf6e3fd625a9e5e537da # v3.7.0
         with:
           cosign-release: 'v2.4.0'
 
@@ -54,7 +54,7 @@ jobs:
       # multi-platform images and export cache
       # https://github.com/docker/setup-buildx-action
       - name: Setup Docker Buildx
-        uses: docker/setup-buildx-action@988b5a0280414f521da01fcc63a27aeeb4b104db # v3.6.1
+        uses: docker/setup-buildx-action@c47758b77c9736f4b2ef4073d4d51994fabfe349 # v3.7.1
 
       # Extract metadata (tags, labels) for Docker
       # https://github.com/docker/metadata-action
@@ -70,7 +70,7 @@ jobs:
       # https://github.com/docker/build-push-action
       - name: Docker build with unit tests
         id: build-and-test
-        uses: docker/build-push-action@5cd11c3a4ced054e52742c5fd54dca954e0edd85 # v6.7.0
+        uses: docker/build-push-action@4f58ea79222b3b9dc2c8bbdd6debcef730109a75 # v6.9.0
         with:
           context: .
           load: true
@@ -105,7 +105,7 @@ jobs:
       - name: Docker build for many platforms and push into ${{ env.REGISTRY }}
         if: ${{ contains(github.ref, 'refs/tags/') }}
         id: build-and-push
-        uses: docker/build-push-action@5cd11c3a4ced054e52742c5fd54dca954e0edd85 # v6.7.0
+        uses: docker/build-push-action@4f58ea79222b3b9dc2c8bbdd6debcef730109a75 # v6.9.0
         with:
           context: .
           platforms: linux/amd64,linux/arm64
diff --git a/build.sbt b/build.sbt
index 839b1c0..2ed914f 100644
--- a/build.sbt
+++ b/build.sbt
@@ -41,19 +41,19 @@ lazy val root = (project in file("."))
     // https://github.com/confluentinc/schema-registry/blob/master/pom.xml
     libraryDependencies ++= Seq(
       "org.apache.kafka" %% "kafka" % "3.2.3",
-      "io.cucumber" %% "cucumber-scala" % "8.23.1",
+      "io.cucumber" %% "cucumber-scala" % "8.25.0",
       "org.scalatest" %% "scalatest" % "3.2.19",
       "com.typesafe" % "config" % "1.4.3",
       "io.gatling" % "gatling-jsonpath" % "3.12.0",
-      "com.lihaoyi" %% "os-lib" % "0.10.7",
-      "ch.qos.logback" % "logback-classic" % "1.5.8" % Runtime,
+      "com.lihaoyi" %% "os-lib" % "0.11.1",
+      "ch.qos.logback" % "logback-classic" % "1.5.9" % Runtime,
       "dev.zio" %% "zio" % zioVersion,
       "dev.zio" %% "zio-streams" % zioVersion,
       "dev.zio" %% "zio-logging-slf4j2" % "2.3.1",
     ),
     // only tests
     libraryDependencies ++= Seq(
-      "io.cucumber" % "cucumber-junit" % "7.19.0",
+      "io.cucumber" % "cucumber-junit" % "7.20.1",
       "org.scalamock" %% "scalamock" % "6.0.0",
       "org.scalacheck" %% "scalacheck" % "1.18.1",
       "dev.zio" %% "zio-test" % zioVersion,
diff --git a/project/plugins.sbt b/project/plugins.sbt
index 22e60f7..e56c5e1 100644
--- a/project/plugins.sbt
+++ b/project/plugins.sbt
@@ -1,4 +1,4 @@
-addSbtPlugin("org.scoverage" % "sbt-scoverage" % "2.2.0")
+addSbtPlugin("org.scoverage" % "sbt-scoverage" % "2.2.1")
 addSbtPlugin("com.timushev.sbt" % "sbt-updates" % "0.6.4")
-addSbtPlugin("com.eed3si9n" % "sbt-assembly" % "2.2.0")
-addSbtPlugin("com.github.sbt"      % "sbt-ci-release"            % "1.6.1")
+addSbtPlugin("com.eed3si9n" % "sbt-assembly" % "2.3.0")
+addSbtPlugin("com.github.sbt"      % "sbt-ci-release"            % "1.7.0")