diff --git a/integration-tests/pom.xml b/integration-tests/pom.xml
index e1068ebfe..b1c820695 100644
--- a/integration-tests/pom.xml
+++ b/integration-tests/pom.xml
@@ -28,7 +28,6 @@
       <plugin>
         <groupId>org.apache.maven.plugins</groupId>
         <artifactId>maven-surefire-plugin</artifactId>
-        <version>3.3.0</version>
         <configuration>
           <excludes>
             <exclude>**</exclude>
@@ -39,7 +38,6 @@
       <plugin>
         <groupId>org.apache.maven.plugins</groupId>
         <artifactId>maven-failsafe-plugin</artifactId>
-        <version>3.3.0</version>
         <configuration>
           <additionalClasspathElements>
             <additionalClasspathElement>${project.basedir}/.libs/software.amazon.awssdk-sso.jar</additionalClasspathElement>
diff --git a/pom.xml b/pom.xml
index e16a6f7fa..c3b88a808 100644
--- a/pom.xml
+++ b/pom.xml
@@ -37,41 +37,41 @@
   </modules>
 
   <properties>
-    <aws.sdk2.version>2.23.8</aws.sdk2.version>
-    <braintree.version>3.34.0</braintree.version>
-    <commons-csv.version>1.11.0</commons-csv.version>
-    <commons-io.version>2.16.1</commons-io.version>
-    <dropwizard.version>3.0.7</dropwizard.version>
+    <aws.sdk2.version>2.29.7</aws.sdk2.version>
+    <braintree.version>3.37.0</braintree.version>
+    <commons-csv.version>1.12.0</commons-csv.version>
+    <commons-io.version>2.17.0</commons-io.version>
+    <dropwizard.version>3.0.10</dropwizard.version>
     <dropwizard-metrics-datadog.version>1.1.13</dropwizard-metrics-datadog.version>
     <dynamodblocal.version>1.23.0</dynamodblocal.version>
-    <google-cloud-libraries.version>26.33.0</google-cloud-libraries.version>
+    <google-cloud-libraries.version>26.50.0</google-cloud-libraries.version>
     <grpc.version>1.61.1</grpc.version> <!-- should be kept in sync with the value from Google libraries-bom -->
     <gson.version>2.11.0</gson.version>
     <!-- several libraries (AWS, Google Cloud) use Apache http components transitively, and we need to align them -->
     <httpcore.version>4.4.16</httpcore.version>
     <httpclient.version>4.5.14</httpclient.version>
-    <jackson.version>2.17.2</jackson.version>
+    <jackson.version>2.18.1</jackson.version>
     <jaxb.version>2.3.1</jaxb.version>
-    <junit-pioneer.version>2.2.0</junit-pioneer.version>
+    <junit-pioneer.version>2.3.0</junit-pioneer.version>
     <jsr305.version>3.0.2</jsr305.version>
     <kotlin.version>1.9.24</kotlin.version>
     <kotlinx-serialization.version>1.5.1</kotlinx-serialization.version>
     <lettuce.version>6.4.1.RELEASE</lettuce.version>
-    <libphonenumber.version>8.13.40</libphonenumber.version>
+    <libphonenumber.version>8.13.49</libphonenumber.version>
     <logstash.logback.version>7.3</logstash.logback.version>
     <log4j-bom.version>2.23.1</log4j-bom.version>
     <luajava.version>3.4.0</luajava.version>
-    <micrometer.version>1.13.2</micrometer.version>
+    <micrometer.version>1.13.6</micrometer.version>
     <netty.version>4.1.111.Final</netty.version>
     <protobuf.version>3.25.5</protobuf.version> <!-- must be greater than or equal to the value from Google libraries-bom, see https://protobuf.dev/support/cross-version-runtime-guarantee/ -->
     <pushy.version>0.15.4</pushy.version>
     <reactive.grpc.version>1.2.4</reactive.grpc.version>
-    <reactor-bom.version>2023.0.8</reactor-bom.version> <!-- 3.6.x, see https://github.com/reactor/reactor#bom-versioning-scheme -->
+    <reactor-bom.version>2023.0.11</reactor-bom.version> <!-- 3.6.x, see https://github.com/reactor/reactor#bom-versioning-scheme -->
     <resilience4j.version>2.2.0</resilience4j.version>
     <semver4j.version>3.1.0</semver4j.version>
     <slf4j.version>2.0.13</slf4j.version>
     <stripe.version>23.10.0</stripe.version>
-    <swagger.version>2.2.22</swagger.version>
+    <swagger.version>2.2.25</swagger.version>
 
     <!-- 21.0.4_7-jre-jammy (note: always use the multi-arch manifest *LIST* here) -->
     <docker.image.sha256>870aae69d4521fdaf26e952f8026f75b37cb721e6302d4d4d7100f6b09823057</docker.image.sha256>
@@ -383,7 +383,42 @@
         <plugin>
           <groupId>com.google.cloud.tools</groupId>
           <artifactId>jib-maven-plugin</artifactId>
-          <version>3.4.3</version>
+          <version>3.4.4</version>
+        </plugin>
+        <plugin>
+          <groupId>org.apache.maven.plugins</groupId>
+          <artifactId>maven-surefire-plugin</artifactId>
+          <version>3.5.2</version>
+        </plugin>
+        <plugin>
+          <groupId>org.apache.maven.plugins</groupId>
+          <artifactId>maven-failsafe-plugin</artifactId>
+          <version>3.5.2</version>
+        </plugin>
+        <plugin>
+          <groupId>org.apache.maven.plugins</groupId>
+          <artifactId>maven-jar-plugin</artifactId>
+          <version>3.4.2</version>
+        </plugin>
+        <plugin>
+          <groupId>org.apache.maven.plugins</groupId>
+          <artifactId>maven-shade-plugin</artifactId>
+          <version>3.6.0</version>
+        </plugin>
+        <plugin>
+          <groupId>org.apache.maven.plugins</groupId>
+          <artifactId>maven-assembly-plugin</artifactId>
+          <version>3.7.1</version>
+        </plugin>
+        <plugin>
+          <groupId>org.codehaus.mojo</groupId>
+          <artifactId>exec-maven-plugin</artifactId>
+          <version>3.1.0</version>
+        </plugin>
+        <plugin>
+          <groupId>org.codehaus.mojo</groupId>
+          <artifactId>properties-maven-plugin</artifactId>
+          <version>1.2.1</version>
         </plugin>
       </plugins>
     </pluginManagement>
@@ -466,7 +501,6 @@
       <plugin>
         <groupId>org.apache.maven.plugins</groupId>
         <artifactId>maven-surefire-plugin</artifactId>
-        <version>3.3.0</version>
         <configuration>
           <systemProperties>
             <property>
@@ -501,7 +535,7 @@
       <plugin>
         <groupId>org.apache.maven.plugins</groupId>
         <artifactId>maven-install-plugin</artifactId>
-        <version>3.1.2</version>
+        <version>3.1.3</version>
         <configuration>
           <skip>true</skip>
         </configuration>
@@ -510,7 +544,7 @@
       <plugin>
         <groupId>org.apache.maven.plugins</groupId>
         <artifactId>maven-deploy-plugin</artifactId>
-        <version>3.1.2</version>
+        <version>3.1.3</version>
         <configuration>
           <skip>true</skip>
         </configuration>
diff --git a/service/pom.xml b/service/pom.xml
index df0b43411..fa1bbab6f 100644
--- a/service/pom.xml
+++ b/service/pom.xml
@@ -11,11 +11,11 @@
   <artifactId>service</artifactId>
 
   <properties>
-    <firebase-admin.version>9.2.0</firebase-admin.version>
+    <firebase-admin.version>9.4.1</firebase-admin.version>
     <java-uuid-generator.version>5.1.0</java-uuid-generator.version>
     <sqlite4java.version>1.0.392</sqlite4java.version>
-    <google-androidpublisher.version>v3-rev20240820-2.0.0</google-androidpublisher.version>
-    <storekit.version>3.1.0</storekit.version>
+    <google-androidpublisher.version>v3-rev20241016-2.0.0</google-androidpublisher.version>
+    <storekit.version>3.2.0</storekit.version>
   </properties>
 
   <dependencies>
@@ -236,24 +236,27 @@
     <dependency>
       <groupId>com.google.cloud</groupId>
       <artifactId>google-cloud-pubsub</artifactId>
-      <exclusions>
-        <!-- Conflicts with our direct Guava dependency -->
-        <exclusion>
-          <groupId>com.google.guava</groupId>
-          <artifactId>failureaccess</artifactId>
-        </exclusion>
-      </exclusions>
     </dependency>
 
     <dependency>
       <groupId>com.google.firebase</groupId>
       <artifactId>firebase-admin</artifactId>
       <version>${firebase-admin.version}</version>
+    </dependency>
+    <dependency>
+      <groupId>io.opentelemetry.semconv</groupId>
+      <artifactId>opentelemetry-semconv</artifactId>
+      <version>1.25.0-alpha</version>
+    </dependency>
+    <!-- resolve opentelemetry-semconv conflict from lower in firebase-admin dependency tree -->
+    <dependency>
+      <groupId>com.google.cloud</groupId>
+      <artifactId>google-cloud-firestore</artifactId>
+      <version>3.28.0</version>
       <exclusions>
         <exclusion>
-          <!-- fix dependency convergence from older 1.0.1 -->
-          <groupId>com.google.guava</groupId>
-          <artifactId>failureaccess</artifactId>
+          <groupId>io.opentelemetry.semconv</groupId>
+          <artifactId>opentelemetry-semconv</artifactId>
         </exclusion>
       </exclusions>
     </dependency>
@@ -279,13 +282,6 @@
     <dependency>
       <groupId>io.grpc</groupId>
       <artifactId>grpc-netty</artifactId>
-      <exclusions>
-        <!-- fix dependency convergence from older 0.26.0 -->
-        <exclusion>
-          <groupId>io.perfmark</groupId>
-          <artifactId>perfmark-api</artifactId>
-        </exclusion>
-      </exclusions>
     </dependency>
     <dependency>
       <groupId>io.grpc</groupId>
@@ -530,7 +526,6 @@
           <plugin>
             <groupId>org.apache.maven.plugins</groupId>
             <artifactId>maven-shade-plugin</artifactId>
-            <version>3.6.0</version>
             <configuration>
               <createDependencyReducedPom>true</createDependencyReducedPom>
               <filters>
@@ -585,7 +580,6 @@
           <plugin>
             <groupId>org.codehaus.mojo</groupId>
             <artifactId>properties-maven-plugin</artifactId>
-            <version>1.2.1</version>
             <executions>
               <execution>
                 <id>read-deploy-configuration</id>
@@ -680,7 +674,6 @@
           <plugin>
             <groupId>org.codehaus.mojo</groupId>
             <artifactId>exec-maven-plugin</artifactId>
-            <version>3.1.0</version>
             <executions>
               <execution>
                 <id>start-test-server</id>
@@ -720,7 +713,6 @@
       <plugin>
         <groupId>org.apache.maven.plugins</groupId>
         <artifactId>maven-surefire-plugin</artifactId>
-        <version>3.3.0</version>
         <configuration>
           <!-- work around PATCH not being a supported method on HttpUrlConnection -->
           <argLine>--add-opens=java.base/java.net=ALL-UNNAMED</argLine>
@@ -742,7 +734,6 @@
       <plugin>
         <groupId>org.codehaus.mojo</groupId>
         <artifactId>exec-maven-plugin</artifactId>
-        <version>3.3.0</version>
         <executions>
           <execution>
             <id>check-all-service-config</id>