diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 7e7a3968..9f2666bd 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -8,10 +8,10 @@ concurrency:
   cancel-in-progress: ${{ github.ref != 'refs/heads/main' }}
 
 env:
-  CDXGEN_VERSION: '11.0.10'
+  CDXGEN_VERSION: '11.1.2'
   CDXGEN_PLUGINS_VERSION: '1.6.9'
-  GRYPE_VERSION: 'v0.86.1'
-  SBOMQS_VERSION: 'v0.2.3'
+  GRYPE_VERSION: 'v0.87.0'
+  SBOMQS_VERSION: 'v1.0.0'
   DEPSCAN_VERSION: 'v5.5.0'
   NYDUS_VERSION: '2.3.0'
   SWIFT_VERSION: '5.10.1'
@@ -70,7 +70,7 @@ jobs:
           sudo swapoff -a
           sudo rm -f /swapfile
           sudo apt clean
-          docker rmi $(docker image ls -aq)
+          # docker rmi $(docker image ls -aq)
           df -h
 
       - name: Checkout Code
diff --git a/.github/workflows/renovate.yml b/.github/workflows/renovate.yml
index 9977f35e..b50b12a3 100644
--- a/.github/workflows/renovate.yml
+++ b/.github/workflows/renovate.yml
@@ -10,7 +10,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Renovate
-        uses: renovatebot/github-action@v41.0.8
+        uses: renovatebot/github-action@v41.0.10
         with:
           token: ${{ secrets.RENOVATE_TOKEN }}
         env:
diff --git a/.github/workflows/verify.yml b/.github/workflows/verify.yml
index cc79ac34..aa59ce8f 100644
--- a/.github/workflows/verify.yml
+++ b/.github/workflows/verify.yml
@@ -11,8 +11,8 @@ on:
         description: Branch of cdxgen_repo to run tests with
 env:
   CDXGEN_PLUGINS_VERSION: '1.6.9'
-  GRYPE_VERSION: 'v0.86.1'
-  SBOMQS_VERSION: 'v0.2.3'
+  GRYPE_VERSION: 'v0.87.0'
+  SBOMQS_VERSION: 'v1.0.0'
   DEPSCAN_VERSION: 'v5.5.0'
   NYDUS_VERSION: '2.3.0'
   java_version: '21'
@@ -33,7 +33,7 @@ jobs:
           sudo swapoff -a
           sudo rm -f /swapfile
           sudo apt clean
-          docker rmi $(docker image ls -aq)
+          # docker rmi $(docker image ls -aq)
           df -h
 
       - name: Checkout Code
diff --git a/pom.xml b/pom.xml
index 4476840f..0c9cc77f 100644
--- a/pom.xml
+++ b/pom.xml
@@ -14,21 +14,21 @@
 
         <quarkus.platform.artifact-id>quarkus-bom</quarkus.platform.artifact-id>
         <quarkus.platform.group-id>io.quarkus.platform</quarkus.platform.group-id>
-        <quarkus.platform.version>3.17.5</quarkus.platform.version>
+        <quarkus.platform.version>3.17.8</quarkus.platform.version>
 
         <quarkus-github-app.version>2.8.2</quarkus-github-app.version>
 
         <cyclonedx-core-java.version>10.1.0</cyclonedx-core-java.version>
-        <jruby.jcodings.version>1.0.58</jruby.jcodings.version>
-        <jruby.joni.version>2.2.1</jruby.joni.version>
+        <jruby.jcodings.version>1.0.61</jruby.jcodings.version>
+        <jruby.joni.version>2.2.3</jruby.joni.version>
 
         <!-- test -->
-        <assertj.version>3.27.2</assertj.version>
+        <assertj.version>3.27.3</assertj.version>
         <awaitility.version>4.2.2</awaitility.version>
         <quarkus-wiremock.version>1.4.1</quarkus-wiremock.version>
 
         <!-- provided -->
-        <jetbrains-annotations.version>26.0.1</jetbrains-annotations.version>
+        <jetbrains-annotations.version>26.0.2</jetbrains-annotations.version>
 
         <skipITs>true</skipITs>
         <surefire-plugin.version>3.5.2</surefire-plugin.version>
diff --git a/src/test/resources/repo/multi-gradle-module/build.gradle.kts b/src/test/resources/repo/multi-gradle-module/build.gradle.kts
index 7ba5f7ef..dc06b051 100644
--- a/src/test/resources/repo/multi-gradle-module/build.gradle.kts
+++ b/src/test/resources/repo/multi-gradle-module/build.gradle.kts
@@ -3,7 +3,7 @@ plugins {
     kotlin("jvm") version "1.8.21" apply false
     kotlin("plugin.serialization") version "1.8.21" apply false
     id("com.jfrog.artifactory") version "4.31.9" apply false
-    id("com.github.johnrengelman.shadow") version "8.1.1" apply false
+    id("com.github.johnrengelman.shadow") version "7.1.2" apply false
     id("io.gitlab.arturbosch.detekt") version "1.22.0"
     id("com.palantir.docker") version "0.35.0" apply false
     id("org.openapi.generator") version "6.6.0" apply false