diff --git a/dependencyCheckSuppression.xml b/dependencyCheckSuppression.xml
index 86150a3244..e8926bd673 100644
--- a/dependencyCheckSuppression.xml
+++ b/dependencyCheckSuppression.xml
@@ -469,4 +469,23 @@
         <packageUrl regex="true">^pkg:maven/org\.jetbrains\.kotlin/.*@.*$</packageUrl>
         <cve>CVE-2026-53914</cve>
     </suppress>
+
+    <!--
+    CVE in example code. New version not yet available.
+    -->
+    <suppress>
+        <notes><![CDATA[
+    file name: tomcat-*-11.0.24.jar
+    ]]></notes>
+        <packageUrl regex="true">^pkg:maven/org\.apache\.tomcat/tomcat-.*@.*$</packageUrl>
+        <cve>CVE-2026-66299</cve>
+    </suppress>
+    <suppress>
+        <notes><![CDATA[
+    file name: tomcat-embed-*-11.0.24.jar
+    ]]></notes>
+        <packageUrl regex="true">^pkg:maven/org\.apache\.tomcat\.embed/tomcat-embed-.*@.*$</packageUrl>
+        <cve>CVE-2026-66299</cve>
+    </suppress>
+
 </suppressions>
diff --git a/gradle.properties b/gradle.properties
index b1007a2d38..6eb3bde09b 100644
--- a/gradle.properties
+++ b/gradle.properties
@@ -103,7 +103,7 @@ apacheTomcatVersion=11.0.24
 # (mothership) -> json-path -> json-smart -> accessor-smart
 # (core) -> graalvm
 # tika
-asmVersion=9.10
+asmVersion=9.10.1
 
 awsSdkVersion=2.29.50
 
@@ -114,8 +114,8 @@ azureIdentityVersion=1.18.4
 batikVersion=1.19
 
 # sync with Tika version (or later)
-bouncycastlePgpVersion=1.84
-bouncycastleVersion=1.84
+bouncycastlePgpVersion=1.85
+bouncycastleVersion=1.85
 
 cglibNodepVersion=2.2.3
 
@@ -272,7 +272,7 @@ opencsvVersion=2.3
 openTracingVersion=0.33.0
 
 # sync with version Tika ships
-pdfboxVersion=3.0.7
+pdfboxVersion=3.0.8
 
 # sync with version Tika ships
 poiVersion=5.5.1
@@ -315,7 +315,7 @@ stax2ApiVersion=4.2.2
 thumbnailatorVersion=0.4.21
 
 # used for tika-core in API and tika-parsers in search
-tikaVersion=3.3.1
+tikaVersion=3.3.2
 
 # sync with Tika
 tukaaniXZVersion=1.12