diff --git a/gradle/libs.versions.toml b/gradle/libs.versions.toml
index 50d3c7e..6139f63 100644
--- a/gradle/libs.versions.toml
+++ b/gradle/libs.versions.toml
@@ -7,12 +7,12 @@
 # on `com.fasterxml.jackson.core` (pulled in transitively by databind).
 
 [versions]
-jackson = "3.2.3"
+jackson = "3.2.4"
 bouncycastle = "1.86"
 junit-jupiter = "6.1.3"
 # pk-auth: the passkeys-first auth library set, consumed from Maven Central (NOT vendored).
 # mini-oidc depends on pk-auth-core for the passkey credential layer.
-pk-auth = "2.3.0"
+pk-auth = "2.3.1"
 
 [libraries]
 # JSON (Jackson 3.x). Used by mini-kms's protocol/keystore, mini-idp's claims/stores/DTOs,