From ff5201a58e3807e352f91c8b7d5b26575df0a68b Mon Sep 17 00:00:00 2001
From: Katherine <katherine@signal.org>
Date: Thu, 18 Sep 2025 14:56:27 -0400
Subject: [PATCH] Q4 2025 dependency updates

---
 .github/workflows/documentation.yml     |   4 +-
 .github/workflows/integration-tests.yml |   6 +--
 .github/workflows/test.yml              |   4 +-
 .mvn/wrapper/maven-wrapper.jar          | Bin 63028 -> 63093 bytes
 .mvn/wrapper/maven-wrapper.properties   |   8 ++--
 pom.xml                                 |  50 ++++++++++++------------
 service/pom.xml                         |  33 ++++++++++++----
 7 files changed, 61 insertions(+), 44 deletions(-)

diff --git a/.github/workflows/documentation.yml b/.github/workflows/documentation.yml
index e4ac242ec..a58cad25b 100644
--- a/.github/workflows/documentation.yml
+++ b/.github/workflows/documentation.yml
@@ -11,8 +11,8 @@ jobs:
       contents: write
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
-      - uses: actions/setup-java@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12 # v4.7.0
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+      - uses: actions/setup-java@dded0888837ed1f317902acf8a20df0ad188d165 # v5.0.0
         with:
           distribution: 'temurin'
           java-version-file: .java-version
diff --git a/.github/workflows/integration-tests.yml b/.github/workflows/integration-tests.yml
index c65201f91..f7978f83f 100644
--- a/.github/workflows/integration-tests.yml
+++ b/.github/workflows/integration-tests.yml
@@ -18,13 +18,13 @@ jobs:
       id-token: write
       contents: read
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
-      - uses: actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 # v4.7.1
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+      - uses: actions/setup-java@dded0888837ed1f317902acf8a20df0ad188d165 # v5.0.0
         with:
           distribution: 'temurin'
           java-version-file: .java-version
           cache: 'maven'
-      - uses: aws-actions/configure-aws-credentials@b47578312673ae6fa5b5096b330d9fbac3d116df # v4.2.1
+      - uses: aws-actions/configure-aws-credentials@b47578312673ae6fa5b5096b330d9fbac3d116df # v5.0.0
         name: Configure AWS credentials from Test account
         with:
           role-to-assume: ${{ vars.AWS_ROLE }}
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 2a568d8de..c03ee4152 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -25,9 +25,9 @@ jobs:
         options: --name foundationdb1
 
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
       - name: Set up JDK
-        uses: actions/setup-java@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12 # v4.7.0
+        uses: actions/setup-java@dded0888837ed1f317902acf8a20df0ad188d165 # v5.0.0
         with:
           distribution: 'temurin'
           java-version-file: .java-version
diff --git a/.mvn/wrapper/maven-wrapper.jar b/.mvn/wrapper/maven-wrapper.jar
index 7967f30dd1d25fe1b79a4a6e50e2aaa0e425c02c..eebc3c18b4e0bce4a2a9e66be24c4a410f17a1fa 100644
GIT binary patch
delta 5797
zcmaJ_2UJtd)=ff{DkUJH_uixnqJW50X#%1sy-5eDYA6Z_p<Yk~=^{mtE=Z9kC>?1c
zO?r{gL8S=qlH~LId2g*hYh~qR&z^nG%sqGJ%v7N9cF}kgx|(?SBoGKO1oFy}?^YZI
z=b4k=TP*d6+_($u$WD@GG1@D?f(~2$1mPc;-2X}v{3LiJYo%}8QA}GoS>UMthVCnp
zn&cq4uKdS(%oIVZeUu%^WE>wdte5rh6AG(sb)QNg__l?ec6@aSsnfQS;w=qL%k<Ms
zR!h3sqWRv-4CNa=UXGL!uz$dUu6Lujn9$t&{<-{g`=afuT?R=>wa4R6y(31wr#Tdw
zJEE^DifIhj4~%4=X&98)nCKo5-A4LrxSSpYKn`WWKN$re3gyNcCQw1F5eAjO8XurC
zSYr>$k2QE;%2>k*ri(QiVHp^s+#2sWCGm-3%X8^)0FOoxIWxnfOw`mKy#3{+cE((E
zXJu2BF}`swa__fmwSH(=7BT;Ay@@CDISvtoX0?~lHSgq`&z|WCp5^s<WU9)&<kt=r
zcK7Zf7l)snFF_IV$81yQUEce4S+HA(7SjDEy@@BeJ>S8xh^3*cT&H`uR_0`cwBTbR
z#yqB~@*)~pB5Z8Shy)nc3Sv%$QJq8?Ohha3fgA#1VS+%!fJ}9!a!t1H<k&HZh#X+q
z!lGLQ7`BPAcrF|d0udkrzZkZblo%eC6exR^3Tq{($Kl-YYdt5!B+2avPKs=x-9!_4
zOOsKF_NZr}%+@Tb?VjtM%Un<UA1<rpbA;=kRTiwk-*JvdwSTttc`;$KUo61)MDaJ?
zezr!hmU4a#<xJ=M2c93cQzaxCjt^__HYiqDm}qa)K1|T%=`xEDq<YNpgD748d07fo
z$AN(UH)y7=YlUEva_f^tD}>_o!@`50Ysf1;Y$2J|@p>EDkz8>XWZ~bY#I)y2Xf*1F
zB5FAlj2vFyuuI67<*2@>6O+gz^sdnU)y$OglYaeQsJ_CO0=?3lMFDp7;I`v-$<-8H
zg@}N7UFZC3j}YYY`bf9}MW*ed18I?#A~f>b<($WqMT=_{pP~-VAF!4k2!CbtqoGDB
zyj`eN6yRKc_*AV%@RRy#+Tg7gp5MHBT)TRF=dPR8u{&LIHf%o3wkU0<M{lsY=}J^}
z>2=rfAHc#dwJ?qO_4ITRS=@C#!k6-KnU?l(75BWDi7<^TvJMC$*-vVPkfNMW4kjO|
z%{d3soUHMgqo0?ak2^DxQm(&ExE6y{=<cM`a%vHOFX?d2q?@}}feYEoF7Ioxs##~b
zzWI&zjum-g!|4p#^I3w~5<(!i$$=hIN#vd}jWO*J%hN6{RG?mFo^!rF*%|86x78ex
zAC+~7vnst|cqkqTSqUYy?W*Ok?zi5h0jrOe<b*XZIwRK``jMHrxxeZeRM;}r4qCd#
z*0v@N)($2Qw$tw-iAtC+5$fTm<2MAu`E2<vW$P4_COD#6YXG|ni?B@JbeE+bD3b7Q
zwF?`B0eVJ>fLr&RqxL<a*E)GEv!+5tI*wP-bvZg(_D1NWA1Ilzch7WQOGaAcn5<Sw
zy=l?9M|SVR6HXNwt89M_nwfwQKGheGJqX^MwHzrc+*GP^7LU?<C}fo%?Sde)u}U5&
z7>mx~l~~jAtM1v(mMc9<ll6-&z1oB{H55yT{cSNcOf5iEAzo+FZ$SHEi5qB3(*2;K
z1RstQ)znM@Ove(k8QyK&VC?y7()O8<z-LB8+580$`@7rtAp~SzlSU*i`<=axmB9fe
zaTdGrw41*jB$_)RMS5<cjts$f3Wx<&eD^MIGl#(k+2hxfNW}~vlL|b`V7bMGl;jJy
z5LDs2`&g+=a!gB`djDE=Y?KX^vw<7yb%L1X$BIoYGXwIp=()@F4kA4k=!J8R+>+wx
z50$3H%aUP3hAxFl=qANSAAU+)Aq^Hj*9iF@6hcC=X_-iD6y_MCDO<M`TeC-*1$U+%
zg)=D;am#;ysr~7>mKa*NB!Jh|52+F}^XN<}NlmP|t_LMqh=R^<(=IA)F;#_dD_N0D
zH6_vgb4J3|;f&GJZR(jH#pNsbzjC&Wy477~=s0I?POc<53nfsIRdVDX@}6l6mma#<
zF+`FP<GDu!f7z@;29*aYF7m>sec447%EI7zbz-oD+&iOl6+Bi+O}(>=3rI<VY&M$K
z(f6q2vgf|u-#lC=&U~Q1@I73DOzMd`cf+UwNq^nGEN|rii5<S8t3c9JlJ%#$_XBDc
z{3Ux_#b;cUu7(olzwyfucCTruDq8eX^D$0AZF9L7<{sGJ(o9E@T63zP$HcO3DJevJ
z;!=1!bw<bL{g79acSQy1Y?2L9-&vlXOQF5QMd>xKm8^eqlB-F|)R6Ere`rSz!^M|h
z3^)<*Yw*)icKr7aGo)^8KV76%h@rQSNN2Hn9DejHZ$LsFzDdnqIK27;<vuLd%Q*g;
z;iGC@2j#bWoeB7fdadzHscWk%PkE!yw#;=7B&v=($`?$N<>iyX@8>`7LKZ&zF8s4h
zXQGe#g_nN$zM&<=CEB1d&~f<zT6;g$JvD--P9aA$iwdTDGiih`w*1(_=0)W6aXkI?
zj~g=q(%vaO`8)C70*qMLXI+eE%-nOrSxQBA&l^Q-GtJ*q-gvM)Lvv+2RQG38(nnjA
zuboYCHbwfXK5yL>Qma2k5m%7Fj6dnmWQKbtvx^ZwZT0HN$7RKDj*AgXZAKJ*VJYh9
zgiWNKznB1FH9IbzB^SG$sYk_xXm}x!_A2Ji)xqZu(P@S|$jGbWjtrH89OdSh&U~p_
zzAMBdGtIm&_!ctR8ZhWF|0c~tUfpw1=`GXKBbY;zGQSdRqW{q#M__j|QvZqI>dl#Y
zYKv5kmV>nJhHENWKMlDqgd~=mOu+NgRc$!RxGzNRYClqZ_)ADyuiTI23y0yJ>Oe(s
zv1E<ln5XfN#nQ;(NLTY--JytrnVaa;o@OUD;zpz3k?`|QD%@txLpw((bE0na6&i0U
z*EJsRv5;BG84Is!NV&z!W+c(?*eRmEuo%8YRcrpBdxP6?_1^vl{IrIgUlu-1X}P^T
zO7An)ir<;sf?e;ANay9(7lmDl4c|wqY{$B4t}~g^oh4GGri`r$foXpn>d4AJoAzSK
z{kAICd+Kx&N!7#tpNFg2&u+!@-`$k+67_YHY2dc&oGZM~kUs61sosm!?(LVoxsYN;
zMZVi>?sgn{PdDoWxrD4A^U+d8UJt>X8eaf&vv=j2#E?VMpxar851$ra+pl@ED>Gc8
zLTz?m_3#PWFLfuPIBp}Ig4<5a1D?6W)VApU%!1_#@j!)FkDB@`{Dm%C=zFQrGe<5a
zF>5aa8Ot*eo0Y`BYx*o#kPa`>(pW+T69Pmg5gu8vK&Cy0elPoe=EShq3mf4?=KF*q
z6cdd(nKu=f{cQ=Kt1oygsqS}A&EKrsQlm2>xB<(123z6{$1_w3$;;$zgVhZS)fqkD
z^k|!=de&cAaa1(YzP?fanI*d;aT5=A3_HCU>6f3kup-3P887T4p;+sSy$e33KxrMa
z8T~>AfiN>dAR?Fo#mRYt3`;WizlkeV>K|Srz+hz|`8b85$H_QLGc+4p>}+x7kCZ|n
z5GWJ^kv`D^*rMnFaa1!_?iXqSCpR67z*)yYGCsC7HEHUfQY+;KF%}!m=EU)!xmR(P
zW`R1+N-Cnk^(Zc;$6+01d^qc8r4_E#tojZPYp89*Ra{TI({Lr8;E*z|)qMnw8<EB6
zIuuidl|TAaLjv3!*Ffrdj!Ba}`dZw0I5?>qKd@u*od3srZIA8bk=oBUht*7jZKSF5
z;|#5j4}ub`JEK!pT{=Uof>{G8St0FTa<y+Zk_vR^R3lP}W~nl+*|e!XlJdVjzJDo3
zvGvXlupZ!}pqeR;$Jta!#RJz|zRO|!+Ja=-Xqdw)6xLL$?s0%*Sqdk4b@{pgAGeY|
zKWe6PG&a+|1=<O>eA>JOVN>!dwcBpp=_D`o4Z72If8|O(qsuV<6atZ-W})hC^2|LY
z0p3W!prO`ekR)N#nel4KX!C*dW$9o6v+aoU!cGM3&ev6{^vskCTm@I6k23mo0wsQD
z50NV3TluO%TnEjNQIp3rw>94pu#*oWez`+s_>DqMsB_8$WNG;Q%~WfbuB_goR}vxT
z6!U}!-X^zbL@h%96h-BWw3Ij`2g)S}8TySF!zbfV<#TPk1!=$dNCpwKM>jlG9Yv}d
z1vui%xW5RR;2B*Xqx@>!F~QewG-sE#R;z$+yOWs)PrQJSjJ>Mmo2?ETu*Og4ZI_e_
z$z7iLx;G0;<DsMkzFGPMjfc<=U3OmwTD=sr2ZXh3zt<HHeA{JUTUJqbGvMz`CH8p3
zY#ZXRTt4Prvf2lK{h-xAKz&ZClgdL~LIf>on5Xg9`9RXWGw+yN#>KkgS3z3i_QT{O
zjrR2<M1~m^a^G=K{Z1J@t;!c<`u8x_kkSeEu)1;k4=Q7XQuGwREEE(ekLwyVKbKl7
z(vOblv59tzR!U5^54!Kuw~ym58N^2Qm}ajBLQ~bm$+ZnT$Rb_Bt$gU85J}6M>Zz{M
z@pv21&1(z~Nk;O!q-S-1<wLL=>Wy%kDj0+on>c>%L+UTNJz|t1AqpJM4j^u&Z&KY5
zCppNrq5f%DC&R%ST5+vO1GO$pm}W|L*hajFri;zgffpC{6}!iNnazq7lE?d+nYBb1
zIuzXTwSH)g#6S*VuYz9quE?H5IOBreV&So;84wxf2ybSmDz-6VC(phn_d_Q=)nN<~
zom^&XgVbQOj7GTgjj(tL9V_9r5pC6KYWK3CqPCqIstTK}OpiZq2MAYZ_C}-_8+cwD
zX8%L6Tpp2b{ilIS&}P3Y>H(l1wrSx1qCS86)70VNrO&dmwNST}yjKq+cV_#Ted7G+
zssfe;g<>6MKK-hDCMD|4yJ9vd*S$VjR!**+`wki95H(*mvM+p?K$0rxB6j~)2Bm1I
z@h2H)cGF>j33!>NT%rBc<x2ua3dL}F=DvcXt~cuRTz5*FBRtLJ=dYy5(YJbAy7-q-
z>L*YBA*#xSi6_3@BYpH*|Lt;RN`FkcGZTJh;@ZdV6<CXmAgY-)Pp(?l$;)?qd9o}-
zb=sW6e98OLy;?kr37-Q?RDA>V^djqWaBB-_m_pIMaDzg0HK8zCynoOAz};zye-HjZ
z%CwyH$w3laDF1%&|5|4ut4a`X{dD!P6a60{k{N_N2d>e=&BDsw=6^VUg+PPq@1GM@
zO(-BPMI-dzqJKG{!SMIbNeBOv4vfJ288Wv2j+glqu@nkWZL$jff6A1nI-mj3S==px
z-Yf#j065Lc{ErXmQ(f-D0Ows<;9wTJHvyz`2v|7`=z-A#igP$jXAS{11{~&C|GiF#
zouh+p0l9N582PHPQYAEaFuOqkfk^z72XAMB(rHe{8b8m2*?0hfc?4`6ff>Fg8x`O&
zPm9GPK-`P@FJ8;c4;;+@6VU<!24};y(E}w5*lA1fGlN%yzLvo+|0$pBA{cVU0uxre
z5foq(#bCb{crgK=x;{A7nNA8M3IYEAc=umKz&vF^j0>n)q{a&NfmoP2MzCI;47iDl
z$kJS*UkBXsg}^Oe^pq%*7KUuP#DVdSxq|@HjRCyCP&`GfGQkj6O}K&aB{GVW^!PuA
z-k(catS68@U(p~fINesDvwxrF$#mNS7R##GAPbfeupT>%-1IU6iyea)p#z}j%mG~d
z!HUJqe;{DK&LAcR6#l?Xc^!x)`ky2p5arJS#I9hc+<C~mU>tm<gu!bX^;2<gJ;afT
z0jCu)tZ>E(0wxs#;sStd2tDv;1t(69M!;qsV{nocM$CjHM5`~}Ab>!2Ng)u)Q^J9v
z7^23`ISlbsC3K3&ivo$_fag37h6pRZ+#Ui>?<Y|4bf`j67$RF70U#d*2hvw@VHK|;
zV03Y~Hfn%k4TrO=Az+dT7+f)d@q~|g22nmzwjMAD#0Cu8@KhxIK<SzlCWsAW9drY{
zpmK#nAeyH*?@};=jVVk(@fOZe+&ThA`3i$iu4B{G=v4r88gz05ikudZ&IO4w!0ioe
zM$Hlwng0NZ!5~rfl&8P~3^BIg?8zI230+1hr?(tTKX&j@UOh$b2F`BYz=VFip;NLB
z6g&r}nbIlFTrozFvYZfT-lWEmP5$Iew}9kBa4t@Vd0d7g)BXEC>un)mg6}|F97x+@
z#^y=`h{ac9FtTj{EOucV0o$nsF)<)?8~5hD1hEg@AjS&F?N9+r|KLX;Za##=`7xvP
zeHGIk0gh4%%z|sDM(`R4+A+rZ7~es_o{eJqMUM)cBs!)qraT2_=Nh=#Ts+nHDd4oL
dg;@qMTT|mM9c*n1TtO88+Mfu**y$7Ue*gfrY1se(

delta 5783
zcmaJ_1yoeq_nsLVNf~O8kPs>96a+*XBqXH-B&7tUL<UJIpKxiA?uL;@1Q7)UDM3;x
z38hm(;D4E!_x$nRTK~J&th?vC-}%no`|LS)&)HqUdAWi^rmc>HOALV!LLiTQYK&sY
z*oaQ=ZGu`h`7u%#kpskm0(2qkA+Op`U<^fOt2cvK<e$bhGOg7qc`$g;yn2j)Tgscg
zz*(I0%M&Q>xYjRoU~b%g(e~W=GU<qb*adO2y!y;1tP^bp<jOWIHXp*f2=X}i=93M`
z7|2vLvWtogL|LOOUK+^HZBI{!cr0a6_<wvg$)zqU&Q`Xlogqvi#F-+<JrP>6L3r;f
z-LF=am&<AI$TWZEr9WABN$^WP83LC66$3y9Wx_oT0uX?5U<_j@55{;36~-8^q2d_h
z0Lq0iIAPZ@hBHhXW3<6C(FV!}Cy|`+RI%Z;R~>*$#e<Y;2=AA7tDg1~v7@@&Fz4>P
zu}a-Gylippn4vswChPKbVnaPIOCN`nZ28Y?<W1$P&jfA+qNaa#y~r@oA@VhMms3xB
z;h~^`cSDjlN4|Tm8JAnzU#wqE_#B>`$BA8KxUIWm%I%W({M)6sP`hiSr>g`9SBVh4
zN_D7mDhUFNZ{HDdFv?Tk*3OA=3cw(cuecD%EkIE80-(V{iE3uF#yk!rfD5;fLLf{R
zAP|Am$0!Y!ucVkj`L7&e#IEpf;bAOxQDYp8^+bY#5@W@y#=tNZw?-lfx=x1n_x*B#
zZX<Q1**z+GxQy3!Rj=nnZq>+0aTyDTYUJT;(5UY7;6RGvOxzu3Phrh`C(rhk{9``6
z$mt;2Oxa>@yYmsw`|^Gb%yw%Hi(ir(8jp7wT6tEy-L&0x_H^Xq`z2^;S)VEj5q}9=
z6zV1#W{WTUouutpLm<kVweV)UiX>x0YB)y@si7#6(00SLll^CL#{=$%8}jpWb;g%C
zEqQk%{So2y1=Xe{ZV4qK7wZ*nK2oC^IW!Q_ad6AGawrN@vL9BSDjXf;cT^j7r5>iS
zT!m&$YKFyXub13N|9C0uQwHu|3ijhZ_}6&={#N&E2J|zUCrB@;`FCu|C!}LXVz*bb
ziI7B0hTFF}yE`8-4<$dFmv;CP>+3Lzdtw%=G8K(CmmFCT{0hksU+L*;B)xdf^C!84
zeTvCKp~IKB$3$;4vf4bOQGE+Rl@(t8fl`NwZdVBsjefOcB5o&_-C@WMB`l$vg|any
zAVxMRDq|e9#DoIL-ZOZ=d`>i)ic(u7m~@p9?=7K;a&DJwsJ2%b<z=s!<me;rB&#ib
z9Ob;nl)*Pcl%BOmaJGz0ljI!P@WF~90Y2UqK^hxQD8Y~M8Q7zYX4&&|9n^t1ItI5`
z+YqN<4hfrc_`0$AdhcL7qp@sVa*gYUDdo$tYpXmm1sz$E&R-7=4`_XTeU){i+B~%e
z2^^Gi9=$%CvRUiNIQe~WHQ?xHTNtr7t~ZBXc0|@pY%`0pZnYRKeYl0LEpKRXPI3P2
z_egr_wvjH!r-d}rfHqEemZJCqtGiOVDtFAw=1lt-MTL)d;cP<OCS5K=dV`yBRsx^K
zk(?SGbp1ob?FsS|&-1^>7>nkO&YE5Olw~d#6s)-+{4x<wb}>q(QLN;n4e6Nf!{{vk
zn^nI0LqeatM~oc^Ya2b`JVJsr9OqbTRYs8!5Czikj95(@qlI8k+|TNb5uWT;xJA8V
z-CnBpZ^Wu?E;~GyUpA?R_r7$l!HpE{4sc3zBVXgd4=ty%ZntzR$8DWv44F=NHCrgA
zUeA1$PRx~%az7)Ml2_qDVlYAfn`sXPMN|5~Z;X6m7vlOOw5u$yv{Dcz=#|PdjN?5(
zsyw|z9`xEMSY7~rON)=<P`eVYWUO?^F5Rin_E@UIw%)|=S3q!3T47U9hh%hnnnGm2
z&CvEb!yirfyY!O!OC{vWZgJ}s)+95rch#i?x`f@Xzfm<Wg$*E{_vQxN`XN?Cg=F>}
z;LNmm<3OTa89Add-h$iKuh063*5zuJ9dhG&fIN``o$YgCagv}Uc7GY)>s413KZWU}
zQ43tU7<xZc^WLTGl)RqJd~NGxobFib7|VMCx3ftUHH0e3m>V}MgSpZ;YvP=4>+ogq
zM)$baoL|W?J*Fh0-Mp+&lN_B|9wR4kyPJ4_MUY5{pM>eV$#O=_^J)FIM~bo?PuBI2
zE!TJ~pM8i(SYvsrUBpH5P-~A=OY7~yyL<wr&;yBZA0n>YqDbyUlzaDN>*wVvv$93S
zrMo^4oaQww`s$y4z<rTtI~Jo&%B*1ot3FTTy~w3;Og*GKNY<pIP@wy=oY2T>wDyv4
z!Z5F>X0)SH*M=2*LqcKh9VD&0xG4B~KC--(ZI&zh!@i=Ou!XnM8<h961n;VQMBhKu
z4KJIjs7;@HTWKtsiW+au=Xbo|F%qWO+_V3d$3{rSnB0kQ@qv>cuasX3;(C?z3xQ9>
zn(8B^s*>?}h*FQB<j-4DHO8`qj@@ozjD}J7lf`($=B|3`is>D%Uhyr<RU0EtSZ_uC
z@RXsn=bZ}cjQMpU$2Ii+#I<7PNs=*=S81(ZBHmmY$s0ig^U8;1jB^Ia<XlokmB!3E
zhtI}WO}I}T+=?3!H5mi?i+%|>Qq>5mrzbPV3cF-FR}!%)X5T*)+3MIS70lUKRcbI^
zbR{4tct<rXVx{Tas&`pAH6mLs?1c()AJM8%uv_9yN>VXoh!?waq|{cYL~eH1{>mU?
zDq!j8(ql#YyCMdm?ssIzvRwz7y3HrU>z4T>VcrDmgPrkTJ>m~lQyBK|f7AX+OL&j)
z;SHh(g}wuUjw`h>uxBqL-`a_aN%@49Tv@Qlz1Z(92sf8^CQA*w?kp)n7B=24iJY8T
z{`O)2TO|-WRYGW(*>#WnMf~qR^Tod7H?qzp5;smtTxL7<ZrR+@Co}utlfrldI;sHQ
z&t^L8SFy7dHltOLkmDg32v>M8e<8oz2iI;nvPp27qNnLT<@y{>wng-PKNZ0WmRw7}
z8^Yu>yF=6}tOa|z;zxANRB3tpoI6Op7<RM2OyAG#y#EjccSJGDUc0b&9J<D(^=Jj(
zcZBY6g@uXp9;cJoMP;78OLt6c_oB9oS-NhUqQ>+#ghy(;;*_4T>o#YL3sl>-srqZl
zcfXZxe5$pXT&7y5K+C1tDLwY25^06E_{{k=8Q02KOW--#Hw@;rB_7eg93s91Afu;N
z?5PD#CT*{1|88l07<)W8aKK<Ps`}((60v{Q!?N`Ik^FMM3uNG25rf>bBqf=vF9%ZF
zV6Mb`{@;8R>SSs6xjO*$-2))lZyE8nzmFo}C}n$ix^FUIX56GDyrU?!UMRku>X_4T
zL!?W36`5|%<1HALc-(o&l(`akMUi+o?no+1$Lww8IV!wT-|bT0%^F66HJSTG6KW@~
ztB!urd>x~-)Qe_qQQm!h_D!ODx$F}he3Mv{0J2fcK+7^Cs?m}OAJZ&M+KE6h7Tm!F
z7h{Dw)03jRma;MmG6)U?q6aphvVdR=3##9j7t?uE`^(~?IYCm{ceSAqh#lD7oN{<j
zkAm)FB{zaou-3EC9Bl6*8U@8-Qqc?8E`~h@frAzkEK)WS16!mLuoqGT#e{&;H3n2#
zoE+A(>7;3Flk+xJpAh3MV=fz3=0<@M)_PW~inS)ns4y*-*6R-<&7hBTU?$`NodOBq
zXp;n`Q27okNQ%0Q9U@t4jm0wS%`txQCuY6$ri4ItxF8S_&@VxhT=P?G<JHrfj_vkb
zhOc8KUXHF{gUlUYhoYOYp7TZE0;El<AvHZF#3){E8#+Byv(*@6mV98ELeEiK;OJCj
z-F@F9xRW|03D*cBl85|?r=k{DD)Hjx<L4nA6H|4rUaE@BpKYN0g(8Wwjt^+ko<S73
zg|BRt49xu=IeEAvxR-6=_qAz`i#VE|j>tAdpxj99<a~n&=`F&#Y8rZBIN_IQU;?=>
zr>w_<=c_BvMHH)M3AgwZN}|X>W>ik04p$<85M@Woyy)f3aJ|!YZbzuxgi~$G4aExi
z+^@1rq8`y+9W{|#3c1p$Ek&IECXLGkpQB7HVvz@@no@5$!Z6Okg-6BZ5u!2r`+42R
z48~qN1o57*wARlC{1W6hXBeT)I$lUo-;-1izA^k@5$$`E9eAb%M)X#yaoxq!8o5gk
zshxAEYFy258w8?Sd-NghlEF~nbb_5aq5MXY_IwA}f<3<OH%kkBZ)KsI07FKh@0Xm*
z+V`}7di7ElHH<<^o~m@y+^D!iY9!+<YYK3A<*1m%WOz5OZ&fl}4e>S5`%ZzBLkP}9
zza!F!rSwB^0`s`(m$tv!{pI0}kd=-q*zVGVp$L9Tr<!Xm0Aq1C>jcvMw_7ywKXV4;
zl5?~@%;WW9?JV<5BF)e1b9vuZt6-S4#i3Qi9`l)3xs#)}zH&%Ai@TwAb?7Z$&T-;o
zeayg@5?@%~zQX|z$7^fH08d5aQi%?yPnWqiiQ<WeC$m4{%~dkV`ER$k`NqWx8{F!*
zhlWra6^Bj17t|L#vZ5LBwg!LeUY&cP!B~Kd>Cp_hhHw0%RP=z1uHOef)PEzdr*bJ&
z!qZEq-VT*Rt^diz(n{P$r~Iy&W_8l+9@n^EbT;L6>JXXi4q=<0v3a2+NWKuV#X6lF
zH;BDVW0<xdr77;B&L}e<P+2hhiqc0mSCQDj%Fk7B<CE1ixsrrkT>#0$VsD!e|LCA7
zCfbm@V?_02)QaK)r8IgiYh|8>N!<f-3|3c9_K4a<D7>r_y=3K6lRT?v<l$uD-h3!x
z2Rg-W9j^l?&D0UM{y1tL<gIZEkN&5R+dMNBei4vL$UgsS=ID!W>6GSr_{xTwY4Cu)
zZ@p$Z^cs(gxn}P*<FK8pxqaOJal0o<rE$x`;#-<(jPJCTZT9j*nFCS6P5LJ~@7l&l
z15A`TR!wr5!`AAfdr<XL>K2wyG^k`-=4uLks$`7Uvp+icdnJ@P+aslFoi*<9(ssOa
zoq4afWO_fkXae>MDcCI4>~L<N+F-f%xpTLrA`ZcUPSw0m+303~!LFTobQ8;FEVV(J
z%!DB4cu(?WF>8+@;PLapoi*8d8Jed>4>~M1sN&r<E2iT7e>=^x5SBeqb}^@=YcaNj
zAItT&b@=DBx8K}P;NxW{CcsgsYcif-BK*-ZL2JEogmZSkUNVK|#?C~+>F+}!+Uigk
z9Ousw0FXH&{O1e+n4FOmJN<hJ`JW5iKCu@CWL5qIv|Zip`2QoMK8v_|5!|;=A6mLu
zTHD+Fhx512=^fnsu-B=o8Wa#@q2m3w=--snJN-XjP6zm$4qyNdW=YVSHb6XwfK@_)
zDqm)v|4)ScjK~kbZH|fg-|=2P!=VGp=EPb4%@I4pF^2)=yApu(Jk}YFc?7H)2K2#b
z0p#D<U-Jm40Z=^8{O4$4V4eoL2`tTH&o79-Az<lL=&(kp5P-=ytlB*gpFn^(FM#?6
z$AtR<#5@?$STiFRAiePS%nJw@oCU;%fRw+nVi04w0%8{c<16HUaOffe#>@}m41mNU
zCpttUL%{-S@cqn90Dk@n5dz75LM@6WYKl?<O@BMq1PZuIU~wYgaPd6GIm#sjEL0VZ
zx2Td}7xmA1hSeS6!J8xy2rmN!!hdEG1`YI})FoE5H|XOAu%hTekFK2|)*7LSYepOZ
z<1z`^>FWH?-&^rz4fOaweF_BfXTeURVY9?|w~Rdv`mv0FMcSb;*6#>R6ms7Yuy%Vi
zR^dzl_<v`{;8`Fp>Wsyyfz|KW)E|Mkt}j@D@&M^B7IXZ8fK@yOF;1ZDhX7{$42W$7
z0y;tRz_k@D@8${umJtkM+`!5>`RRCc0CCS$7xnQVklk}&mvANlGNEX4>F|HkyTw*C
zS_P7!VCK$7Js$}OuHHb`JFG&kD+o;Mdr(>RjPf!duqp)jL?eLdRjhX#s|eW8b8xI6
zAhU)oR*N+RY!g6ZrE8etiS`n;bq5<F8_;9DGn#)Tp^41N9DwRNCbSJ?Gjs#2GFNH{
zMEwleBNa`~U%!mbfwQ^?^fjpZ4kW9cA@<~8R5v&=iB;P`z_#<z7{w+&@L~f~MRRy%
zcfNxHfuMlm83CDMESVLZ6LI;xJ`|X=i{OT*bcPrK=xpj^CMn)Tz_Kd-ndE4b4(+AU
zQQk~DILU7?_OszMSN}tH+QN8rRCoXofn*_&EO%z2r5ZH(>lPz=w%Bb1OsgIP)iVJb
zTi6A81maaqAT9vNHRA)l+gN-G#2@vZZh}DSFeSjXgZ)9u?jT@{!&sd0KR-zC+`oDw
zz`#Ypf>1f*kM$^e(CiNO_>^%M0lPJh#*B8w&{;#bp<u>Tz;}wwnZZgx*{%k9w>y0S
Y0nj}fSlKkVQAz{)dkB23nN#xr0ccu%S^xk5

diff --git a/.mvn/wrapper/maven-wrapper.properties b/.mvn/wrapper/maven-wrapper.properties
index 75264bb19..c4b31fbd3 100644
--- a/.mvn/wrapper/maven-wrapper.properties
+++ b/.mvn/wrapper/maven-wrapper.properties
@@ -14,7 +14,7 @@
 # KIND, either express or implied.  See the License for the
 # specific language governing permissions and limitations
 # under the License.
-distributionUrl=https://repo.maven.apache.org/maven2/org/apache/maven/apache-maven/3.9.9/apache-maven-3.9.9-bin.zip
-wrapperUrl=https://repo.maven.apache.org/maven2/org/apache/maven/wrapper/maven-wrapper/3.3.2/maven-wrapper-3.3.2.jar
-distributionSha256Sum=4ec3f26fb1a692473aea0235c300bd20f0f9fe741947c82c1234cefd76ac3a3c
-wrapperSha256Sum=3d8f20ce6103913be8b52aef6d994e0c54705fb527324ceb9b835b338739c7a8
+distributionUrl=https://repo.maven.apache.org/maven2/org/apache/maven/apache-maven/3.9.11/apache-maven-3.9.11-bin.zip
+wrapperUrl=https://repo.maven.apache.org/maven2/org/apache/maven/wrapper/maven-wrapper/3.3.4/maven-wrapper-3.3.4.jar
+distributionSha256Sum=0d7125e8c91097b36edb990ea5934e6c68b4440eef4ea96510a0f6815e7eeadb
+wrapperSha256Sum=4e2fbf6554bc8a4702cdfdd3bef464f423393d784ddbb037216320ce55d5e4e1
diff --git a/pom.xml b/pom.xml
index d48cebe57..c05ea2db4 100644
--- a/pom.xml
+++ b/pom.xml
@@ -37,11 +37,11 @@
   </modules>
 
   <properties>
-    <aws.sdk2.version>2.31.70</aws.sdk2.version>
-    <braintree.version>3.42.0</braintree.version>
-    <commons-csv.version>1.14.0</commons-csv.version>
-    <commons-io.version>2.19.0</commons-io.version>
-    <dropwizard.version>4.0.12</dropwizard.version>
+    <aws.sdk2.version>2.33.8</aws.sdk2.version>
+    <braintree.version>3.44.0</braintree.version>
+    <commons-csv.version>1.14.1</commons-csv.version>
+    <commons-io.version>2.20.0</commons-io.version>
+    <dropwizard.version>4.0.16</dropwizard.version>
     <dropwizard-metrics-datadog.version>1.1.14</dropwizard-metrics-datadog.version>
     <!-- Note: when updating FoundationDB, also include a copy of `libfdb_c.so` from the FoundationDB release at
     src/main/jib/usr/lib/libfdb_c.so. We use x86_64 builds without AVX instructions enabled (i.e. FoundationDB versions
@@ -50,39 +50,39 @@
     <foundationdb.version>7.3.62</foundationdb.version>
     <foundationdb.api-version>730</foundationdb.api-version>
     <foundationdb.client-library-sha256>bfed237b787fae3cde1222676e6bfbb0d218fc27bf9e903397a7a7aa96fb2d33</foundationdb.client-library-sha256>
-    <google-cloud-libraries.version>26.62.0</google-cloud-libraries.version>
+    <google-cloud-libraries.version>26.67.0</google-cloud-libraries.version>
     <grpc.version>1.73.0</grpc.version> <!-- should be kept in sync with the value from Google libraries-bom -->
-    <gson.version>2.13.1</gson.version>
+    <gson.version>2.13.2</gson.version>
     <!-- several libraries (AWS, Google Cloud) use Apache http components transitively, and we need to align them -->
     <httpcore.version>4.4.16</httpcore.version>
     <httpclient.version>4.5.14</httpclient.version>
-    <jackson.version>2.19.1</jackson.version>
+    <jackson.version>2.20.0</jackson.version>
     <junit-pioneer.version>2.3.0</junit-pioneer.version>
     <jsr305.version>3.0.2</jsr305.version>
-    <kotlin.version>2.2.0</kotlin.version>
+    <kotlin.version>2.2.20</kotlin.version>
     <!-- Logback 1.5.14+ has a null pointer bug: https://github.com/qos-ch/logback/issues/929. -->
     <logback.version>1.5.13</logback.version>
-    <logback-access-common.version>2.0.5</logback-access-common.version>
-    <lettuce.version>6.7.1.RELEASE</lettuce.version>
-    <libphonenumber.version>9.0.8</libphonenumber.version>
+    <logback-access-common.version>2.0.6</logback-access-common.version>
+    <lettuce.version>6.8.1.RELEASE</lettuce.version>
+    <libphonenumber.version>9.0.13</libphonenumber.version>
     <logstash.logback.version>8.1</logstash.logback.version>
-    <log4j-bom.version>2.25.0</log4j-bom.version>
+    <log4j-bom.version>2.25.1</log4j-bom.version>
     <luajava.version>3.5.0</luajava.version>
-    <micrometer.version>1.15.1</micrometer.version>
-    <netty.version>4.1.122.Final</netty.version>
+    <micrometer.version>1.15.4</micrometer.version>
+    <netty.version>4.1.127.Final</netty.version>
     <!-- Must be less than or equal to the value from Google libraries-bom which controls the protobuf runtime version.
     See https://protobuf.dev/support/cross-version-runtime-guarantee/. -->
     <protoc.version>4.29.4</protoc.version>
     <pushy.version>0.15.4</pushy.version>
     <reactive.grpc.version>1.2.4</reactive.grpc.version>
-    <reactor-bom.version>2024.0.7</reactor-bom.version> <!-- 3.7.4, see https://github.com/reactor/reactor#bom-versioning-scheme -->
+    <reactor-bom.version>2024.0.10</reactor-bom.version> <!-- 3.7.11, see https://github.com/reactor/reactor#bom-versioning-scheme -->
     <resilience4j.version>2.3.0</resilience4j.version>
     <semver4j.version>3.1.0</semver4j.version>
     <simple-grpc.version>0.1.0</simple-grpc.version>
     <slf4j.version>2.0.17</slf4j.version>
     <stripe.version>28.4.0</stripe.version>
-    <swagger.version>2.2.31</swagger.version>
-    <testcontainers.version>1.21.2</testcontainers.version>
+    <swagger.version>2.2.36</swagger.version>
+    <testcontainers.version>1.21.3</testcontainers.version>
 
     <!-- images to use in tests via testcontainers  -->
     <dynamodb.image>amazon/dynamodb-local:3.0.0@sha256:2fed5e3a965a4ba5aa6ac82baec57058b5a3848e959d705518f3fd579a77e76b</dynamodb.image>
@@ -90,8 +90,8 @@
     <redis.image>redis:7.4-alpine@sha256:af1d0fc3f63b02b13ff7906c9baf7c5b390b8881ca08119cd570677fe2f60b55</redis.image>
     <redis-cluster.image>docker.io/bitnami/redis-cluster:7.4@sha256:a53d023fdfaf8a8d7ddc58da040d3494e4cb45772644618ffa44c42dcd32b9af</redis-cluster.image>
 
-    <!-- eclipse-temurin:24.0.1_9-jre-noble (note: always use the multi-arch manifest *LIST* here) -->
-    <docker.image.sha256>a42f2330212db8bc1459a2550def18f6ec04a8c31494ffc20dea13dfa82a211e</docker.image.sha256>
+    <!-- eclipse-temurin:24.0.2_12-jre-noble (note: always use the multi-arch manifest *LIST* here) -->
+    <docker.image.sha256>85ecfc9bbb42af046d2bacbf1219d2005be4840cbfa16c2e6fd910d9ccfec95b</docker.image.sha256>
 
     <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
   </properties>
@@ -246,7 +246,7 @@
       <dependency>
         <groupId>org.ow2.asm</groupId>
         <artifactId>asm</artifactId>
-        <version>9.7.1 </version>
+        <version>9.8</version>
         <scope>test</scope>
       </dependency>
       <dependency>
@@ -272,13 +272,13 @@
       <dependency>
         <groupId>com.redis</groupId>
         <artifactId>testcontainers-redis</artifactId>
-        <version>2.2.2</version>
+        <version>2.2.4</version>
         <scope>test</scope>
       </dependency>
       <dependency>
         <groupId>org.signal</groupId>
         <artifactId>libsignal-server</artifactId>
-        <version>0.76.5</version>
+        <version>0.80.3</version>
       </dependency>
       <dependency>
         <groupId>org.signal</groupId>
@@ -352,7 +352,7 @@
     <dependency>
       <groupId>org.wiremock</groupId>
       <artifactId>wiremock</artifactId>
-      <version>3.12.1</version>
+      <version>3.13.1</version>
       <scope>test</scope>
     </dependency>
     <dependency>
@@ -551,7 +551,7 @@
               <rules>
                 <dependencyConvergence/>
                 <requireMavenVersion>
-                  <version>3.9.9</version>
+                  <version>3.9.11</version>
                 </requireMavenVersion>
               </rules>
             </configuration>
diff --git a/service/pom.xml b/service/pom.xml
index 5969580d0..4f0f7889e 100644
--- a/service/pom.xml
+++ b/service/pom.xml
@@ -11,11 +11,11 @@
   <artifactId>service</artifactId>
 
   <properties>
-    <firebase-admin.version>9.4.3</firebase-admin.version>
+    <firebase-admin.version>9.6.0</firebase-admin.version>
     <java-uuid-generator.version>5.1.0</java-uuid-generator.version>
-    <google-androidpublisher.version>v3-rev20250318-2.0.0</google-androidpublisher.version>
-    <storekit.version>3.4.0</storekit.version>
-    <webauthn4j.version>0.28.6.RELEASE</webauthn4j.version>
+    <google-androidpublisher.version>v3-rev20250904-2.0.0</google-androidpublisher.version>
+    <storekit.version>3.6.0</storekit.version>
+    <webauthn4j.version>0.29.6.RELEASE</webauthn4j.version>
     <java-jwt.version>4.5.0</java-jwt.version>
   </properties>
 
@@ -243,12 +243,19 @@
     <dependency>
       <groupId>org.apache.commons</groupId>
       <artifactId>commons-compress</artifactId>
-      <version>1.27.1</version>
+      <version>1.28.0</version>
     </dependency>
 
     <dependency>
       <groupId>com.google.cloud</groupId>
       <artifactId>google-cloud-pubsub</artifactId>
+      <exclusions>
+        <!-- our direct import of guava brings in a more recent version of failureaccess, so excluding it here -->
+        <exclusion>
+          <groupId>com.google.guava</groupId>
+          <artifactId>failureaccess</artifactId>
+        </exclusion>
+      </exclusions>
     </dependency>
 
     <!-- resolve opentelemetry-semconv conflicts from lower in firebase-admin and firestore dependency trees -->
@@ -261,12 +268,17 @@
           <groupId>io.opentelemetry.semconv</groupId>
           <artifactId>opentelemetry-semconv</artifactId>
         </exclusion>
+        <!-- our direct import of guava brings in a more recent version of failureaccess, so excluding it here -->
+        <exclusion>
+          <groupId>com.google.guava</groupId>
+          <artifactId>failureaccess</artifactId>
+        </exclusion>
       </exclusions>
     </dependency>
     <dependency>
       <groupId>io.opentelemetry.semconv</groupId>
       <artifactId>opentelemetry-semconv</artifactId>
-      <version>1.30.0</version>
+      <version>1.37.0</version>
     </dependency>
     <dependency>
       <groupId>com.google.cloud</groupId>
@@ -276,6 +288,11 @@
           <groupId>io.opentelemetry.semconv</groupId>
           <artifactId>opentelemetry-semconv</artifactId>
         </exclusion>
+        <!-- our direct import of guava brings in a more recent version of failureaccess, so excluding it here -->
+        <exclusion>
+          <groupId>com.google.guava</groupId>
+          <artifactId>failureaccess</artifactId>
+        </exclusion>
       </exclusions>
     </dependency>
 
@@ -390,7 +407,7 @@
     <dependency>
       <groupId>com.amazonaws</groupId>
       <artifactId>dynamodb-lock-client</artifactId>
-      <version>1.3.0</version>
+      <version>1.4.0</version>
     </dependency>
 
     <dependency>
@@ -432,7 +449,7 @@
     <dependency>
       <groupId>com.googlecode.libphonenumber</groupId>
       <artifactId>geocoder</artifactId>
-      <version>3.2</version>
+      <version>3.14</version>
     </dependency>
 
     <dependency>