diff --git a/polyglot-kotlin/pom.xml b/polyglot-kotlin/pom.xml
index a5473455..568cbffa 100644
--- a/polyglot-kotlin/pom.xml
+++ b/polyglot-kotlin/pom.xml
@@ -58,6 +58,12 @@
       <artifactId>kotlin-script-runtime</artifactId>
       <version>${kotlin.version}</version>
     </dependency>
+    <!-- Maven Core dropped commons-lang3 dependency; also, "best practice" is to declare what you code against -->
+    <dependency>
+      <groupId>org.apache.commons</groupId>
+      <artifactId>commons-text</artifactId>
+      <version>1.12.0</version>
+    </dependency>
 
     <!-- Test -->
     <dependency>
@@ -86,7 +92,7 @@
 
   <properties>
     <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
-    <kotlin.version>2.0.0</kotlin.version>
+    <kotlin.version>2.0.20</kotlin.version>
     <commons-lang3.version>3.8.1</commons-lang3.version>
     <skipTests>false</skipTests>
     <invoker.skip>${skipTests}</invoker.skip>
diff --git a/polyglot-kotlin/src/main/kotlin/org/sonatype/maven/polyglot/kotlin/dsl/DSLSupport.kt b/polyglot-kotlin/src/main/kotlin/org/sonatype/maven/polyglot/kotlin/dsl/DSLSupport.kt
index d2181277..d83b8018 100644
--- a/polyglot-kotlin/src/main/kotlin/org/sonatype/maven/polyglot/kotlin/dsl/DSLSupport.kt
+++ b/polyglot-kotlin/src/main/kotlin/org/sonatype/maven/polyglot/kotlin/dsl/DSLSupport.kt
@@ -1,6 +1,6 @@
 package org.sonatype.maven.polyglot.kotlin.dsl
 
-import org.apache.commons.lang3.StringEscapeUtils.escapeJava
+import org.apache.commons.text.StringEscapeUtils.escapeJava
 
 internal var propertiesFactory: () -> java.util.Properties = { java.util.Properties() }
 
diff --git a/polyglot-ruby/pom.xml b/polyglot-ruby/pom.xml
index 2248c17d..c1d9c5bf 100644
--- a/polyglot-ruby/pom.xml
+++ b/polyglot-ruby/pom.xml
@@ -158,7 +158,7 @@
       </dependencies>
 
       <properties>
-        <jruby.plugins.version>3.0.2</jruby.plugins.version>
+        <jruby.plugins.version>3.0.3</jruby.plugins.version>
       </properties>
 
       <build>
diff --git a/polyglot-scala/pom.xml b/polyglot-scala/pom.xml
index e5e00e5e..67c8f9ae 100644
--- a/polyglot-scala/pom.xml
+++ b/polyglot-scala/pom.xml
@@ -103,7 +103,7 @@
       <plugin>
         <groupId>net.alchim31.maven</groupId>
         <artifactId>scala-maven-plugin</artifactId>
-        <version>4.9.1</version>
+        <version>4.9.2</version>
         <executions>
           <execution>
             <goals>
diff --git a/polyglot-xml/pom.xml b/polyglot-xml/pom.xml
index c1908ec4..9dd2f6cb 100644
--- a/polyglot-xml/pom.xml
+++ b/polyglot-xml/pom.xml
@@ -38,6 +38,7 @@
 					<plugin>
 						<groupId>org.codehaus.modello</groupId>
 						<artifactId>modello-maven-plugin</artifactId>
+						<version>2.4.0</version>
 						<configuration>
 							<models>
 								<model>src/main/mdo/maven.mdo</model>
diff --git a/pom.xml b/pom.xml
index b0ba91c5..f3e54e43 100644
--- a/pom.xml
+++ b/pom.xml
@@ -28,8 +28,8 @@
   </licenses>
 
   <properties>
-    <mavenVersion>3.9.5</mavenVersion>
-    <sisuInjectVersion>0.9.0.M2</sisuInjectVersion>
+    <mavenVersion>3.9.9</mavenVersion>
+    <sisuInjectVersion>0.9.0.M3</sisuInjectVersion>
     <plexusUtilsVersion>3.5.1</plexusUtilsVersion>
     <!-- last that works with Java 8: FIXED to this version as long we insist on Java 8 building this project -->
     <!-- BUT: signArtifacts goal with this version is busted, so we need to use other means to sign -->
@@ -223,7 +223,7 @@
       <plugins>
         <plugin>
           <artifactId>maven-invoker-plugin</artifactId>
-          <version>3.6.1</version>
+          <version>3.8.0</version>
           <configuration>
             <scope>test</scope>
             <postBuildHookScript>verify</postBuildHookScript>
@@ -276,7 +276,7 @@
           <plugin>
             <groupId>org.apache.maven.plugins</groupId>
             <artifactId>maven-gpg-plugin</artifactId>
-            <version>3.2.4</version>
+            <version>3.2.5</version>
             <executions>
               <execution>
                 <id>sign-artifacts</id>