diff --git a/build.gradle b/build.gradle
index 527dfa3e70..3b28c31172 100644
--- a/build.gradle
+++ b/build.gradle
@@ -78,21 +78,21 @@ configure(allprojects) { project ->
 
 			dependency "io.reactivex:rxjava:1.3.8"
 			dependency "io.reactivex:rxjava-reactive-streams:1.2.1"
-			dependency "io.reactivex.rxjava2:rxjava:2.2.12"
+			dependency "io.reactivex.rxjava2:rxjava:2.2.13"
 
 			dependency "com.caucho:hessian:4.0.62"
 			dependency "com.fasterxml:aalto-xml:1.2.2"
 			dependency("com.fasterxml.woodstox:woodstox-core:5.2.0") {
 				exclude group: "stax", name: "stax-api"
 			}
-			dependency "com.google.code.gson:gson:2.8.5"
+			dependency "com.google.code.gson:gson:2.8.6"
 			dependency "com.google.protobuf:protobuf-java-util:3.10.0"
 			dependency "com.googlecode.protobuf-java-format:protobuf-java-format:1.4"
 			dependency("com.thoughtworks.xstream:xstream:1.4.11.1") {
 				exclude group: "xpp3", name: "xpp3_min"
 				exclude group: "xmlpull", name: "xmlpull"
 			}
-			dependency "org.apache.johnzon:johnzon-jsonb:1.2.0"
+			dependency "org.apache.johnzon:johnzon-jsonb:1.2.1"
 			dependency("org.codehaus.jettison:jettison:1.3.8") {
 				exclude group: "stax", name: "stax-api"
 			}
@@ -103,7 +103,7 @@ configure(allprojects) { project ->
 			dependency "org.ogce:xpp3:1.1.6"
 			dependency "org.yaml:snakeyaml:1.25"
 
-			dependency "com.h2database:h2:1.4.199"
+			dependency "com.h2database:h2:1.4.200"
 			dependency "com.github.ben-manes.caffeine:caffeine:2.8.0"
 			dependency "com.github.librepdf:openpdf:1.3.11"
 			dependency "com.rometools:rome:1.12.2"
@@ -123,32 +123,32 @@ configure(allprojects) { project ->
 				entry 'derby'
 				entry 'derbyclient'
 			}
-			dependency "org.apache.poi:poi-ooxml:4.1.0"
+			dependency "org.apache.poi:poi-ooxml:4.1.1"
 			dependency "org.beanshell:bsh:2.0b5"
 			dependency "org.freemarker:freemarker:2.3.29"
 			dependency "org.hsqldb:hsqldb:2.5.0"
-			dependency "org.quartz-scheduler:quartz:2.3.1"
+			dependency "org.quartz-scheduler:quartz:2.3.2"
 			dependency "org.codehaus.fabric3.api:commonj:1.1.0"
 			dependency "net.sf.ehcache:ehcache:2.10.6"
 			dependency "org.ehcache:jcache:1.0.1"
 			dependency "org.ehcache:ehcache:3.4.0"
-			dependency "org.hibernate:hibernate-core:5.4.5.Final"
+			dependency "org.hibernate:hibernate-core:5.4.8.Final"
 			dependency "org.hibernate:hibernate-validator:6.0.17.Final"
-			dependency "org.webjars:webjars-locator-core:0.37"
+			dependency "org.webjars:webjars-locator-core:0.42"
 			dependency "org.webjars:underscorejs:1.8.3"
 
-			dependencySet(group: 'org.apache.tomcat', version: '9.0.26') {
+			dependencySet(group: 'org.apache.tomcat', version: '9.0.27') {
 				entry 'tomcat-util'
 				entry('tomcat-websocket') {
 					exclude group: "org.apache.tomcat", name: "tomcat-websocket-api"
 					exclude group: "org.apache.tomcat", name: "tomcat-servlet-api"
 				}
 			}
-			dependencySet(group: 'org.apache.tomcat.embed', version: '9.0.26') {
+			dependencySet(group: 'org.apache.tomcat.embed', version: '9.0.27') {
 				entry 'tomcat-embed-core'
 				entry 'tomcat-embed-websocket'
 			}
-			dependencySet(group: 'io.undertow', version: '2.0.26.Final') {
+			dependencySet(group: 'io.undertow', version: '2.0.27.Final') {
 				entry 'undertow-core'
 				entry('undertow-websockets-jsr') {
 					exclude group: "org.jboss.spec.javax.websocket", name: "jboss-websocket-api_1.1_spec"
@@ -203,7 +203,7 @@ configure(allprojects) { project ->
 					exclude group: "org.hamcrest", name: "hamcrest-core"
 				}
 			}
-			dependencySet(group: 'org.mockito', version: '3.0.0') {
+			dependencySet(group: 'org.mockito', version: '3.1.0') {
 				entry('mockito-core') {
 					exclude group: "org.hamcrest", name: "hamcrest-core"
 				}
@@ -211,10 +211,10 @@ configure(allprojects) { project ->
 			}
 			dependency "io.mockk:mockk:1.9.3"
 
-			dependency("net.sourceforge.htmlunit:htmlunit:2.35.0") {
+			dependency("net.sourceforge.htmlunit:htmlunit:2.36.0") {
 				exclude group: "commons-logging", name: "commons-logging"
 			}
-			dependency("org.seleniumhq.selenium:htmlunit-driver:2.35.1") {
+			dependency("org.seleniumhq.selenium:htmlunit-driver:2.36.0") {
 				exclude group: "commons-logging", name: "commons-logging"
 			}
 			dependency("org.seleniumhq.selenium:selenium-java:3.141.59") {
@@ -242,7 +242,7 @@ configure(allprojects) { project ->
 			dependency "com.ibm.websphere:uow:6.0.2.17"
 			dependency "com.jamonapi:jamon:2.81"
 			dependency "joda-time:joda-time:2.10.4"
-			dependency "org.eclipse.persistence:org.eclipse.persistence.jpa:2.7.4"
+			dependency "org.eclipse.persistence:org.eclipse.persistence.jpa:2.7.5"
 			dependency "org.javamoney:moneta:1.3"
 
 			dependency "com.sun.activation:javax.activation:1.2.0"
@@ -340,7 +340,7 @@ configure([rootProject] + javaProjects) { project ->
 	}
 
 	checkstyle {
-		toolVersion = "8.24"
+		toolVersion = "8.26"
 		configDir = rootProject.file("src/checkstyle")
 	}
 
diff --git a/spring-core/spring-core.gradle b/spring-core/spring-core.gradle
index 6a525e8e14..66e5afe59f 100644
--- a/spring-core/spring-core.gradle
+++ b/spring-core/spring-core.gradle
@@ -6,7 +6,7 @@ apply plugin: "kotlin"
 // cglib itself depends on asm and is therefore further transformed by the JarJar task to
 // depend on org.springframework.asm; this avoids including two different copies of asm.
 def cglibVersion = "3.3.0"
-def objenesisVersion = "3.0.1"
+def objenesisVersion = "3.1"
 
 configurations {
 	jarjar