diff --git a/sandbox/ivy.xml b/sandbox/ivy.xml
index 3a4c86af..752a0a05 100644
--- a/sandbox/ivy.xml
+++ b/sandbox/ivy.xml
@@ -31,40 +31,44 @@
 		<dependency org="org.springframework" name="spring-ldap"
 			rev="latest.integration" conf="global->default;source->source" />
 		<dependency org="org.springframework" name="spring-beans"
-			rev="2.0.2" />
+			rev="2.0.4" />
 		<dependency org="org.springframework" name="spring-core"
-			rev="2.0.2" />
+			rev="2.0.4" />
 		<dependency org="org.springframework" name="spring-context"
-			rev="2.0.2" />
+			rev="2.0.4" />
 		<dependency org="org.springframework" name="spring-dao"
-			rev="2.0.2" />
+			rev="2.0.4" />
 		<dependency org="org.springframework" name="spring-src"
-			rev="2.0.2" conf="source->source">
+			rev="2.0.4" conf="source->source">
 			<artifact name="spring-src" type="zip" />
 		</dependency>
 		<dependency org="com.sun" name="ldapbp" rev="1.0" />
 
 		<!-- build time	only dependencies -->
-		<dependency org="org.acegisecurity" name="acegi-security"
-			rev="1.0.1" conf="buildtime->default" />
+		<dependency org="org.acegisecurity" name="acegi-security"
+			rev="1.0.3" conf="buildtime->default" />
+		<dependency org="org.acegisecurity" name="acegi-security-src"
+			rev="1.0.3" conf="source->default">
+			<artifact name="acegi-security-src" type="zip" />
+		</dependency>
 		<!-- kind of nasty, acegi needs some 1.2.7 stuff, so we override with newer! -->
 		<dependency org="org.springframework" name="spring-jdbc"
-			rev="2.0.2" conf="buildtime->default" />
+			rev="2.0.4" conf="buildtime->default" />
 		<dependency org="org.springframework" name="spring-remoting"
-			rev="2.0.2" conf="buildtime->default" />
+			rev="2.0.4" conf="buildtime->default" />
 		<dependency org="org.springframework" name="spring-support"
-			rev="2.0.2" conf="buildtime->default" />
+			rev="2.0.4" conf="buildtime->default" />
 		<dependency org="org.springframework" name="spring-jpa"
-			rev="2.0.2" conf="buildtime->default" />
+			rev="2.0.4" conf="buildtime->default" />
 
 		<!-- test time only	dependencies -->
 		<dependency org="com.cenqua.clover" name="clover" rev="1.3.12"
 			conf="test->default" />
 		<dependency org="org.springframework" name="spring-mock"
-			rev="2.0.2" conf="test->default" />
+			rev="2.0.4" conf="test->default" />
 		<dependency org="gsbase" name="gsbase" rev="2.0.1"
 			conf="test->default" />
-		<dependency org="junit" name="junit" rev="3.8.1"
+		<dependency org="junit" name="junit" rev="3.8.2"
 			conf="test->default" />
 		<dependency org="junit-addons" name="junit-addons" rev="1.4"
 			conf="test->default" />
@@ -81,7 +85,7 @@
 		<dependency org="cglib" name="cglib-nodep" rev="2.1_3"
 			conf="test->default" />
 		<dependency org="org.springframework" name="spring-aop"
-			rev="2.0.2" conf="test->default" />
+			rev="2.0.4" conf="test->default" />
 		<dependency org="aopalliance" name="aopalliance" rev="1.0"
 			conf="test->default" />
 		<dependency org="hsqldb" name="hsqldb" rev="1.8.0.7"