diff --git a/demo/vue/app/frontend/package-lock.json b/demo/vue/app/frontend/package-lock.json
index db8e9f2b..c80bf379 100644
--- a/demo/vue/app/frontend/package-lock.json
+++ b/demo/vue/app/frontend/package-lock.json
@@ -12,8 +12,8 @@
         "@babel/eslint-parser": "^7.25.1",
         "@bcgov/bc-sans": "^2.1.0",
         "@vue/eslint-config-prettier": "^9.0.0",
-        "axios": "^1.7.3",
-        "core-js": "^3.38.0",
+        "axios": "^1.7.5",
+        "core-js": "^3.38.1",
         "eslint": "^8.57.0",
         "eslint-plugin-prettier": "^5.2.1",
         "keycloak-js": "^15.1.1",
@@ -4920,9 +4920,9 @@
       }
     },
     "node_modules/axios": {
-      "version": "1.7.3",
-      "resolved": "https://registry.npmjs.org/axios/-/axios-1.7.3.tgz",
-      "integrity": "sha512-Ar7ND9pU99eJ9GpoGQKhKf58GpUOgnzuaB7ueNQ5BMi0p+LZ5oaEnfF999fAArcTIBwXTCHAmGcHOZJaWPq9Nw==",
+      "version": "1.7.5",
+      "resolved": "https://registry.npmjs.org/axios/-/axios-1.7.5.tgz",
+      "integrity": "sha512-fZu86yCo+svH3uqJ/yTdQ0QHpQu5oL+/QE+QPSv6BZSkDAoky9vytxp7u5qk83OJFS3kEBcesWni9WTZAv3tSw==",
       "license": "MIT",
       "dependencies": {
         "follow-redirects": "^1.15.6",
@@ -5997,9 +5997,9 @@
       "dev": true
     },
     "node_modules/core-js": {
-      "version": "3.38.0",
-      "resolved": "https://registry.npmjs.org/core-js/-/core-js-3.38.0.tgz",
-      "integrity": "sha512-XPpwqEodRljce9KswjZShh95qJ1URisBeKCjUdq27YdenkslVe7OO0ZJhlYXAChW7OhXaRLl8AAba7IBfoIHug==",
+      "version": "3.38.1",
+      "resolved": "https://registry.npmjs.org/core-js/-/core-js-3.38.1.tgz",
+      "integrity": "sha512-OP35aUorbU3Zvlx7pjsFdu1rGNnD4pgw/CWoYzRY3t2EzoVT7shKHY1dlAy3f41cGIO7ZDPQimhGFTlEYkG/Hw==",
       "hasInstallScript": true,
       "license": "MIT",
       "funding": {
diff --git a/demo/vue/app/frontend/package.json b/demo/vue/app/frontend/package.json
index db7c5f79..1e9e6cc8 100644
--- a/demo/vue/app/frontend/package.json
+++ b/demo/vue/app/frontend/package.json
@@ -20,8 +20,8 @@
     "@babel/eslint-parser": "^7.25.1",
     "@bcgov/bc-sans": "^2.1.0",
     "@vue/eslint-config-prettier": "^9.0.0",
-    "axios": "^1.7.3",
-    "core-js": "^3.38.0",
+    "axios": "^1.7.5",
+    "core-js": "^3.38.1",
     "eslint": "^8.57.0",
     "eslint-plugin-prettier": "^5.2.1",
     "keycloak-js": "^15.1.1",
diff --git a/demo/vue/app/package-lock.json b/demo/vue/app/package-lock.json
index 744accdf..7e792069 100644
--- a/demo/vue/app/package-lock.json
+++ b/demo/vue/app/package-lock.json
@@ -10,7 +10,7 @@
       "license": "Apache-2.0",
       "dependencies": {
         "api-problem": "^9.0.2",
-        "axios": "^1.7.3",
+        "axios": "^1.7.5",
         "axios-oauth-client": "^2.2.0",
         "axios-token-interceptor": "^0.2.0",
         "compression": "^1.7.4",
@@ -22,8 +22,8 @@
         "fs-extra": "^11.2.0",
         "js-yaml": "^4.1.0",
         "jsonwebtoken": "^9.0.2",
-        "keycloak-connect": "^25.0.2",
-        "winston": "^3.14.1",
+        "keycloak-connect": "^25.0.4",
+        "winston": "^3.14.2",
         "winston-transport": "^4.7.1"
       },
       "devDependencies": {
@@ -1876,9 +1876,9 @@
       }
     },
     "node_modules/axios": {
-      "version": "1.7.3",
-      "resolved": "https://registry.npmjs.org/axios/-/axios-1.7.3.tgz",
-      "integrity": "sha512-Ar7ND9pU99eJ9GpoGQKhKf58GpUOgnzuaB7ueNQ5BMi0p+LZ5oaEnfF999fAArcTIBwXTCHAmGcHOZJaWPq9Nw==",
+      "version": "1.7.5",
+      "resolved": "https://registry.npmjs.org/axios/-/axios-1.7.5.tgz",
+      "integrity": "sha512-fZu86yCo+svH3uqJ/yTdQ0QHpQu5oL+/QE+QPSv6BZSkDAoky9vytxp7u5qk83OJFS3kEBcesWni9WTZAv3tSw==",
       "license": "MIT",
       "dependencies": {
         "follow-redirects": "^1.15.6",
@@ -2787,9 +2787,10 @@
       "dev": true
     },
     "node_modules/elliptic": {
-      "version": "6.5.4",
-      "resolved": "https://registry.npmjs.org/elliptic/-/elliptic-6.5.4.tgz",
-      "integrity": "sha512-iLhC6ULemrljPZb+QutR5TQGB+pdW6KGD5RSegS+8sorOZT+rdQFbsQFJgvN3eRqNALqJer4oQ16YvJHlU8hzQ==",
+      "version": "6.5.7",
+      "resolved": "https://registry.npmjs.org/elliptic/-/elliptic-6.5.7.tgz",
+      "integrity": "sha512-ESVCtTwiA+XhY3wyh24QqRGBoP3rEdDUl3EDUUo9tft074fi19IrdpH7hLCMMP3CIj7jb3W96rn8lt/BqIlt5Q==",
+      "license": "MIT",
       "dependencies": {
         "bn.js": "^4.11.9",
         "brorand": "^1.1.0",
@@ -7557,9 +7558,10 @@
       }
     },
     "node_modules/keycloak-connect": {
-      "version": "25.0.2",
-      "resolved": "https://registry.npmjs.org/keycloak-connect/-/keycloak-connect-25.0.2.tgz",
-      "integrity": "sha512-IEr1Mw0ghGcWi/mbHffsQyb+JZpJbkSrZqa5Zql/h1AUWae1cWc+E+dUc9jDsfQuf6bGW+YasOCaTOXel9Q1xw==",
+      "version": "25.0.4",
+      "resolved": "https://registry.npmjs.org/keycloak-connect/-/keycloak-connect-25.0.4.tgz",
+      "integrity": "sha512-njiyVQOjdxUq+hIVEnC64Uzz10J8ZwYySLp8KsFxeSIuijBXpWtSjMDPZZ3fb3UVmX8I6uVKNqD1Faasd1hnIQ==",
+      "license": "Apache-2.0",
       "dependencies": {
         "jwk-to-pem": "^2.0.0"
       },
@@ -7805,12 +7807,13 @@
       }
     },
     "node_modules/micromatch": {
-      "version": "4.0.5",
-      "resolved": "https://registry.npmjs.org/micromatch/-/micromatch-4.0.5.tgz",
-      "integrity": "sha512-DMy+ERcEW2q8Z2Po+WNXuw3c5YaUSFjAO5GsJqfEl7UjvtIuFKO6ZrKvcItdy98dwFI2N1tg3zNIdKaQT+aNdA==",
+      "version": "4.0.8",
+      "resolved": "https://registry.npmjs.org/micromatch/-/micromatch-4.0.8.tgz",
+      "integrity": "sha512-PXwfBhYu0hBCPw8Dn0E+WDYb7af3dSLVWKi3HGv84IdF4TyFoC0ysxFd0Goxw7nSv4T/PzEJQxsYsEiFCKo2BA==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
-        "braces": "^3.0.2",
+        "braces": "^3.0.3",
         "picomatch": "^2.3.1"
       },
       "engines": {
@@ -10079,9 +10082,10 @@
       }
     },
     "node_modules/winston": {
-      "version": "3.14.1",
-      "resolved": "https://registry.npmjs.org/winston/-/winston-3.14.1.tgz",
-      "integrity": "sha512-CJi4Il/msz8HkdDfXOMu+r5Au/oyEjFiOZzbX2d23hRLY0narGjqfE5lFlrT5hfYJhPtM8b85/GNFsxIML/RVA==",
+      "version": "3.14.2",
+      "resolved": "https://registry.npmjs.org/winston/-/winston-3.14.2.tgz",
+      "integrity": "sha512-CO8cdpBB2yqzEf8v895L+GNKYJiEq8eKlHU38af3snQBQ+sdAIUepjMSguOIJC7ICbzm0ZI+Af2If4vIJrtmOg==",
+      "license": "MIT",
       "dependencies": {
         "@colors/colors": "^1.6.0",
         "@dabh/diagnostics": "^2.0.2",
diff --git a/demo/vue/app/package.json b/demo/vue/app/package.json
index d3199988..faf76bd6 100644
--- a/demo/vue/app/package.json
+++ b/demo/vue/app/package.json
@@ -32,7 +32,7 @@
   },
   "dependencies": {
     "api-problem": "^9.0.2",
-    "axios": "^1.7.3",
+    "axios": "^1.7.5",
     "axios-oauth-client": "^2.2.0",
     "axios-token-interceptor": "^0.2.0",
     "compression": "^1.7.4",
@@ -44,8 +44,8 @@
     "fs-extra": "^11.2.0",
     "js-yaml": "^4.1.0",
     "jsonwebtoken": "^9.0.2",
-    "keycloak-connect": "^25.0.2",
-    "winston": "^3.14.1",
+    "keycloak-connect": "^25.0.4",
+    "winston": "^3.14.2",
     "winston-transport": "^4.7.1"
   },
   "devDependencies": {
diff --git a/oidc-controller/requirements-dev.txt b/oidc-controller/requirements-dev.txt
index 5d86c495..f36f36c5 100644
--- a/oidc-controller/requirements-dev.txt
+++ b/oidc-controller/requirements-dev.txt
@@ -2,8 +2,8 @@ black==24.8.0
 flake8==7.1.1
 mock==5.1.0
 mongomock==4.1.2
-pytest-asyncio==0.23.8
+pytest-asyncio==0.24.0
 pytest-cov==5.0.0
 pytest==8.3.2
 requests-mock==1.12.1
-setuptools==72.1.0
+setuptools==73.0.1
diff --git a/oidc-controller/requirements.txt b/oidc-controller/requirements.txt
index 2bb5c3f8..e978aa5f 100644
--- a/oidc-controller/requirements.txt
+++ b/oidc-controller/requirements.txt
@@ -1,4 +1,4 @@
-fastapi==0.112.0
+fastapi==0.112.1
 jinja2==3.1.4
 oic==1.7.0
 pymongo==4.8.0
@@ -6,7 +6,7 @@ pyop==3.4.1
 python-multipart==0.0.9 # required by fastapi to serve/upload files
 qrcode[pil]==7.4.2
 structlog==24.4.0
-uvicorn[standard]==0.30.5
+uvicorn[standard]==0.30.6
 python-socketio==5.11.3 # required to run websockets
 canonicaljson==2.0.0 # used to provide unique consistent user identifiers
 pydantic-settings==2.4.0