diff --git a/package.json b/package.json
index d1b15eea3..107d6c95d 100644
--- a/package.json
+++ b/package.json
@@ -26,12 +26,12 @@
         }
     ],
     "dependencies": {
-        "acorn": "8.12.1",
+        "acorn": "8.14.1",
         "acorn-walk": "8.3.4",
         "ajv": "8.17.1",
         "async-mutex": "0.5.0",
         "basic-auth": "2.0.1",
-        "bcryptjs": "2.4.3",
+        "bcryptjs": "3.0.2",
         "body-parser": "1.20.3",
         "cheerio": "1.0.0-rc.10",
         "clone": "2.1.2",
@@ -43,8 +43,8 @@
         "denque": "2.1.0",
         "express": "4.21.2",
         "express-session": "1.18.1",
-        "form-data": "4.0.0",
-        "fs-extra": "11.2.0",
+        "form-data": "4.0.2",
+        "fs-extra": "11.3.0",
         "got": "12.6.1",
         "hash-sum": "2.0.0",
         "hpagent": "1.2.0",
@@ -54,17 +54,17 @@
         "is-utf8": "0.2.1",
         "js-yaml": "4.1.0",
         "json-stringify-safe": "5.0.1",
-        "jsonata": "2.0.5",
+        "jsonata": "2.0.6",
         "lodash.clonedeep": "^4.5.0",
         "media-typer": "1.1.0",
         "memorystore": "1.6.7",
         "mime": "3.0.0",
         "moment": "2.30.1",
-        "moment-timezone": "0.5.46",
-        "mqtt": "5.7.0",
-        "multer": "1.4.5-lts.1",
+        "moment-timezone": "0.5.48",
+        "mqtt": "5.11.0",
+        "multer": "1.4.5-lts.2",
         "mustache": "4.2.0",
-        "node-red-admin": "^4.0.1",
+        "node-red-admin": "^4.0.2",
         "node-watch": "0.7.4",
         "nopt": "5.0.0",
         "oauth2orize": "1.12.0",
@@ -74,19 +74,19 @@
         "passport-oauth2-client-password": "0.1.2",
         "raw-body": "3.0.0",
         "rfdc": "^1.3.1",
-        "semver": "7.6.3",
+        "semver": "7.7.1",
         "tar": "7.4.3",
-        "tough-cookie": "^5.0.0",
-        "uglify-js": "3.17.4",
+        "tough-cookie": "5.1.2",
+        "uglify-js": "3.19.3",
         "uuid": "9.0.1",
         "ws": "7.5.10",
         "xml2js": "0.6.2"
     },
     "optionalDependencies": {
-        "@node-rs/bcrypt": "1.10.4"
+        "@node-rs/bcrypt": "1.10.7"
     },
     "devDependencies": {
-        "dompurify": "2.5.7",
+        "dompurify": "2.5.8",
         "grunt": "1.6.1",
         "grunt-chmod": "~1.1.1",
         "grunt-cli": "~1.5.0",
@@ -110,11 +110,11 @@
         "jquery-i18next": "1.2.1",
         "jsdoc-nr-template": "github:node-red/jsdoc-nr-template",
         "marked": "4.3.0",
-        "mermaid": "11.3.0",
+        "mermaid": "11.6.0",
         "minami": "1.2.3",
         "mocha": "9.2.2",
         "node-red-node-test-helper": "^0.3.3",
-        "nodemon": "3.1.7",
+        "nodemon": "3.1.9",
         "proxy": "^1.0.2",
         "sass": "1.62.1",
         "should": "13.2.3",
diff --git a/packages/node_modules/@node-red/editor-api/package.json b/packages/node_modules/@node-red/editor-api/package.json
index 809580243..ea199077c 100644
--- a/packages/node_modules/@node-red/editor-api/package.json
+++ b/packages/node_modules/@node-red/editor-api/package.json
@@ -18,7 +18,7 @@
     "dependencies": {
         "@node-red/util": "4.1.0-beta.0",
         "@node-red/editor-client": "4.1.0-beta.0",
-        "bcryptjs": "2.4.3",
+        "bcryptjs": "3.0.2",
         "body-parser": "1.20.3",
         "clone": "2.1.2",
         "cors": "2.8.5",
@@ -26,7 +26,7 @@
         "express": "4.21.2",
         "memorystore": "1.6.7",
         "mime": "3.0.0",
-        "multer": "1.4.5-lts.1",
+        "multer": "1.4.5-lts.2",
         "mustache": "4.2.0",
         "oauth2orize": "1.12.0",
         "passport-http-bearer": "1.0.1",
@@ -35,6 +35,6 @@
         "ws": "7.5.10"
     },
     "optionalDependencies": {
-        "@node-rs/bcrypt": "1.10.4"
+        "@node-rs/bcrypt": "1.10.7"
     }
 }
diff --git a/packages/node_modules/@node-red/nodes/package.json b/packages/node_modules/@node-red/nodes/package.json
index af8d93500..a513e14da 100644
--- a/packages/node_modules/@node-red/nodes/package.json
+++ b/packages/node_modules/@node-red/nodes/package.json
@@ -15,7 +15,7 @@
         }
     ],
     "dependencies": {
-        "acorn": "8.12.1",
+        "acorn": "8.14.1",
         "acorn-walk": "8.3.4",
         "ajv": "8.17.1",
         "body-parser": "1.20.3",
@@ -26,8 +26,8 @@
         "cors": "2.8.5",
         "cronosjs": "1.7.1",
         "denque": "2.1.0",
-        "form-data": "4.0.0",
-        "fs-extra": "11.2.0",
+        "form-data": "4.0.2",
+        "fs-extra": "11.3.0",
         "got": "12.6.1",
         "hash-sum": "2.0.0",
         "hpagent": "1.2.0",
@@ -35,13 +35,13 @@
         "is-utf8": "0.2.1",
         "js-yaml": "4.1.0",
         "media-typer": "1.1.0",
-        "mqtt": "5.7.0",
-        "multer": "1.4.5-lts.1",
+        "mqtt": "5.11.0",
+        "multer": "1.4.5-lts.2",
         "mustache": "4.2.0",
         "node-watch": "0.7.4",
         "on-headers": "1.0.2",
         "raw-body": "3.0.0",
-        "tough-cookie": "^5.0.0",
+        "tough-cookie": "5.1.2",
         "uuid": "9.0.1",
         "ws": "7.5.10",
         "xml2js": "0.6.2",
diff --git a/packages/node_modules/@node-red/registry/package.json b/packages/node_modules/@node-red/registry/package.json
index d4d3b03a1..1e886a159 100644
--- a/packages/node_modules/@node-red/registry/package.json
+++ b/packages/node_modules/@node-red/registry/package.json
@@ -18,9 +18,9 @@
     "dependencies": {
         "@node-red/util": "4.1.0-beta.0",
         "clone": "2.1.2",
-        "fs-extra": "11.2.0",
-        "semver": "7.6.3",
+        "fs-extra": "11.3.0",
+        "semver": "7.7.1",
         "tar": "7.4.3",
-        "uglify-js": "3.17.4"
+        "uglify-js": "3.19.3"
     }
 }
diff --git a/packages/node_modules/@node-red/runtime/package.json b/packages/node_modules/@node-red/runtime/package.json
index e3d373673..e6f1ca0d0 100644
--- a/packages/node_modules/@node-red/runtime/package.json
+++ b/packages/node_modules/@node-red/runtime/package.json
@@ -21,7 +21,7 @@
         "async-mutex": "0.5.0",
         "clone": "2.1.2",
         "express": "4.21.2",
-        "fs-extra": "11.2.0",
+        "fs-extra": "11.3.0",
         "json-stringify-safe": "5.0.1",
         "rfdc": "^1.3.1"
     }
diff --git a/packages/node_modules/@node-red/util/package.json b/packages/node_modules/@node-red/util/package.json
index 7353755dc..5d0ff15bd 100644
--- a/packages/node_modules/@node-red/util/package.json
+++ b/packages/node_modules/@node-red/util/package.json
@@ -15,12 +15,12 @@
         }
     ],
     "dependencies": {
-        "fs-extra": "11.2.0",
+        "fs-extra": "11.3.0",
         "i18next": "24.2.3",
         "json-stringify-safe": "5.0.1",
-        "jsonata": "2.0.5",
+        "jsonata": "2.0.6",
         "lodash.clonedeep": "^4.5.0",
         "moment": "2.30.1",
-        "moment-timezone": "0.5.46"
+        "moment-timezone": "0.5.48"
     }
 }
diff --git a/packages/node_modules/node-red/package.json b/packages/node_modules/node-red/package.json
index 52302a53a..f36273986 100644
--- a/packages/node_modules/node-red/package.json
+++ b/packages/node_modules/node-red/package.json
@@ -36,16 +36,16 @@
         "@node-red/util": "4.1.0-beta.0",
         "@node-red/nodes": "4.1.0-beta.0",
         "basic-auth": "2.0.1",
-        "bcryptjs": "2.4.3",
+        "bcryptjs": "3.0.2",
         "cors": "2.8.5",
         "express": "4.21.2",
-        "fs-extra": "11.2.0",
-        "node-red-admin": "^4.0.1",
+        "fs-extra": "11.3.0",
+        "node-red-admin": "^4.0.2",
         "nopt": "5.0.0",
-        "semver": "7.6.3"
+        "semver": "7.7.1"
     },
     "optionalDependencies": {
-        "@node-rs/bcrypt": "1.10.4"
+        "@node-rs/bcrypt": "1.10.7"
     },
     "engines": {
         "node": ">=18.5"