diff --git a/harbor-demo/src/Kuestenlogik.Bowire.Samples.GraphQL/Kuestenlogik.Bowire.Samples.GraphQL.csproj b/harbor-demo/src/Kuestenlogik.Bowire.Samples.GraphQL/Kuestenlogik.Bowire.Samples.GraphQL.csproj
index 9db5f7a..0b673e7 100644
--- a/harbor-demo/src/Kuestenlogik.Bowire.Samples.GraphQL/Kuestenlogik.Bowire.Samples.GraphQL.csproj
+++ b/harbor-demo/src/Kuestenlogik.Bowire.Samples.GraphQL/Kuestenlogik.Bowire.Samples.GraphQL.csproj
@@ -1,7 +1,7 @@
 <Project Sdk="Microsoft.NET.Sdk.Web">
   <ItemGroup>
-    <PackageReference Include="HotChocolate.AspNetCore" Version="16.6.8" />
-    <PackageReference Include="HotChocolate.Subscriptions.InMemory" Version="16.6.8" />
+    <PackageReference Include="HotChocolate.AspNetCore" Version="16.7.1" />
+    <PackageReference Include="HotChocolate.Subscriptions.InMemory" Version="16.7.1" />
     <ProjectReference Include="..\Kuestenlogik.Bowire.Samples.Shared\Kuestenlogik.Bowire.Samples.Shared.csproj" />
   </ItemGroup>
 </Project>
diff --git a/harbor-demo/src/Kuestenlogik.Bowire.Samples.PortCalls/Kuestenlogik.Bowire.Samples.PortCalls.csproj b/harbor-demo/src/Kuestenlogik.Bowire.Samples.PortCalls/Kuestenlogik.Bowire.Samples.PortCalls.csproj
index 89f8339..b92bb3b 100644
--- a/harbor-demo/src/Kuestenlogik.Bowire.Samples.PortCalls/Kuestenlogik.Bowire.Samples.PortCalls.csproj
+++ b/harbor-demo/src/Kuestenlogik.Bowire.Samples.PortCalls/Kuestenlogik.Bowire.Samples.PortCalls.csproj
@@ -1,7 +1,7 @@
 <Project Sdk="Microsoft.NET.Sdk.Web">
   <ItemGroup>
-    <PackageReference Include="HotChocolate.AspNetCore" Version="16.6.8" />
-    <PackageReference Include="HotChocolate.Subscriptions.InMemory" Version="16.6.8" />
+    <PackageReference Include="HotChocolate.AspNetCore" Version="16.7.1" />
+    <PackageReference Include="HotChocolate.Subscriptions.InMemory" Version="16.7.1" />
     <!-- gRPC *client* to Fleet (the BFF fan-out talks gRPC + OData + REST). -->
     <PackageReference Include="Grpc.Net.Client" Version="2.84.0" />
     <PackageReference Include="Grpc.Tools" Version="2.84.0" PrivateAssets="All" />
diff --git a/harbor-demo/src/Kuestenlogik.Bowire.Samples.Vulnerable/Kuestenlogik.Bowire.Samples.Vulnerable.csproj b/harbor-demo/src/Kuestenlogik.Bowire.Samples.Vulnerable/Kuestenlogik.Bowire.Samples.Vulnerable.csproj
index 886dbd6..f904f2c 100644
--- a/harbor-demo/src/Kuestenlogik.Bowire.Samples.Vulnerable/Kuestenlogik.Bowire.Samples.Vulnerable.csproj
+++ b/harbor-demo/src/Kuestenlogik.Bowire.Samples.Vulnerable/Kuestenlogik.Bowire.Samples.Vulnerable.csproj
@@ -15,7 +15,7 @@
   <ItemGroup>
     <!-- HotChocolate version matches Kuestenlogik.Bowire.Samples.GraphQL
          to avoid drift across the samples solution. -->
-    <PackageReference Include="HotChocolate.AspNetCore" Version="16.6.8" />
+    <PackageReference Include="HotChocolate.AspNetCore" Version="16.7.1" />
 
     <!-- gRPC + Server Reflection versions match
          Kuestenlogik.Bowire.Samples.Grpc to keep the samples