diff --git a/harbor-demo/src/Kuestenlogik.Bowire.Samples.GraphQL/Kuestenlogik.Bowire.Samples.GraphQL.csproj b/harbor-demo/src/Kuestenlogik.Bowire.Samples.GraphQL/Kuestenlogik.Bowire.Samples.GraphQL.csproj
index 884e783..6acefe3 100644
--- a/harbor-demo/src/Kuestenlogik.Bowire.Samples.GraphQL/Kuestenlogik.Bowire.Samples.GraphQL.csproj
+++ b/harbor-demo/src/Kuestenlogik.Bowire.Samples.GraphQL/Kuestenlogik.Bowire.Samples.GraphQL.csproj
@@ -1,7 +1,7 @@
 <Project Sdk="Microsoft.NET.Sdk.Web">
   <ItemGroup>
-    <PackageReference Include="HotChocolate.AspNetCore" Version="16.0.9" />
-    <PackageReference Include="HotChocolate.Subscriptions.InMemory" Version="16.0.9" />
+    <PackageReference Include="HotChocolate.AspNetCore" Version="16.5.0" />
+    <PackageReference Include="HotChocolate.Subscriptions.InMemory" Version="16.5.0" />
     <ProjectReference Include="..\Kuestenlogik.Bowire.Samples.Shared\Kuestenlogik.Bowire.Samples.Shared.csproj" />
   </ItemGroup>
 </Project>
diff --git a/harbor-demo/src/Kuestenlogik.Bowire.Samples.Vulnerable/Kuestenlogik.Bowire.Samples.Vulnerable.csproj b/harbor-demo/src/Kuestenlogik.Bowire.Samples.Vulnerable/Kuestenlogik.Bowire.Samples.Vulnerable.csproj
index 2cbd6eb..0796b2a 100644
--- a/harbor-demo/src/Kuestenlogik.Bowire.Samples.Vulnerable/Kuestenlogik.Bowire.Samples.Vulnerable.csproj
+++ b/harbor-demo/src/Kuestenlogik.Bowire.Samples.Vulnerable/Kuestenlogik.Bowire.Samples.Vulnerable.csproj
@@ -15,7 +15,7 @@
   <ItemGroup>
     <!-- HotChocolate version matches Kuestenlogik.Bowire.Samples.GraphQL
          to avoid drift across the samples solution. -->
-    <PackageReference Include="HotChocolate.AspNetCore" Version="16.0.9" />
+    <PackageReference Include="HotChocolate.AspNetCore" Version="16.5.0" />
 
     <!-- gRPC + Server Reflection versions match
          Kuestenlogik.Bowire.Samples.Grpc to keep the samples