diff --git a/src/Typebeat.Web/Typebeat.Web.csproj b/src/Typebeat.Web/Typebeat.Web.csproj
index e2840a15..5c5379df 100644
--- a/src/Typebeat.Web/Typebeat.Web.csproj
+++ b/src/Typebeat.Web/Typebeat.Web.csproj
@@ -22,13 +22,13 @@
   </ItemGroup>
 
   <ItemGroup>
-    <PackageReference Include="AWSSDK.S3" Version="4.0.104" />
-    <PackageReference Include="Dapper" Version="2.1.79" />
+    <PackageReference Include="AWSSDK.S3" Version="4.0.104.4" />
+    <PackageReference Include="Dapper" Version="2.1.89" />
     <PackageReference Include="Newtonsoft.Json" Version="13.0.4" />
     <PackageReference Include="Npgsql" Version="10.0.3" />
-    <PackageReference Include="Sentry.AspNetCore" Version="6.7.0" />
+    <PackageReference Include="Sentry.AspNetCore" Version="6.12.1" />
     <!-- Cover-image generation (M3 uploads). Managed-only, no native deps to ship in the image. -->
-    <PackageReference Include="SixLabors.ImageSharp" Version="3.1.12" />
+    <PackageReference Include="SixLabors.ImageSharp" Version="4.1.3" />
   </ItemGroup>
 
 </Project>
diff --git a/tests/Typebeat.Web.Tests/Typebeat.Web.Tests.csproj b/tests/Typebeat.Web.Tests/Typebeat.Web.Tests.csproj
index 21ba4be2..f21bf092 100644
--- a/tests/Typebeat.Web.Tests/Typebeat.Web.Tests.csproj
+++ b/tests/Typebeat.Web.Tests/Typebeat.Web.Tests.csproj
@@ -9,18 +9,18 @@
   </PropertyGroup>
 
   <ItemGroup>
-    <PackageReference Include="coverlet.collector" Version="6.0.4" />
-    <PackageReference Include="Microsoft.NET.Test.Sdk" Version="17.14.0" />
-    <PackageReference Include="NUnit" Version="4.3.2" />
-    <PackageReference Include="NUnit.Analyzers" Version="4.7.0" />
-    <PackageReference Include="NUnit3TestAdapter" Version="5.0.0" />
+    <PackageReference Include="coverlet.collector" Version="10.1.0" />
+    <PackageReference Include="Microsoft.NET.Test.Sdk" Version="18.11.0" />
+    <PackageReference Include="NUnit" Version="5.0.0" />
+    <PackageReference Include="NUnit.Analyzers" Version="4.15.0" />
+    <PackageReference Include="NUnit3TestAdapter" Version="6.3.1" />
 
     <!-- In-process host for the website tests (Typebeat.Web.Tests.Website namespace); same
          version as tests/Typebeat.WireCompat. Those tests need local Postgres (they create
          their own typebeat_webtests_<run id> database); the pure wire-shape tests above stay DB-free. -->
-    <PackageReference Include="Microsoft.AspNetCore.Mvc.Testing" Version="10.0.10" />
+    <PackageReference Include="Microsoft.AspNetCore.Mvc.Testing" Version="10.0.13" />
     <PackageReference Include="Npgsql" Version="10.0.3" />
-    <PackageReference Include="Dapper" Version="2.1.79" />
+    <PackageReference Include="Dapper" Version="2.1.89" />
     <PackageReference Include="Newtonsoft.Json" Version="13.0.4" />
   </ItemGroup>
 
diff --git a/tests/Typebeat.WireCompat/Typebeat.WireCompat.csproj b/tests/Typebeat.WireCompat/Typebeat.WireCompat.csproj
index 4803057f..b7fccf65 100644
--- a/tests/Typebeat.WireCompat/Typebeat.WireCompat.csproj
+++ b/tests/Typebeat.WireCompat/Typebeat.WireCompat.csproj
@@ -29,18 +29,18 @@
     <!-- Test packages: versions from tests/Typebeat.Web.Tests, except NUnit which is bumped from
          4.3.2 to 4.5.1 to clear the transitive floor typebeat.Game imposes (it PackageReferences
          NUnit >= 4.5.1; keeping 4.3.2 is an NU1605 downgrade error). -->
-    <PackageReference Include="coverlet.collector" Version="6.0.4" />
-    <PackageReference Include="Microsoft.NET.Test.Sdk" Version="17.14.0" />
-    <PackageReference Include="NUnit" Version="4.5.1" />
-    <PackageReference Include="NUnit.Analyzers" Version="4.7.0" />
-    <PackageReference Include="NUnit3TestAdapter" Version="5.0.0" />
+    <PackageReference Include="coverlet.collector" Version="10.1.0" />
+    <PackageReference Include="Microsoft.NET.Test.Sdk" Version="18.11.0" />
+    <PackageReference Include="NUnit" Version="5.0.0" />
+    <PackageReference Include="NUnit.Analyzers" Version="4.15.0" />
+    <PackageReference Include="NUnit3TestAdapter" Version="6.3.1" />
 
     <!-- In-process host for real HTTP calls through the server pipeline. -->
-    <PackageReference Include="Microsoft.AspNetCore.Mvc.Testing" Version="10.0.10" />
+    <PackageReference Include="Microsoft.AspNetCore.Mvc.Testing" Version="10.0.13" />
 
     <!-- Direct DB access for fixture create/seed. (Also flows transitively from Typebeat.Web.) -->
     <PackageReference Include="Npgsql" Version="10.0.3" />
-    <PackageReference Include="Dapper" Version="2.1.79" />
+    <PackageReference Include="Dapper" Version="2.1.89" />
     <PackageReference Include="Newtonsoft.Json" Version="13.0.4" />
   </ItemGroup>
 
diff --git a/tools/reprice-report/Typebeat.Tools.RepriceReport.csproj b/tools/reprice-report/Typebeat.Tools.RepriceReport.csproj
index e2fa6f36..df1946a8 100644
--- a/tools/reprice-report/Typebeat.Tools.RepriceReport.csproj
+++ b/tools/reprice-report/Typebeat.Tools.RepriceReport.csproj
@@ -27,7 +27,7 @@
   </PropertyGroup>
 
   <ItemGroup>
-    <PackageReference Include="Dapper" Version="2.1.79" />
+    <PackageReference Include="Dapper" Version="2.1.89" />
     <PackageReference Include="Npgsql" Version="10.0.3" />
     <PackageReference Include="Newtonsoft.Json" Version="13.0.4" />
   </ItemGroup>
diff --git a/tools/score-recalc/Typebeat.Tools.ScoreRecalc.csproj b/tools/score-recalc/Typebeat.Tools.ScoreRecalc.csproj
index 1f7660f3..7ece2af7 100644
--- a/tools/score-recalc/Typebeat.Tools.ScoreRecalc.csproj
+++ b/tools/score-recalc/Typebeat.Tools.ScoreRecalc.csproj
@@ -31,9 +31,10 @@
   </PropertyGroup>
 
   <ItemGroup>
-    <PackageReference Include="Dapper" Version="2.1.79" />
+    <PackageReference Include="Dapper" Version="2.1.89" />
     <PackageReference Include="Npgsql" Version="10.0.3" />
     <PackageReference Include="Newtonsoft.Json" Version="13.0.4" />
+    <PackageReference Include="NUnit" Version="5.0.0" />
   </ItemGroup>
 
   <ItemGroup>