diff --git a/src/Heddle.Generator.IntegrationTests/Heddle.Generator.IntegrationTests.csproj b/src/Heddle.Generator.IntegrationTests/Heddle.Generator.IntegrationTests.csproj
index cf109fe9..c6e0db2c 100644
--- a/src/Heddle.Generator.IntegrationTests/Heddle.Generator.IntegrationTests.csproj
+++ b/src/Heddle.Generator.IntegrationTests/Heddle.Generator.IntegrationTests.csproj
@@ -12,7 +12,7 @@
   </PropertyGroup>
 
   <ItemGroup>
-    <PackageReference Include="Microsoft.NET.Test.Sdk" Version="17.11.1" />
+    <PackageReference Include="Microsoft.NET.Test.Sdk" Version="17.13.0" />
     <PackageReference Include="xunit" Version="2.9.3" />
     <PackageReference Include="xunit.runner.visualstudio" Version="3.1.5">
       <PrivateAssets>all</PrivateAssets>
diff --git a/src/Heddle.LanguageServices.Tests/Heddle.LanguageServices.Tests.csproj b/src/Heddle.LanguageServices.Tests/Heddle.LanguageServices.Tests.csproj
index 8b0924df..c5acfce6 100644
--- a/src/Heddle.LanguageServices.Tests/Heddle.LanguageServices.Tests.csproj
+++ b/src/Heddle.LanguageServices.Tests/Heddle.LanguageServices.Tests.csproj
@@ -20,7 +20,7 @@
       <PrivateAssets>all</PrivateAssets>
       <IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
     </PackageReference>
-    <PackageReference Include="Nerdbank.Streams" Version="2.13.16" />
+    <PackageReference Include="Nerdbank.Streams" Version="2.13.31" />
     <PackageReference Include="StreamJsonRpc" Version="2.25.29" />
   </ItemGroup>
 
diff --git a/src/Heddle.Performance/Heddle.Performance.csproj b/src/Heddle.Performance/Heddle.Performance.csproj
index ecbefc90..314f1b45 100644
--- a/src/Heddle.Performance/Heddle.Performance.csproj
+++ b/src/Heddle.Performance/Heddle.Performance.csproj
@@ -52,7 +52,7 @@
          the only release with the 2026 GHSA advisory fixes — requires System.Text.Json 10, which
          dropped net6.0; older Scriban versions carry the unfixed advisories. The Scriban twins are
          compiled out of the net6.0 leg with `#if !NET6_0` rather than suppressing either warning. -->
-    <PackageReference Include="Scriban" Version="7.2.5" />
+    <PackageReference Include="Scriban" Version="7.2.6" />
   </ItemGroup>
   <ItemGroup>
     <PackageReference Include="Newtonsoft.Json" Version="13.0.4" />
@@ -61,7 +61,7 @@
   <ItemGroup>
     <PackageReference Include="Fluid.Core" Version="2.31.0" />
     <PackageReference Include="DotLiquid" Version="2.3.197" />
-    <PackageReference Include="Handlebars.Net" Version="2.1.6" />
+    <PackageReference Include="Handlebars.Net" Version="2.4.3" />
   </ItemGroup>
   <ItemGroup>
     <Folder Include="TestSuite\Data\" />
diff --git a/src/Heddle.Tool.Tests/Heddle.Tool.Tests.csproj b/src/Heddle.Tool.Tests/Heddle.Tool.Tests.csproj
index deedd048..d6f8f215 100644
--- a/src/Heddle.Tool.Tests/Heddle.Tool.Tests.csproj
+++ b/src/Heddle.Tool.Tests/Heddle.Tool.Tests.csproj
@@ -10,7 +10,7 @@
   </PropertyGroup>
 
   <ItemGroup>
-    <PackageReference Include="Microsoft.NET.Test.Sdk" Version="17.11.1" />
+    <PackageReference Include="Microsoft.NET.Test.Sdk" Version="17.13.0" />
     <PackageReference Include="xunit" Version="2.9.3" />
     <PackageReference Include="xunit.runner.visualstudio" Version="3.1.5">
       <PrivateAssets>all</PrivateAssets>