diff --git a/MODULE.bazel b/MODULE.bazel
index f2bfd70..fa623ce 100644
--- a/MODULE.bazel
+++ b/MODULE.bazel
@@ -10,20 +10,20 @@ module(
 
 bazel_dep(name = "platforms", version = "1.1.0")
 bazel_dep(name = "bazel_skylib", version = "1.9.2")
-bazel_dep(name = "rules_java", version = "9.7.0")
+bazel_dep(name = "rules_java", version = "9.9.0")
 bazel_dep(name = "rules_proto", version = "7.1.0")
 bazel_dep(name = "protobuf", version = "35.1")
 
 # Needed by //elide/kotlin:toolchain.bzl, which wraps a stock rules_kotlin
 # toolchain (via define_kt_toolchain) and swaps in the Elide KotlinBuilder shim.
-bazel_dep(name = "rules_kotlin", version = "2.4.0")
+bazel_dep(name = "rules_kotlin", version = "2.4.21")
 
 bazel_dep(name = "stardoc", version = "0.8.1", dev_dependency = True)
-bazel_dep(name = "rules_jvm_external", version = "7.1", dev_dependency = True)
+bazel_dep(name = "rules_jvm_external", version = "7.2", dev_dependency = True)
 
 # Transitively loaded by rules_java/rules_kotlin .bzl; declared so the Stardoc
 # `starlark_doc_extract` targets in //docs can cover it with a bzl_library.
-bazel_dep(name = "bazel_features", version = "1.51.0", dev_dependency = True)
+bazel_dep(name = "bazel_features", version = "1.52.0", dev_dependency = True)
 
 maven = use_extension("@rules_jvm_external//:extensions.bzl", "maven", dev_dependency = True)
 maven.install(
diff --git a/benchmarks/MODULE.bazel b/benchmarks/MODULE.bazel
index f66be1c..ffdeb54 100644
--- a/benchmarks/MODULE.bazel
+++ b/benchmarks/MODULE.bazel
@@ -6,8 +6,8 @@ local_path_override(
     path = "..",
 )
 
-bazel_dep(name = "rules_java", version = "9.7.0")
-bazel_dep(name = "rules_kotlin", version = "2.4.0")
+bazel_dep(name = "rules_java", version = "9.9.0")
+bazel_dep(name = "rules_kotlin", version = "2.4.21")
 
 # Elide toolchain (nightly via CDN).
 elide = use_extension("@rules_elide//elide:extensions.bzl", "elide")
diff --git a/e2e/integration/MODULE.bazel b/e2e/integration/MODULE.bazel
index 0dcf517..2e9e12f 100644
--- a/e2e/integration/MODULE.bazel
+++ b/e2e/integration/MODULE.bazel
@@ -6,7 +6,7 @@ local_path_override(
     path = "../..",
 )
 
-bazel_dep(name = "rules_jvm_external", version = "7.1")
+bazel_dep(name = "rules_jvm_external", version = "7.2")
 
 # Activate the elide module extension against the real Elide CDN. This
 # downloads the elide binary at repo-rule time, enabling real `bazel build`
diff --git a/e2e/kotlin_builder/MODULE.bazel b/e2e/kotlin_builder/MODULE.bazel
index c048412..b380ff3 100644
--- a/e2e/kotlin_builder/MODULE.bazel
+++ b/e2e/kotlin_builder/MODULE.bazel
@@ -6,8 +6,8 @@ local_path_override(
     path = "../..",
 )
 
-bazel_dep(name = "rules_kotlin", version = "2.4.0")
-bazel_dep(name = "rules_java", version = "9.7.0")
+bazel_dep(name = "rules_kotlin", version = "2.4.21")
+bazel_dep(name = "rules_java", version = "9.9.0")
 
 elide = use_extension("@rules_elide//elide:extensions.bzl", "elide")
 elide.install(channel = "nightly")
diff --git a/e2e/rbe/MODULE.bazel b/e2e/rbe/MODULE.bazel
index 640f8dc..dbef683 100644
--- a/e2e/rbe/MODULE.bazel
+++ b/e2e/rbe/MODULE.bazel
@@ -9,7 +9,7 @@ local_path_override(
 # platforms is needed directly here: //tools/platforms:rbe_linux_amd64 references
 # @platforms//os and @platforms//cpu constraints.
 bazel_dep(name = "platforms", version = "1.1.0")
-bazel_dep(name = "rules_jvm_external", version = "7.1")
+bazel_dep(name = "rules_jvm_external", version = "7.2")
 
 # Real Elide toolchain (downloads the binary at repo-rule time, like
 # e2e/integration). Under RBE the binary is shipped to the executor as an input.
diff --git a/e2e/vanilla/MODULE.bazel b/e2e/vanilla/MODULE.bazel
index 401369f..192a091 100644
--- a/e2e/vanilla/MODULE.bazel
+++ b/e2e/vanilla/MODULE.bazel
@@ -5,9 +5,9 @@ module(name = "rules_elide_vanilla")
 # only the default Kotlin toolchain registered) so no Elide toolchain or build
 # state can bleed in — giving an honest A/B against the Elide build for the
 # CodSpeed e2e benchmarks (benchmarks/codspeed/test_e2e_bench.py).
-bazel_dep(name = "rules_java", version = "9.7.0")
-bazel_dep(name = "rules_kotlin", version = "2.4.0")
-bazel_dep(name = "rules_jvm_external", version = "7.1")
+bazel_dep(name = "rules_java", version = "9.9.0")
+bazel_dep(name = "rules_kotlin", version = "2.4.21")
+bazel_dep(name = "rules_jvm_external", version = "7.2")
 
 # Stock Kotlin toolchain only (no Elide).
 register_toolchains("@rules_kotlin//kotlin/internal:default_toolchain")