diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index aea2bd7..7998349 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -47,7 +47,7 @@ jobs:
           "${ANDROID_HOME}/cmdline-tools/latest/bin/sdkmanager" "cmake;3.22.1"
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@5595ccaf912efad79be6eef63a5619ff05969be3 # v4
+        uses: github/codeql-action/init@ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd # v4
         with:
           languages: c-cpp
           build-mode: manual
@@ -62,7 +62,7 @@ jobs:
           --stacktrace
 
       - name: Analyze C/C++
-        uses: github/codeql-action/analyze@5595ccaf912efad79be6eef63a5619ff05969be3 # v4
+        uses: github/codeql-action/analyze@ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd # v4
         with:
           category: "/language:c-cpp"
 
@@ -92,7 +92,7 @@ jobs:
         run: chmod +x gradlew
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@5595ccaf912efad79be6eef63a5619ff05969be3 # v4
+        uses: github/codeql-action/init@ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd # v4
         with:
           languages: java-kotlin
           build-mode: manual
@@ -116,6 +116,6 @@ jobs:
           --stacktrace
 
       - name: Analyze Kotlin
-        uses: github/codeql-action/analyze@5595ccaf912efad79be6eef63a5619ff05969be3 # v4
+        uses: github/codeql-action/analyze@ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd # v4
         with:
           category: "/language:java-kotlin"
diff --git a/app/build.gradle b/app/build.gradle
index 6d33781..d827f6b 100644
--- a/app/build.gradle
+++ b/app/build.gradle
@@ -223,7 +223,7 @@ android {
 
 dependencies {
     implementation project(':protocol')
-    implementation 'androidx.core:core:1.17.0'
+    implementation 'androidx.core:core:1.19.0'
     implementation 'androidx.recyclerview:recyclerview:1.4.0'
     testImplementation 'junit:junit:4.13.2'
     androidTestImplementation 'androidx.test:runner:1.7.0'
diff --git a/build.gradle b/build.gradle
index 6df953a..3267131 100644
--- a/build.gradle
+++ b/build.gradle
@@ -6,7 +6,7 @@ buildscript {
         mavenCentral()
     }
     dependencies {
-        classpath 'org.jetbrains.kotlin:kotlin-gradle-plugin:2.4.20-Beta1'
+        classpath 'org.jetbrains.kotlin:kotlin-gradle-plugin:2.4.20-RC'
     }
 }
 
diff --git a/settings.gradle b/settings.gradle
index 06ee17a..4993a30 100644
--- a/settings.gradle
+++ b/settings.gradle
@@ -11,9 +11,9 @@ pluginManagement {
 // plugin classpath outside of a normal buildscript {} block, so this is forced
 // here rather than in a project build.gradle.
 def forcedSecureVersions = [
-    'org.bouncycastle:bcprov-jdk18on:1.85',
-    'org.bouncycastle:bcpkix-jdk18on:1.85',
-    'org.bouncycastle:bcutil-jdk18on:1.85',
+    'org.bouncycastle:bcprov-jdk18on:1.85.2',
+    'org.bouncycastle:bcpkix-jdk18on:1.85.2',
+    'org.bouncycastle:bcutil-jdk18on:1.85.2',
     'org.bitbucket.b_c:jose4j:0.9.6',
     'org.jdom:jdom2:2.0.6.1',
     'org.apache.commons:commons-lang3:3.20.0',