diff --git a/gradle/libs.versions.toml b/gradle/libs.versions.toml
index 6139f63..8484e47 100644
--- a/gradle/libs.versions.toml
+++ b/gradle/libs.versions.toml
@@ -7,7 +7,7 @@
 # on `com.fasterxml.jackson.core` (pulled in transitively by databind).
 
 [versions]
-jackson = "3.2.4"
+jackson = "3.3.0"
 bouncycastle = "1.86"
 junit-jupiter = "6.1.3"
 # pk-auth: the passkeys-first auth library set, consumed from Maven Central (NOT vendored).
diff --git a/gradle/wrapper/gradle-wrapper.jar b/gradle/wrapper/gradle-wrapper.jar
index 9fa7f28..51cbd2a 100644
Binary files a/gradle/wrapper/gradle-wrapper.jar and b/gradle/wrapper/gradle-wrapper.jar differ
diff --git a/gradle/wrapper/gradle-wrapper.properties b/gradle/wrapper/gradle-wrapper.properties
index 91c4fc6..94c356a 100644
--- a/gradle/wrapper/gradle-wrapper.properties
+++ b/gradle/wrapper/gradle-wrapper.properties
@@ -1,6 +1,6 @@
 distributionBase=GRADLE_USER_HOME
 distributionPath=wrapper/dists
-distributionUrl=https\://services.gradle.org/distributions/gradle-9.8.2-bin.zip
+distributionUrl=https\://services.gradle.org/distributions/gradle-9.9.0-bin.zip
 networkTimeout=10000
 retries=0
 retryBackOffMs=500