diff --git a/.config/dotnet-tools.json b/.config/dotnet-tools.json
index 807729e4..cce89d81 100644
--- a/.config/dotnet-tools.json
+++ b/.config/dotnet-tools.json
@@ -3,7 +3,7 @@
   "isRoot": true,
   "tools": {
     "dotnet-ef": {
-      "version": "10.0.9",
+      "version": "10.0.10",
       "commands": [
         "dotnet-ef"
       ],
diff --git a/MusicHoarder.Api.Tests/MusicHoarder.Api.Tests.csproj b/MusicHoarder.Api.Tests/MusicHoarder.Api.Tests.csproj
index 0f7804a5..6fc5637b 100644
--- a/MusicHoarder.Api.Tests/MusicHoarder.Api.Tests.csproj
+++ b/MusicHoarder.Api.Tests/MusicHoarder.Api.Tests.csproj
@@ -12,8 +12,8 @@
       <PrivateAssets>all</PrivateAssets>
       <IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
     </PackageReference>
-    <PackageReference Include="Microsoft.EntityFrameworkCore.InMemory" Version="10.0.9" />
-    <PackageReference Include="Microsoft.NET.Test.Sdk" Version="18.7.0" />
+    <PackageReference Include="Microsoft.EntityFrameworkCore.InMemory" Version="10.0.10" />
+    <PackageReference Include="Microsoft.NET.Test.Sdk" Version="18.8.1" />
     <PackageReference Include="xunit" Version="2.9.3" />
     <PackageReference Include="xunit.runner.visualstudio" Version="3.1.5">
       <PrivateAssets>all</PrivateAssets>
diff --git a/MusicHoarder.Api/MusicHoarder.Api.csproj b/MusicHoarder.Api/MusicHoarder.Api.csproj
index e8203976..e475a2f8 100644
--- a/MusicHoarder.Api/MusicHoarder.Api.csproj
+++ b/MusicHoarder.Api/MusicHoarder.Api.csproj
@@ -33,27 +33,27 @@
         <PackageReference Include="Aspire.Npgsql.EntityFrameworkCore.PostgreSQL" Version="13.4.6" />
         <PackageReference Include="Fido2.AspNet" Version="4.0.1" />
         <PackageReference Include="FuzzySharp" Version="2.0.2" />
-        <PackageReference Include="Microsoft.AspNetCore.OpenApi" Version="10.0.9" />
+        <PackageReference Include="Microsoft.AspNetCore.OpenApi" Version="10.0.10" />
         <!-- Pinned directly (design-time only) to override a bad transitive resolution to
              EFCore.Design 8.0.0, which is ABI-incompatible with EFCore 10.x and breaks `dotnet ef`. -->
-        <PackageReference Include="Microsoft.EntityFrameworkCore.Design" Version="10.0.9">
+        <PackageReference Include="Microsoft.EntityFrameworkCore.Design" Version="10.0.10">
             <PrivateAssets>all</PrivateAssets>
             <IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
         </PackageReference>
-        <PackageReference Include="Microsoft.EntityFrameworkCore.Tools" Version="10.0.9">
+        <PackageReference Include="Microsoft.EntityFrameworkCore.Tools" Version="10.0.10">
             <PrivateAssets>all</PrivateAssets>
             <IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
         </PackageReference>
-        <PackageReference Include="Microsoft.OpenApi" Version="2.9.0" />
-        <PackageReference Include="Scalar.AspNetCore" Version="2.16.10" />
-        <PackageReference Include="SkiaSharp" Version="4.148.0" />
+        <PackageReference Include="Microsoft.OpenApi" Version="2.11.0" />
+        <PackageReference Include="Scalar.AspNetCore" Version="2.16.15" />
+        <PackageReference Include="SkiaSharp" Version="4.150.1" />
         <!-- Headless image decode/resize/encode only (no text rendering), so the NoDependencies
              native asset avoids needing libfontconfig in the Linux container. The base SkiaSharp
              package already carries the macOS/Windows natives for local dev. Managed SkiaSharp and
              the native asset must move together — a mismatch fails the native-lib version check. -->
-        <PackageReference Include="SkiaSharp.NativeAssets.Linux.NoDependencies" Version="4.148.0" />
-        <PackageReference Include="System.IO.Abstractions" Version="22.1.1" />
-        <PackageReference Include="System.IO.Abstractions.TestingHelpers" Version="22.1.1" />
+        <PackageReference Include="SkiaSharp.NativeAssets.Linux.NoDependencies" Version="4.150.1" />
+        <PackageReference Include="System.IO.Abstractions" Version="22.2.0" />
+        <PackageReference Include="System.IO.Abstractions.TestingHelpers" Version="22.2.0" />
         <PackageReference Include="TagLibSharp" Version="2.3.0" />
     </ItemGroup>
 
diff --git a/MusicHoarder.ServiceDefaults/MusicHoarder.ServiceDefaults.csproj b/MusicHoarder.ServiceDefaults/MusicHoarder.ServiceDefaults.csproj
index ba49b1dd..3661787d 100644
--- a/MusicHoarder.ServiceDefaults/MusicHoarder.ServiceDefaults.csproj
+++ b/MusicHoarder.ServiceDefaults/MusicHoarder.ServiceDefaults.csproj
@@ -10,13 +10,13 @@
     <ItemGroup>
         <FrameworkReference Include="Microsoft.AspNetCore.App"/>
 
-        <PackageReference Include="Microsoft.Extensions.Http.Resilience" Version="10.7.0" />
-        <PackageReference Include="Microsoft.Extensions.ServiceDiscovery" Version="10.7.0" />
-        <PackageReference Include="OpenTelemetry.Exporter.OpenTelemetryProtocol" Version="1.16.0" />
-        <PackageReference Include="OpenTelemetry.Extensions.Hosting" Version="1.16.0" />
+        <PackageReference Include="Microsoft.Extensions.Http.Resilience" Version="10.8.0" />
+        <PackageReference Include="Microsoft.Extensions.ServiceDiscovery" Version="10.8.0" />
+        <PackageReference Include="OpenTelemetry.Exporter.OpenTelemetryProtocol" Version="1.17.0" />
+        <PackageReference Include="OpenTelemetry.Extensions.Hosting" Version="1.17.0" />
         <PackageReference Include="OpenTelemetry.Instrumentation.AspNetCore" Version="1.16.0" />
         <PackageReference Include="OpenTelemetry.Instrumentation.Http" Version="1.16.0" />
-        <PackageReference Include="OpenTelemetry.Instrumentation.Runtime" Version="1.15.1" />
+        <PackageReference Include="OpenTelemetry.Instrumentation.Runtime" Version="1.16.0" />
     </ItemGroup>
 
 </Project>