diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 4668d673..6759c693 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -7,12 +7,12 @@ permissions: read-all
 env:
   LIBBPF_VERSION: v1.5.1
   OPENSSL1_VERSION: 1_1_1w+quic
-  OPENSSL3_VERSION: 3.5.0
-  BORINGSSL_VERSION: 9295969e1dad2c31d0d99481734c1c68dcbc6403
-  AWSLC_VERSION: v1.52.0
-  NGHTTP3_VERSION: v1.10.1
-  NGTCP2_VERSION: v1.13.0
-  WOLFSSL_VERSION: v5.8.0-stable
+  OPENSSL3_VERSION: 3.5.2
+  BORINGSSL_VERSION: 729648fb79df7bc46c145e49b0dfd8d2a24232f1
+  AWSLC_VERSION: v1.58.1
+  NGHTTP3_VERSION: v1.11.0
+  NGTCP2_VERSION: v1.15.0
+  WOLFSSL_VERSION: v5.8.2-stable
 
 jobs:
   build-cache:
diff --git a/README.rst b/README.rst
index 8590c623..13ba80c0 100644
--- a/README.rst
+++ b/README.rst
@@ -126,7 +126,7 @@ following libraries are required:
   <https://github.com/quictls/openssl/tree/OpenSSL_1_1_1w+quic>`_; or
   wolfSSL; or LibreSSL (does not support 0RTT); or aws-lc; or
   `BoringSSL <https://boringssl.googlesource.com/boringssl/>`_ (commit
-  9295969e1dad2c31d0d99481734c1c68dcbc6403); or OpenSSL >= 3.5.0
+  729648fb79df7bc46c145e49b0dfd8d2a24232f1); or OpenSSL >= 3.5.0
 * `ngtcp2 <https://github.com/ngtcp2/ngtcp2>`_ >= 1.12.0
 * `nghttp3 <https://github.com/ngtcp2/nghttp3>`_ >= 1.1.0
 
@@ -340,7 +340,7 @@ Build aws-lc:
 
 .. code-block:: text
 
-   $ git clone --depth 1 -b v1.52.0 https://github.com/aws/aws-lc
+   $ git clone --depth 1 -b v1.58.1 https://github.com/aws/aws-lc
    $ cd aws-lc
    $ cmake -B build -DDISABLE_GO=ON --install-prefix=$PWD/opt
    $ make -j$(nproc) -C build
@@ -351,7 +351,7 @@ Build nghttp3:
 
 .. code-block:: text
 
-   $ git clone --depth 1 -b v1.9.0 https://github.com/ngtcp2/nghttp3
+   $ git clone --depth 1 -b v1.11.0 https://github.com/ngtcp2/nghttp3
    $ cd nghttp3
    $ git submodule update --init --depth 1
    $ autoreconf -i
@@ -364,7 +364,7 @@ Build ngtcp2:
 
 .. code-block:: text
 
-   $ git clone --depth 1 -b v1.12.0 https://github.com/ngtcp2/ngtcp2
+   $ git clone --depth 1 -b v1.15.0 https://github.com/ngtcp2/ngtcp2
    $ cd ngtcp2
    $ git submodule update --init --depth 1
    $ autoreconf -i
diff --git a/docker/Dockerfile b/docker/Dockerfile
index d12de101..7c6ae363 100644
--- a/docker/Dockerfile
+++ b/docker/Dockerfile
@@ -9,7 +9,7 @@ RUN apt-get update && \
         zlib1g-dev libev-dev libjemalloc-dev ruby-dev libc-ares-dev bison \
         libelf-dev libbrotli-dev
 
-RUN git clone --recursive --shallow-submodules --depth 1 -b v1.52.0 https://github.com/aws/aws-lc && \
+RUN git clone --recursive --shallow-submodules --depth 1 -b v1.58.1 https://github.com/aws/aws-lc && \
     cd aws-lc && \
     export CC=clang-19 CXX=clang++-19 && \
     cmake -B build -DDISABLE_GO=ON && \
@@ -18,7 +18,7 @@ RUN git clone --recursive --shallow-submodules --depth 1 -b v1.52.0 https://gith
     cd .. && \
     rm -rf aws-lc
 
-RUN git clone --recursive --shallow-submodules --depth 1 -b v1.10.1 https://github.com/ngtcp2/nghttp3 && \
+RUN git clone --recursive --shallow-submodules --depth 1 -b v1.11.0 https://github.com/ngtcp2/nghttp3 && \
     cd nghttp3 && \
     autoreconf -i && \
     ./configure --disable-dependency-tracking --enable-lib-only \
@@ -28,7 +28,7 @@ RUN git clone --recursive --shallow-submodules --depth 1 -b v1.10.1 https://gith
     cd .. && \
     rm -rf nghttp3
 
-RUN git clone --recursive --shallow-submodules --depth 1 -b v1.13.0 https://github.com/ngtcp2/ngtcp2 && \
+RUN git clone --recursive --shallow-submodules --depth 1 -b v1.15.0 https://github.com/ngtcp2/ngtcp2 && \
     cd ngtcp2 && \
     autoreconf -i && \
     ./configure --disable-dependency-tracking --enable-lib-only \