diff --git a/build.gradle b/build.gradle
index 97b99fdc20..0eaf1253f0 100644
--- a/build.gradle
+++ b/build.gradle
@@ -56,13 +56,13 @@ configure(allprojects) { project ->
 	ext.jasperreportsVersion = "6.2.1"  // our tests fail with JR-internal NPEs against 6.2.2 and higher
 	ext.javamailVersion      = "1.5.6"
 	ext.jettyVersion         = "9.3.14.v20161028"  // as of 9.3.15, Jetty has hard Servlet 3.1 requirement
-	ext.jetty94Version       = "9.4.1.v20170120"  // for spring-websocket support, optimized for Jetty 9.4
+	ext.jetty94Version       = "9.4.2.v20170220"  // for spring-websocket support, optimized for Jetty 9.4
 	ext.jodaVersion          = "2.9.7"
-	ext.jrubyVersion         = "1.7.26"  // JRuby 9000 only supported through JSR-223 (StandardScriptFactory)
+	ext.jrubyVersion         = "1.7.26"  // JRuby 9000 primarily supported through JSR-223 (StandardScriptFactory)
 	ext.jtaVersion           = "1.2"
 	ext.junitVersion         = "4.12"
 	ext.log4jVersion         = "1.2.17"
-	ext.nettyVersion         = "4.1.7.Final"
+	ext.nettyVersion         = "4.1.8.Final"
 	ext.okhttpVersion        = "2.7.5"
 	ext.okhttp3Version       = "3.6.0"
 	ext.openjpaVersion       = "2.4.1"
@@ -293,7 +293,7 @@ project("spring-core") {
 	// both into the spring-core jar. cglib 3.2 itself depends on asm 5.x and is therefore
 	// further transformed by the JarJar task to depend on org.springframework.asm; this
 	// avoids including two different copies of asm unnecessarily.
-	def cglibVersion = "3.2.4"
+	def cglibVersion = "3.2.5"
 	def objenesisVersion = "2.5.1"
 
 	configurations {
@@ -874,7 +874,7 @@ project("spring-webmvc") {
 		testCompile("org.hibernate:hibernate-validator:${hibval4Version}")
 		testCompile("org.apache.httpcomponents:httpclient:${httpclientVersion}")
 		testCompile("commons-fileupload:commons-fileupload:${fileuploadVersion}")
-		testCompile("commons-io:commons-io:1.3")
+		testCompile("commons-io:commons-io:1.4")
 		testCompile("joda-time:joda-time:${jodaVersion}")
 		testCompile("org.slf4j:slf4j-jcl:${slf4jVersion}")
 		testCompile("org.mozilla:rhino:1.7.7.1")