From f3c0911beb68e8b16b286a85b7257f1654b0c834 Mon Sep 17 00:00:00 2001
From: Sergey Chernov <sergey.chernov@clickhouse.com>
Date: Fri, 16 Oct 2026 16:54:50 -0700
Subject: [PATCH 1/3] Upgraded compression libs and guava

---
 client-v2/pom.xml                       | 2 +-
 examples/client-v2-apache-arrow/pom.xml | 5 +++++
 examples/demo-spring-service/pom.xml    | 1 +
 performance/pom.xml                     | 2 +-
 pom.xml                                 | 8 ++++----
 5 files changed, 12 insertions(+), 6 deletions(-)

diff --git a/client-v2/pom.xml b/client-v2/pom.xml
index ad1f767cf..c8e24d143 100644
--- a/client-v2/pom.xml
+++ b/client-v2/pom.xml
@@ -61,7 +61,7 @@
         <dependency>
             <groupId>com.github.luben</groupId>
             <artifactId>zstd-jni</artifactId>
-            <version>1.5.7-20</version>
+            <version>${zstd-jni.version}</version>
             <classifier>cloud</classifier>
         </dependency>
 
diff --git a/examples/client-v2-apache-arrow/pom.xml b/examples/client-v2-apache-arrow/pom.xml
index ad20d3dc5..82ee87d34 100644
--- a/examples/client-v2-apache-arrow/pom.xml
+++ b/examples/client-v2-apache-arrow/pom.xml
@@ -69,6 +69,11 @@
 
     <dependencyManagement>
         <dependencies>
+            <dependency>
+                <groupId>com.github.luben</groupId>
+                <artifactId>zstd-jni</artifactId>
+                <version>1.5.7-23</version>
+            </dependency>
             <!-- BOM used to keep versions consistent across all Arrow libraries -->
             <dependency>
                 <groupId>org.apache.arrow</groupId>
diff --git a/examples/demo-spring-service/pom.xml b/examples/demo-spring-service/pom.xml
index 727a7dd65..8e440c2c3 100755
--- a/examples/demo-spring-service/pom.xml
+++ b/examples/demo-spring-service/pom.xml
@@ -19,6 +19,7 @@
 
     <properties>
         <java.version>17</java.version>
+        <micrometer.version>1.17.1</micrometer.version>
         <opentelemetry.version>1.43.0</opentelemetry.version>
         <opentelemetry.javaagent.version>2.30.0</opentelemetry.javaagent.version>
         <opentelemetry.javaagent.traces.exporter>otlp</opentelemetry.javaagent.traces.exporter>
diff --git a/performance/pom.xml b/performance/pom.xml
index f90650ede..a8498de1b 100644
--- a/performance/pom.xml
+++ b/performance/pom.xml
@@ -18,7 +18,7 @@
         <ch.jdbc.revision>0.12.0-rc1-SNAPSHOT</ch.jdbc.revision>
         <jmh.version>1.37</jmh.version>
         <testcontainers.version>2.0.2</testcontainers.version>
-        <zstd-jni.version>1.5.7-6</zstd-jni.version>
+        <zstd-jni.version>1.5.7-23</zstd-jni.version>
         <brotli.version>0.1.2</brotli.version>
         <brotli4j.version>1.12.0</brotli4j.version>
 
diff --git a/pom.xml b/pom.xml
index b70722404..638432074 100644
--- a/pom.xml
+++ b/pom.xml
@@ -92,7 +92,7 @@
         <fastutil.version>8.5.12</fastutil.version>
         <gson.version>2.10.1</gson.version>
         <jctools.version>4.0.1</jctools.version>
-        <micrometer.version>1.14.3</micrometer.version>
+        <micrometer.version>1.17.1</micrometer.version>
         <opencensus.version>0.31.1</opencensus.version>
         <opentelemetry.version>1.51.0</opentelemetry.version>
         <protobuf.version>3.23.4</protobuf.version>
@@ -101,9 +101,9 @@
         <roaring-bitmap.version>1.0.6</roaring-bitmap.version>
         <slf4j.version>2.0.7</slf4j.version>
         <antlr4.version>4.13.2</antlr4.version>
-        <snappy.version>1.1.10.4</snappy.version>
+        <snappy.version>1.1.10.12</snappy.version>
         <xz.version>1.9</xz.version>
-        <zstd-jni.version>1.5.5-5</zstd-jni.version>
+        <zstd-jni.version>1.5.7-23</zstd-jni.version>
         <testcontainers.version>2.0.2</testcontainers.version>
         <testcontainers.toxiproxy.version>1.21.3</testcontainers.toxiproxy.version>
         <!-- stay 7.5 for JDK 8 support -->
@@ -143,7 +143,7 @@
         <versions-plugin.version>2.18.0</versions-plugin.version>
         <resource-plugin.version>3.3.1</resource-plugin.version>
         <jmh.version>1.37</jmh.version>
-        <guava.version>33.4.6-jre</guava.version>
+        <guava.version>33.7.2-jre</guava.version>
         <sonar.publish-pluing.version>0.8.0</sonar.publish-pluing.version>
         <jackson.version>2.22.0</jackson.version>
         <jackson.version.annotations>2.22</jackson.version.annotations>

From f666f3ee1b826373b64d2b33ad874e522132654f Mon Sep 17 00:00:00 2001
From: Sergey Chernov <sergey.chernov@clickhouse.com>
Date: Fri, 16 Oct 2026 16:59:31 -0700
Subject: [PATCH 2/3] upgraded python dependencies in workflow scripts

---
 .github/scripts/requirements.txt | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/.github/scripts/requirements.txt b/.github/scripts/requirements.txt
index c461f0bba..d9ef930fc 100644
--- a/.github/scripts/requirements.txt
+++ b/.github/scripts/requirements.txt
@@ -1,2 +1,4 @@
-jwcrypto==1.6.0
+jwcrypto==1.6.1
+PyJWT==2.15.1
+urllib3==2.8.0
 

From 6979cbdd7706d71b4b6b45aac0161252d0066715 Mon Sep 17 00:00:00 2001
From: Sergey Chernov <sergey.chernov@clickhouse.com>
Date: Mon, 19 Oct 2026 09:55:26 -0700
Subject: [PATCH 3/3] upgraded spring version in spring-demo service example

---
 examples/demo-spring-service/pom.xml | 18 +-----------------
 1 file changed, 1 insertion(+), 17 deletions(-)

diff --git a/examples/demo-spring-service/pom.xml b/examples/demo-spring-service/pom.xml
index 8e440c2c3..56deb6ae4 100755
--- a/examples/demo-spring-service/pom.xml
+++ b/examples/demo-spring-service/pom.xml
@@ -7,7 +7,7 @@
     <parent>
         <groupId>org.springframework.boot</groupId>
         <artifactId>spring-boot-starter-parent</artifactId>
-        <version>3.3.5</version>
+        <version>3.5.16</version>
         <relativePath/>
     </parent>
 
@@ -19,28 +19,12 @@
 
     <properties>
         <java.version>17</java.version>
-        <micrometer.version>1.17.1</micrometer.version>
-        <opentelemetry.version>1.43.0</opentelemetry.version>
         <opentelemetry.javaagent.version>2.30.0</opentelemetry.javaagent.version>
         <opentelemetry.javaagent.traces.exporter>otlp</opentelemetry.javaagent.traces.exporter>
         <opentelemetry.javaagent.traces.endpoint>http://localhost:4318/v1/traces</opentelemetry.javaagent.traces.endpoint>
         <clickhouse-java.version>0.12.0-rc1-SNAPSHOT</clickhouse-java.version>
-        <!-- Spring Boot 3.3 manages 1.19.x, which cannot negotiate with Docker Engine 29. -->
-        <testcontainers.version>1.21.4</testcontainers.version>
     </properties>
 
-    <dependencyManagement>
-        <dependencies>
-            <dependency>
-                <groupId>io.opentelemetry</groupId>
-                <artifactId>opentelemetry-bom</artifactId>
-                <version>${opentelemetry.version}</version>
-                <type>pom</type>
-                <scope>import</scope>
-            </dependency>
-        </dependencies>
-    </dependencyManagement>
-
     <dependencies>
         <!-- Web layer -->
         <dependency>