diff --git a/bpmn/package-lock.json b/bpmn/package-lock.json
index b2ad5a10e..dc6af7d25 100644
--- a/bpmn/package-lock.json
+++ b/bpmn/package-lock.json
@@ -9,7 +9,7 @@
       "version": "1.0.0",
       "license": "MIT",
       "dependencies": {
-        "bpmn-js": "18.0.0",
+        "bpmn-js": "18.1.1",
         "micro": "10.0.1",
         "pino": "9.5.0",
         "pino-debug": "^2.0.0",
@@ -613,12 +613,12 @@
       }
     },
     "node_modules/bpmn-js": {
-      "version": "18.0.0",
-      "resolved": "https://registry.npmjs.org/bpmn-js/-/bpmn-js-18.0.0.tgz",
-      "integrity": "sha512-eZR4hqk2BT0m9jAGGtp/f1TD0m7LXXKfYle99q75d+NjSmxetIuvxGn48S9W+H8arJ7vgsls2GELzXoDuEE0eg==",
+      "version": "18.1.1",
+      "resolved": "https://registry.npmjs.org/bpmn-js/-/bpmn-js-18.1.1.tgz",
+      "integrity": "sha512-7LN+f7y1u4FtbI/6lI3Elf2phEBa0RVr0YJZrSG46RyiHU9wY5NR2n9OIqKeuGJq1RJ/YMowMoUNDIBdmb9zbg==",
       "dependencies": {
         "bpmn-moddle": "^9.0.1",
-        "diagram-js": "^15.1.0",
+        "diagram-js": "^15.2.3",
         "diagram-js-direct-editing": "^3.2.0",
         "ids": "^1.0.5",
         "inherits-browser": "^0.1.0",
@@ -1023,9 +1023,9 @@
       "license": "BSD-3-Clause"
     },
     "node_modules/diagram-js": {
-      "version": "15.1.0",
-      "resolved": "https://registry.npmjs.org/diagram-js/-/diagram-js-15.1.0.tgz",
-      "integrity": "sha512-Lrixuc4as/PGrkhf23k8yss+rLhyH2Zrln/CJxex0nOfC2P0ODb5lsDY0+MdDgjP2ADFFINqUXAGFcSSL8tw4g==",
+      "version": "15.2.3",
+      "resolved": "https://registry.npmjs.org/diagram-js/-/diagram-js-15.2.3.tgz",
+      "integrity": "sha512-C7MM5D7D0x6F5KsPzGmIPL/O9VoglTFSGrDnQNiFIA0SldC6WCwx/0nG9nS4Pwjtf7QeccaozF7FD1NAMHFs5Q==",
       "dependencies": {
         "@bpmn-io/diagram-js-ui": "^0.2.3",
         "clsx": "^2.1.0",
diff --git a/bpmn/package.json b/bpmn/package.json
index 621b9fec8..ee0543560 100644
--- a/bpmn/package.json
+++ b/bpmn/package.json
@@ -19,7 +19,7 @@
     "url": "https://github.com/yuzutech/kroki.git"
   },
   "dependencies": {
-    "bpmn-js": "18.0.0",
+    "bpmn-js": "18.1.1",
     "micro": "10.0.1",
     "pino": "9.5.0",
     "pino-debug": "^2.0.0",
diff --git a/mermaid/package-lock.json b/mermaid/package-lock.json
index 8bde96e1b..401d02253 100644
--- a/mermaid/package-lock.json
+++ b/mermaid/package-lock.json
@@ -19,7 +19,7 @@
         "mermaid-server": "src/index.js"
       },
       "devDependencies": {
-        "mermaid": "11.4.0",
+        "mermaid": "11.4.1",
         "pngjs": "7.0.0",
         "standard": "17.1.2"
       }
@@ -763,15 +763,6 @@
         "@types/d3-selection": "*"
       }
     },
-    "node_modules/@types/dompurify": {
-      "version": "3.0.5",
-      "resolved": "https://registry.npmjs.org/@types/dompurify/-/dompurify-3.0.5.tgz",
-      "integrity": "sha512-1Wg0g3BtQF7sSb27fJQAKck1HECM6zV1EB66j8JH9i3LCjYabJa0FSdiSgsD5K/RbrsR0SiraKacLB+T8ZVYAg==",
-      "dev": true,
-      "dependencies": {
-        "@types/trusted-types": "*"
-      }
-    },
     "node_modules/@types/geojson": {
       "version": "7946.0.14",
       "resolved": "https://registry.npmjs.org/@types/geojson/-/geojson-7946.0.14.tgz",
@@ -798,7 +789,8 @@
       "version": "2.0.7",
       "resolved": "https://registry.npmjs.org/@types/trusted-types/-/trusted-types-2.0.7.tgz",
       "integrity": "sha512-ScaPdn1dQczgbl0QFTeTOmVHFULt394XJgOQNoyVhZ6r2vLnMLJfBPd53SB52T/3G36VI1/g2MZaX0cwDuXsfw==",
-      "dev": true
+      "dev": true,
+      "optional": true
     },
     "node_modules/@types/yauzl": {
       "version": "2.10.3",
@@ -2124,11 +2116,13 @@
       }
     },
     "node_modules/dompurify": {
-      "version": "3.1.6",
-      "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.1.6.tgz",
-      "integrity": "sha512-cTOAhc36AalkjtBpfG6O8JimdTMWNXjiePT2xQH/ppBGi/4uIpmj8eKyIkMJErXWARyINV/sB38yf8JCLF5pbQ==",
+      "version": "3.2.3",
+      "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.2.3.tgz",
+      "integrity": "sha512-U1U5Hzc2MO0oW3DF+G9qYN0aT7atAou4AgI0XjWz061nyBPbdxkfdhfy5uMgGn6+oLFCfn44ZGbdDqCzVmlOWA==",
       "dev": true,
-      "license": "(MPL-2.0 OR Apache-2.0)"
+      "optionalDependencies": {
+        "@types/trusted-types": "^2.0.7"
+      }
     },
     "node_modules/emoji-regex": {
       "version": "8.0.0",
@@ -4336,16 +4330,15 @@
       }
     },
     "node_modules/mermaid": {
-      "version": "11.4.0",
-      "resolved": "https://registry.npmjs.org/mermaid/-/mermaid-11.4.0.tgz",
-      "integrity": "sha512-mxCfEYvADJqOiHfGpJXLs4/fAjHz448rH0pfY5fAoxiz70rQiDSzUUy4dNET2T08i46IVpjohPd6WWbzmRHiPA==",
+      "version": "11.4.1",
+      "resolved": "https://registry.npmjs.org/mermaid/-/mermaid-11.4.1.tgz",
+      "integrity": "sha512-Mb01JT/x6CKDWaxigwfZYuYmDZ6xtrNwNlidKZwkSrDaY9n90tdrJTV5Umk+wP1fZscGptmKFXHsXMDEVZ+Q6A==",
       "dev": true,
       "dependencies": {
         "@braintree/sanitize-url": "^7.0.1",
         "@iconify/utils": "^2.1.32",
         "@mermaid-js/parser": "^0.3.0",
         "@types/d3": "^7.4.3",
-        "@types/dompurify": "^3.0.5",
         "cytoscape": "^3.29.2",
         "cytoscape-cose-bilkent": "^4.1.0",
         "cytoscape-fcose": "^2.2.0",
@@ -4353,7 +4346,7 @@
         "d3-sankey": "^0.12.3",
         "dagre-d3-es": "7.0.11",
         "dayjs": "^1.11.10",
-        "dompurify": "^3.0.11 <3.1.7",
+        "dompurify": "^3.2.1",
         "katex": "^0.16.9",
         "khroma": "^2.1.0",
         "lodash-es": "^4.17.21",
diff --git a/mermaid/package.json b/mermaid/package.json
index 79f4ef334..907a8111f 100644
--- a/mermaid/package.json
+++ b/mermaid/package.json
@@ -26,7 +26,7 @@
     "puppeteer": "23.6.0"
   },
   "devDependencies": {
-    "mermaid": "11.4.0",
+    "mermaid": "11.4.1",
     "pngjs": "7.0.0",
     "standard": "17.1.2"
   },
diff --git a/nomnoml/package-lock.json b/nomnoml/package-lock.json
index 01da93bea..80af980f3 100644
--- a/nomnoml/package-lock.json
+++ b/nomnoml/package-lock.json
@@ -9,7 +9,7 @@
       "version": "1.0.0",
       "license": "MIT",
       "dependencies": {
-        "nomnoml": "1.6.2"
+        "nomnoml": "1.6.3"
       },
       "bin": {
         "nomnoml": "index.js"
@@ -2247,12 +2247,11 @@
       "dev": true
     },
     "node_modules/nomnoml": {
-      "version": "1.6.2",
-      "resolved": "https://registry.npmjs.org/nomnoml/-/nomnoml-1.6.2.tgz",
-      "integrity": "sha512-R3dA3FS8txilobpd2ZdnCuEwmXYYljxza2wR41YE/cIHMbt0eXsjlXHlAsD+F/fVe536f0WkAQ+VQFRC3hPZCA==",
+      "version": "1.6.3",
+      "resolved": "https://registry.npmjs.org/nomnoml/-/nomnoml-1.6.3.tgz",
+      "integrity": "sha512-JlczG/QSMWxWqd0VhWBu6dpPpFhaTYFGcrwJ+akG/o+nXtQfwfS5g6QBRqqKwml70Mo+cWTu+qVvTNfviqmZwg==",
       "dependencies": {
-        "graphre": "^0.1.3",
-        "nomnoml": "^1.5.3"
+        "graphre": "^0.1.3"
       },
       "bin": {
         "nomnoml": "dist/nomnoml-cli.js"
diff --git a/nomnoml/package.json b/nomnoml/package.json
index ea94d6cf0..d078ce224 100644
--- a/nomnoml/package.json
+++ b/nomnoml/package.json
@@ -15,7 +15,7 @@
   "keywords": [],
   "author": "Guillaume Grossetie",
   "dependencies": {
-    "nomnoml": "1.6.2"
+    "nomnoml": "1.6.3"
   },
   "devDependencies": {
     "standard": "17.1.2"
diff --git a/vega/package-lock.json b/vega/package-lock.json
index eef15525b..ab7298b44 100644
--- a/vega/package-lock.json
+++ b/vega/package-lock.json
@@ -11,7 +11,7 @@
       "dependencies": {
         "canvas": "^3.0.0-rc2",
         "vega": "5.30.0",
-        "vega-lite": "5.21.0",
+        "vega-lite": "5.23.0",
         "yargs": "17.7.2"
       },
       "bin": {
@@ -2711,9 +2711,9 @@
       "dev": true
     },
     "node_modules/json-stringify-pretty-compact": {
-      "version": "3.0.0",
-      "resolved": "https://registry.npmjs.org/json-stringify-pretty-compact/-/json-stringify-pretty-compact-3.0.0.tgz",
-      "integrity": "sha512-Rc2suX5meI0S3bfdZuA7JMFBGkJ875ApfVyq2WHELjBiiG22My/l7/8zPpH/CfFVQHuVLd8NLR0nv6vi0BYYKA=="
+      "version": "4.0.0",
+      "resolved": "https://registry.npmjs.org/json-stringify-pretty-compact/-/json-stringify-pretty-compact-4.0.0.tgz",
+      "integrity": "sha512-3CNZ2DnrpByG9Nqj6Xo8vqbjT4F6N+tb4Gb28ESAZjYZ5yqvmc56J+/kuIwkaAMOyblTQhUW7PxMkUb8Q36N3Q=="
     },
     "node_modules/json5": {
       "version": "1.0.2",
@@ -4081,10 +4081,9 @@
       }
     },
     "node_modules/tslib": {
-      "version": "2.6.3",
-      "resolved": "https://registry.npmjs.org/tslib/-/tslib-2.6.3.tgz",
-      "integrity": "sha512-xNvxJEOUiWPGhUuUdQgAJPKOOJfGnIyKySOc09XkKsgdUV/3E2zvwZYdejjmRgPCgcym1juLH3226yA7sEFJKQ==",
-      "license": "0BSD"
+      "version": "2.8.1",
+      "resolved": "https://registry.npmjs.org/tslib/-/tslib-2.8.1.tgz",
+      "integrity": "sha512-oJFu94HQb+KVduSUQL7wnpmqnfmLsOA/nAh6b6EH0wCEoK0/mPeXU6c3wKDV83MkOuHPRHtSXKKU99IBazS/2w=="
     },
     "node_modules/tunnel-agent": {
       "version": "0.6.0",
@@ -4413,13 +4412,12 @@
       }
     },
     "node_modules/vega-lite": {
-      "version": "5.21.0",
-      "resolved": "https://registry.npmjs.org/vega-lite/-/vega-lite-5.21.0.tgz",
-      "integrity": "sha512-hNxM9nuMqpI1vkUOhEx6ewEf23WWLmJxSFJ4TA86AW43ixJyqcLV+iSCO0NipuVTE0rlDcc2e8joSewWyOlEwA==",
-      "license": "BSD-3-Clause",
+      "version": "5.23.0",
+      "resolved": "https://registry.npmjs.org/vega-lite/-/vega-lite-5.23.0.tgz",
+      "integrity": "sha512-l4J6+AWE3DIjvovEoHl2LdtCUkfm4zs8Xxx7INwZEAv+XVb6kR6vIN1gt3t2gN2gs/y4DYTs/RPoTeYAuEg6mA==",
       "dependencies": {
-        "json-stringify-pretty-compact": "~3.0.0",
-        "tslib": "~2.6.3",
+        "json-stringify-pretty-compact": "~4.0.0",
+        "tslib": "~2.8.1",
         "vega-event-selector": "~3.0.1",
         "vega-expression": "~5.1.1",
         "vega-util": "~1.17.2",
diff --git a/vega/package.json b/vega/package.json
index a38c94d30..d36fb53fc 100644
--- a/vega/package.json
+++ b/vega/package.json
@@ -17,7 +17,7 @@
   "dependencies": {
     "canvas": "^3.0.0-rc2",
     "vega": "5.30.0",
-    "vega-lite": "5.21.0",
+    "vega-lite": "5.23.0",
     "yargs": "17.7.2"
   },
   "devDependencies": {