diff --git a/.bazelversion b/.bazelversion
index e7fdef7e2..f7ee06693 100644
--- a/.bazelversion
+++ b/.bazelversion
@@ -1 +1 @@
-8.4.2
+9.0.0
diff --git a/.github/workflows/check-formatting.yml b/.github/workflows/check-formatting.yml
index 4d95cfeb5..5530faf0b 100644
--- a/.github/workflows/check-formatting.yml
+++ b/.github/workflows/check-formatting.yml
@@ -10,7 +10,7 @@ on:
 
 jobs:
   check_formatting:
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
 
     steps:
       - uses: actions/checkout@v6
diff --git a/.github/workflows/prerelease.yaml b/.github/workflows/prerelease.yaml
index f621c0db9..2a01441f6 100644
--- a/.github/workflows/prerelease.yaml
+++ b/.github/workflows/prerelease.yaml
@@ -54,28 +54,28 @@ jobs:
           cp -L $(bazel cquery --output=files :jazzer_release) jazzer-${{ matrix.name }}.tar.gz
 
       - name: Upload jazzer.jar
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
           name: jazzer_tmp_${{ matrix.name }}
           path: jazzer-${{ matrix.name }}.jar
           if-no-files-found: error
 
       - name: Upload release archive
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
           name: jazzer_releases_${{ matrix.name }}
           path: jazzer-${{ matrix.name }}.tar.gz
           if-no-files-found: error
 
   merge_jars:
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     needs: build_release
 
     steps:
       - uses: actions/checkout@v6
 
       - name: Download individual jars
-        uses: actions/download-artifact@v7
+        uses: actions/download-artifact@v8
         with:
           pattern: jazzer_tmp_*
           merge-multiple: true
@@ -88,14 +88,14 @@ jobs:
             $(find "$(pwd)/_tmp/" -name '*.jar' -printf "--sources %h/%f ")
 
       - name: Upload merged jar
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
           name: jazzer
           path: _tmp/jazzer.jar
           if-no-files-found: error
 
   maven_deploy:
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     needs: merge_jars
 
     environment:
@@ -119,7 +119,7 @@ jobs:
           echo "build --//deploy:jazzer_version=${TAG#v}" >> .bazelrc
 
       - name: Download merged jar
-        uses: actions/download-artifact@v7
+        uses: actions/download-artifact@v8
         with:
           name: jazzer
           path: _tmp/
@@ -135,7 +135,7 @@ jobs:
 
       # In case something goes wrong, we can still reupload the bundle manually
       - name: Upload Jazzer Bundle to Github Artifacts
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
           name: jazzer-maven-central-bundle
           path: _tmp/jazzer-maven-central-bundle.tar.gz
@@ -166,7 +166,7 @@ jobs:
         uses: actions/checkout@v6
 
       - name: Download individual tar.gzs
-        uses: actions/download-artifact@v7
+        uses: actions/download-artifact@v8
         with:
           pattern: jazzer_releases_*
           merge-multiple: true
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 07280e2c7..82ab3adcf 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -9,7 +9,7 @@ on:
 jobs:
 
   generate_docs:
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
 
     steps:
       - name: checkout
@@ -23,7 +23,7 @@ jobs:
           cp $(bazel cquery --output=files //deploy:jazzer-junit-docs) ./jazzer-junit-docs.jar
 
       - name: Upload jars
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
           name: jazzer_docs_jars
           path: |
@@ -33,7 +33,7 @@ jobs:
           if-no-files-found: error
 
   update_docs:
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     needs: generate_docs
 
     environment:
@@ -47,7 +47,7 @@ jobs:
           ssh-key: "${{ secrets.JAZZER_DOCS_SSH_KEY_PRIVATE }}"
 
       - name: Download jar
-        uses: actions/download-artifact@v7
+        uses: actions/download-artifact@v8
         with:
           name: jazzer_docs_jars
           path: .
diff --git a/.github/workflows/run-all-tests-pr.yml b/.github/workflows/run-all-tests-pr.yml
index 6720bf5c7..1b415fdf6 100644
--- a/.github/workflows/run-all-tests-pr.yml
+++ b/.github/workflows/run-all-tests-pr.yml
@@ -74,7 +74,7 @@ jobs:
 
       - name: Upload test logs
         if: always()
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
           name: testlogs-${{ matrix.arch }}-${{ matrix.jdk }}
           # https://github.com/actions/upload-artifact/issues/92#issuecomment-711107236
diff --git a/MODULE.bazel b/MODULE.bazel
index a759ec2c1..91d8e996c 100644
--- a/MODULE.bazel
+++ b/MODULE.bazel
@@ -6,28 +6,28 @@ module(name = "jazzer")
 # Kept up-to-date by Renovate
 ################################################################################
 
-bazel_dep(name = "abseil-cpp", version = "20250814.1")
-bazel_dep(name = "apple_support", version = "2.2.0")
-bazel_dep(name = "bazel_jar_jar", version = "0.1.11")
+bazel_dep(name = "abseil-cpp", version = "20250814.2")
+bazel_dep(name = "apple_support", version = "2.3.0")
+bazel_dep(name = "bazel_jar_jar", version = "0.1.15")
 bazel_dep(name = "bazel_skylib", version = "1.9.0")
 bazel_dep(name = "buildifier_prebuilt", version = "8.2.1.2")
 
 # TODO: Starting with version 0.28.0 the JUnit test runner is compiled for Java 11 which breaks our JDK 8 tests.
 #       https://github.com/bazel-contrib/rules_jvm/pull/307
-bazel_dep(name = "contrib_rules_jvm", version = "0.27.0")
+bazel_dep(name = "contrib_rules_jvm", version = "0.32.0")
 bazel_dep(name = "googletest", version = "1.17.0.bcr.2")
 bazel_dep(name = "platforms", version = "1.0.0")
 bazel_dep(name = "protobuf", version = "33.5")
 bazel_dep(name = "rules_android", version = "0.7.1")
 bazel_dep(name = "rules_android_ndk", version = "0.1.3")
 bazel_dep(name = "rules_foreign_cc", version = "0.15.1")
-bazel_dep(name = "rules_java", version = "9.4.0")
+bazel_dep(name = "rules_java", version = "9.6.1")
 bazel_dep(name = "rules_jni", version = "0.11.1")
 bazel_dep(name = "rules_jvm_external", version = "6.10")
-bazel_dep(name = "rules_kotlin", version = "2.2.2")
+bazel_dep(name = "rules_kotlin", version = "2.3.0")
 bazel_dep(name = "rules_license", version = "1.0.0")
 bazel_dep(name = "rules_pkg", version = "1.2.0")
-bazel_dep(name = "rules_cc", version = "0.2.16")
+bazel_dep(name = "rules_cc", version = "0.2.17")
 bazel_dep(name = "toolchains_llvm", version = "1.6.0")
 
 ################################################################################
diff --git a/selffuzz/pom.xml b/selffuzz/pom.xml
index 9d51893e4..d7f7e384e 100644
--- a/selffuzz/pom.xml
+++ b/selffuzz/pom.xml
@@ -58,31 +58,31 @@
     <dependency>
       <groupId>org.junit.jupiter</groupId>
       <artifactId>junit-jupiter-engine</artifactId>
-      <version>5.10.2</version>
+      <version>6.0.3</version>
       <scope>test</scope>
     </dependency>
     <dependency>
       <groupId>org.junit.jupiter</groupId>
       <artifactId>junit-jupiter-api</artifactId>
-      <version>5.10.2</version>
+      <version>6.0.3</version>
       <scope>test</scope>
     </dependency>
     <dependency>
       <groupId>org.junit.jupiter</groupId>
       <artifactId>junit-jupiter-params</artifactId>
-      <version>5.10.2</version>
+      <version>6.0.3</version>
       <scope>test</scope>
     </dependency>
     <dependency>
       <groupId>org.junit.platform</groupId>
       <artifactId>junit-platform-commons</artifactId>
-      <version>1.10.2</version>
+      <version>6.0.3</version>
       <scope>test</scope>
     </dependency>
     <dependency>
       <groupId>org.junit.platform</groupId>
       <artifactId>junit-platform-launcher</artifactId>
-      <version>1.10.2</version>
+      <version>6.0.3</version>
       <scope>test</scope>
     </dependency>
     <dependency>
@@ -131,7 +131,7 @@
     <dependency>
       <groupId>com.google.truth</groupId>
       <artifactId>truth</artifactId>
-      <version>1.4.0</version>
+      <version>1.4.5</version>
       <scope>test</scope>
     </dependency>
     <!-- https://mvnrepository.com/artifact/com.google.protobuf/protobuf-java
@@ -140,7 +140,7 @@
     <dependency>
       <groupId>com.google.protobuf</groupId>
       <artifactId>protobuf-java</artifactId>
-      <version>3.25.5</version>
+      <version>4.34.0</version>
     </dependency>
   </dependencies>
 
@@ -149,14 +149,14 @@
       <extension>
         <groupId>com.code-intelligence</groupId>
         <artifactId>cifuzz-maven-extension</artifactId>
-        <version>1.7.0</version>
+        <version>1.15.0</version>
       </extension>
     </extensions>
     <plugins>
       <plugin>
         <groupId>org.jacoco</groupId>
         <artifactId>jacoco-maven-plugin</artifactId>
-        <version>0.8.11</version>
+        <version>0.8.14</version>
         <executions>
           <execution>
             <goals>