diff --git a/framework/framework/package.json b/framework/framework/package.json
index 36e8f0837..d81c4d7a9 100644
--- a/framework/framework/package.json
+++ b/framework/framework/package.json
@@ -9,12 +9,12 @@
     },
     "dependencies": {
         "@hydrooj/utils": "workspace:^",
+        "@koa/router": "^14.0.0",
         "emoji-regex": "^10.4.0",
         "fs-extra": "^11.3.1",
         "koa": "^3.0.1",
         "koa-body": "^6.0.1",
         "koa-compress": "^5.1.1",
-        "koa-router": "^13.1.1",
         "path-to-regexp": "^8.2.0",
         "sanitize-filename": "^1.6.3",
         "saslprep": "^1.0.3",
@@ -26,7 +26,7 @@
         "@types/fs-extra": "^11.0.4",
         "@types/koa": "^2.15.0",
         "@types/koa-compress": "^4.0.6",
-        "@types/koa-router": "^7.4.8",
+        "@types/koa__router": "^12.0.4",
         "@types/saslprep": "^1.0.3",
         "@types/ws": "^8.18.1"
     }
diff --git a/framework/framework/router.ts b/framework/framework/router.ts
index 0b60ce6bb..7dbad993c 100644
--- a/framework/framework/router.ts
+++ b/framework/framework/router.ts
@@ -1,5 +1,5 @@
 import { IncomingMessage } from 'http';
-import KoaRouter from 'koa-router';
+import KoaRouter from '@koa/router';
 import { Keys, pathToRegexp } from 'path-to-regexp';
 import type WebSocket from 'ws';
 import type { KoaContext } from './server';
diff --git a/package.json b/package.json
index 2d885a249..c0c2fcdbf 100644
--- a/package.json
+++ b/package.json
@@ -40,10 +40,10 @@
         "autocannon": "^8.0.0",
         "cac": "^6.7.14",
         "chai": "^5.2.1",
-        "cross-env": "^7.0.3",
+        "cross-env": "^10.0.0",
         "cross-spawn": "^7.0.6",
         "esbuild": "0.25.2",
-        "eslint": "^9.32.0",
+        "eslint": "^9.33.0",
         "eslint-import-resolver-typescript": "^4.4.4",
         "eslint-import-resolver-webpack": "^0.13.10",
         "fs-extra": "^11.3.1",
@@ -53,7 +53,7 @@
         "mongodb-memory-server": "10.1.4",
         "nyc": "^17.1.0",
         "ora": "^8.2.0",
-        "oxlint": "^1.10.0",
+        "oxlint": "^1.11.1",
         "package-json": "^10.0.1",
         "semver": "^7.7.2",
         "simple-git": "^3.28.0",
diff --git a/packages/elastic/package.json b/packages/elastic/package.json
index 390ce60ab..21e86ef97 100644
--- a/packages/elastic/package.json
+++ b/packages/elastic/package.json
@@ -6,7 +6,7 @@
     "author": "undefined <i@undefined.moe>",
     "license": "AGPL-3.0-or-later",
     "dependencies": {
-        "@elastic/elasticsearch": "^9.1.0"
+        "@elastic/elasticsearch": "^9.1.1"
     },
     "engines": {
         "hydrooj": ">=5.0.0-alpha.1"
diff --git a/packages/geoip/package.json b/packages/geoip/package.json
index 2a21610b8..190dd2162 100644
--- a/packages/geoip/package.json
+++ b/packages/geoip/package.json
@@ -6,7 +6,7 @@
     "author": "undefined <i@undefined.moe>",
     "license": "AGPL-3.0-or-later",
     "dependencies": {
-        "maxmind": "^4.3.29"
+        "maxmind": "^5.0.0"
     },
     "preferUnplugged": true
 }
diff --git a/packages/ui-default/package.json b/packages/ui-default/package.json
index c96e378c2..4a3489f01 100644
--- a/packages/ui-default/package.json
+++ b/packages/ui-default/package.json
@@ -21,7 +21,7 @@
     "@fontsource/source-code-pro": "^5.2.6",
     "@fontsource/ubuntu-mono": "^5.2.6",
     "@hydrooj/utils": "workspace:^",
-    "@sentry/browser": "^10.2.0",
+    "@sentry/browser": "^10.3.0",
     "@sentry/webpack-plugin": "^4.0.2",
     "@simplewebauthn/browser": "13.1.2",
     "@svgr/webpack": "^8.1.0",
@@ -55,7 +55,7 @@
     "css-loader": "^7.1.2",
     "diff": "^8.0.2",
     "diff-dom": "^5.2.0",
-    "echarts": "^5.6.0",
+    "echarts": "^6.0.0",
     "emojis-keywords": "2.0.0",
     "emojis-list": "2.1.0",
     "esbuild-loader": "^4.3.0",
@@ -107,7 +107,7 @@
     "style-loader": "^4.0.0",
     "stylus": "^0.64.0",
     "stylus-loader": "7.1.2",
-    "svgtofont": "^6.3.2",
+    "svgtofont": "^6.4.0",
     "tether": "1.4.7",
     "tether-drop": "^1.4.2",
     "timeago-react": "^3.0.7",
diff --git a/packages/ui-next/package.json b/packages/ui-next/package.json
index 4439006a1..9e16c60e0 100644
--- a/packages/ui-next/package.json
+++ b/packages/ui-next/package.json
@@ -8,14 +8,14 @@
     "preview": "vite preview"
   },
   "dependencies": {
-    "@vitejs/plugin-react": "^4.7.0",
+    "@vitejs/plugin-react": "^5.0.0",
     "react": "^18.3.1",
     "react-dom": "^18.3.1"
   },
   "devDependencies": {
     "@types/react": "^18.3.23",
     "@types/react-dom": "^18.3.7",
-    "@vitejs/plugin-react-swc": "^3.11.0",
-    "vite": "^7.0.6"
+    "@vitejs/plugin-react-swc": "^4.0.0",
+    "vite": "^7.1.1"
   }
 }