diff --git a/plugins/test-management-resources/package.json b/plugins/test-management-resources/package.json
index e317e3c58f..9f1fa4b311 100644
--- a/plugins/test-management-resources/package.json
+++ b/plugins/test-management-resources/package.json
@@ -72,6 +72,6 @@
     "@hcengineering/workbench": "workspace:^0.7.0",
     "@hcengineering/workbench-resources": "workspace:^0.7.0",
     "fast-equals": "^5.2.2",
-    "svelte": "^4.2.20"
+    "svelte": "^5.56.4"
   }
 }
diff --git a/plugins/text-editor-resources/package.json b/plugins/text-editor-resources/package.json
index b5d3b89c92..00e85ae535 100644
--- a/plugins/text-editor-resources/package.json
+++ b/plugins/text-editor-resources/package.json
@@ -43,7 +43,7 @@
   },
   "dependencies": {
     "@hcengineering/platform": "workspace:^0.7.20",
-    "svelte": "^4.2.20",
+    "svelte": "^5.56.4",
     "@hcengineering/ui": "workspace:^0.7.0",
     "@hcengineering/analytics": "workspace:^0.7.19",
     "@hcengineering/presentation": "workspace:^0.7.0",
diff --git a/plugins/time-resources/package.json b/plugins/time-resources/package.json
index 10f07c1795..89acf4aef4 100644
--- a/plugins/time-resources/package.json
+++ b/plugins/time-resources/package.json
@@ -38,7 +38,7 @@
     "svelte-eslint-parser": "^0.33.1"
   },
   "dependencies": {
-    "svelte": "^4.2.20",
+    "svelte": "^5.56.4",
     "@hcengineering/analytics": "workspace:^0.7.19",
     "@hcengineering/ui": "workspace:^0.7.0",
     "@hcengineering/calendar": "workspace:^0.7.0",
diff --git a/plugins/tracker-resources/package.json b/plugins/tracker-resources/package.json
index 7afa566df4..782f666b2a 100644
--- a/plugins/tracker-resources/package.json
+++ b/plugins/tracker-resources/package.json
@@ -75,6 +75,6 @@
     "@hcengineering/workbench": "workspace:^0.7.0",
     "@hcengineering/workbench-resources": "workspace:^0.7.0",
     "fast-equals": "^5.2.2",
-    "svelte": "^4.2.20"
+    "svelte": "^5.56.4"
   }
 }
diff --git a/plugins/training-resources/package.json b/plugins/training-resources/package.json
index 1876eb697f..696b86266a 100644
--- a/plugins/training-resources/package.json
+++ b/plugins/training-resources/package.json
@@ -58,6 +58,6 @@
     "@hcengineering/training": "workspace:^0.7.0",
     "fast-equals": "^5.2.2",
     "lexorank": "~1.0.4",
-    "svelte": "^4.2.20"
+    "svelte": "^5.56.4"
   }
 }
diff --git a/plugins/uploader-resources/package.json b/plugins/uploader-resources/package.json
index 7e2ebbb291..b1e22c50a8 100644
--- a/plugins/uploader-resources/package.json
+++ b/plugins/uploader-resources/package.json
@@ -49,6 +49,6 @@
     "@hcengineering/view": "workspace:^0.7.0",
     "@hcengineering/view-resources": "workspace:^0.7.0",
     "install": "^0.13.0",
-    "svelte": "^4.2.20"
+    "svelte": "^5.56.4"
   }
 }
diff --git a/plugins/view-resources/package.json b/plugins/view-resources/package.json
index efbdbf6b97..45506e6f8b 100644
--- a/plugins/view-resources/package.json
+++ b/plugins/view-resources/package.json
@@ -40,7 +40,7 @@
     "svelte-eslint-parser": "^0.33.1"
   },
   "dependencies": {
-    "svelte": "^4.2.20",
+    "svelte": "^5.56.4",
     "@hcengineering/platform": "workspace:^0.7.20",
     "@hcengineering/contact": "workspace:^0.7.0",
     "@hcengineering/model": "workspace:^0.7.17",
diff --git a/plugins/workbench-resources/package.json b/plugins/workbench-resources/package.json
index a9181da30a..783fe96f1c 100644
--- a/plugins/workbench-resources/package.json
+++ b/plugins/workbench-resources/package.json
@@ -37,7 +37,7 @@
     "svelte-eslint-parser": "^0.33.1"
   },
   "dependencies": {
-    "svelte": "^4.2.20",
+    "svelte": "^5.56.4",
     "@hcengineering/platform": "workspace:^0.7.20",
     "@hcengineering/core": "workspace:^0.7.26",
     "@hcengineering/client": "workspace:^0.7.19",
diff --git a/pods/front/package.json b/pods/front/package.json
index e3b7ddb2fb..f3f66abbd0 100644
--- a/pods/front/package.json
+++ b/pods/front/package.json
@@ -61,7 +61,7 @@
     "@hcengineering/platform": "workspace:^0.7.20",
     "express": "^4.21.2",
     "express-fileupload": "^1.5.1",
-    "uuid": "^8.3.2",
+    "uuid": "^14.0.1",
     "cors": "^2.8.5",
     "@hcengineering/server-core": "workspace:^0.7.19",
     "@hcengineering/server-token": "workspace:^0.7.18",
diff --git a/qms-desktop-package/package.json b/qms-desktop-package/package.json
index 6f52c18295..d45c3bb2f7 100644
--- a/qms-desktop-package/package.json
+++ b/qms-desktop-package/package.json
@@ -21,7 +21,7 @@
     "node-loader": "~2.0.0",
     "cross-env": "~7.0.3",
     "typescript": "^5.9.3",
-    "electron": "^38.2.2",
+    "electron": "^43.1.0",
     "@types/node": "^22.18.1",
     "electron-builder": "^25.1.8",
     "@electron/notarize": "^2.3.2",
diff --git a/server/front/package.json b/server/front/package.json
index 196df580e6..bb05576336 100644
--- a/server/front/package.json
+++ b/server/front/package.json
@@ -51,7 +51,7 @@
     "express": "^4.21.2",
     "express-fileupload": "^1.5.1",
     "express-static-gzip": "^2.2.0",
-    "uuid": "^8.3.2",
+    "uuid": "^14.0.1",
     "cors": "^2.8.5",
     "@hcengineering/account-client": "workspace:^0.7.25",
     "@hcengineering/server-core": "workspace:^0.7.19",
diff --git a/server/tool/package.json b/server/tool/package.json
index 4426038a04..c191b17da0 100644
--- a/server/tool/package.json
+++ b/server/tool/package.json
@@ -47,7 +47,7 @@
     "@hcengineering/importer": "workspace:^0.7.0",
     "@hcengineering/model": "workspace:^0.7.17",
     "@hcengineering/rank": "workspace:^0.7.18",
-    "uuid": "^8.3.2",
+    "uuid": "^14.0.1",
     "@hcengineering/server-token": "workspace:^0.7.18",
     "@hcengineering/server-core": "workspace:^0.7.19",
     "@hcengineering/server-client": "workspace:^0.7.16",
@@ -59,6 +59,6 @@
     "fast-equals": "^5.2.2",
     "@hcengineering/text": "workspace:^0.7.19",
     "@hcengineering/text-markdown": "workspace:^0.7.21",
-    "js-yaml": "^4.1.0"
+    "js-yaml": "^5.2.1"
   }
 }
diff --git a/services/ai-bot/love-agent/package.json b/services/ai-bot/love-agent/package.json
index ac9c2d0fa3..650edc5215 100644
--- a/services/ai-bot/love-agent/package.json
+++ b/services/ai-bot/love-agent/package.json
@@ -38,7 +38,7 @@
     "@livekit/agents": "^0.7.4",
     "@livekit/rtc-node": "^0.13.11",
     "dotenv": "^16.4.5",
-    "ws": "^8.18.2"
+    "ws": "^8.21.0"
   },
   "pnpm": {
     "onlyBuiltDependencies": ["esbuild"]
diff --git a/services/ai-bot/love-agent/pnpm-lock.yaml b/services/ai-bot/love-agent/pnpm-lock.yaml
index 452bac3e08..d3f5c65e7a 100644
--- a/services/ai-bot/love-agent/pnpm-lock.yaml
+++ b/services/ai-bot/love-agent/pnpm-lock.yaml
@@ -21,8 +21,8 @@ importers:
         specifier: ^16.4.5
         version: 16.4.7
       ws:
-        specifier: ^8.18.2
-        version: 8.18.2
+        specifier: ^8.21.0
+        version: 8.21.0
     devDependencies:
       '@types/node':
         specifier: ^22.18.1
@@ -289,12 +289,14 @@ packages:
     engines: {node: '>= 10'}
     cpu: [arm64]
     os: [linux]
+    libc: [glibc]
 
   '@livekit/rtc-node-linux-x64-gnu@0.13.11':
     resolution: {integrity: sha512-Zi7Elg29JSmDzikxL2Q9YAAka2Khi7GwYHYBv69W6XXHqz3MN4wtnUGShclmqC7aITkHF0tVNLHdexFmMc3trA==}
     engines: {node: '>= 10'}
     cpu: [x64]
     os: [linux]
+    libc: [glibc]
 
   '@livekit/rtc-node-win32-x64-msvc@0.13.11':
     resolution: {integrity: sha512-NYemYGbc271SFv+ttYaNvEKLWmwkJqn988xOasq+lWd31kuhj0krR2cThM07HKhgoQwOfdyIcSV87b0mjPzb/A==}
@@ -399,6 +401,7 @@ packages:
 
   '@ungap/structured-clone@1.2.1':
     resolution: {integrity: sha512-fEzPV3hSkSMltkw152tJKNARhOupqbH96MZWyRjNaYZOMIzbrTeQDG+MTc6Mr2pgzFQzFxAfmhGDNP5QK++2ZA==}
+    deprecated: Potential CWE-502 - Update to 1.3.1 or higher
 
   abort-controller@3.0.0:
     resolution: {integrity: sha512-h8lQ8tacZYnR3vNQTgibj+tODHI5/+l06Au2Pcriv/Gmet0eaj4TwWH41sO9wnHDiQsEj19q0drzdWdeAHtweg==}
@@ -864,7 +867,7 @@ packages:
 
   glob@7.2.3:
     resolution: {integrity: sha512-nFR0zLpU2YCaRxwoCJvL6UvCH2JFyFVIvwTLsIf21AuHlMskA1hhTdk+LlYJtOlYt9v6dvszD2BGRqBL+iQK9Q==}
-    deprecated: Glob versions prior to v9 are no longer supported
+    deprecated: Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me
 
   globals@13.24.0:
     resolution: {integrity: sha512-AhO5QUcj8llrbG09iWhPU2B204J1xnPeL8kQmVorSsy+Sjj1sk8gIyh6cUocGmH4L0UuhAJy+hJMRA4mgA4mFQ==}
@@ -1522,8 +1525,8 @@ packages:
   wrappy@1.0.2:
     resolution: {integrity: sha512-l4Sp/DRseor9wL6EvV2+TuQn63dMkPjZ/sp9XkghTEbV9KlPS1xUsZ3u7/IQO4wxtcFB4bgpQPRcR3QCvezPcQ==}
 
-  ws@8.18.2:
-    resolution: {integrity: sha512-DMricUmwGZUVr++AEAe2uiVM7UoO9MAVZMDu05UQOaUII0lp+zOzLLU4Xqh/JvTqklB1T4uELaaPBKyjE1r4fQ==}
+  ws@8.21.0:
+    resolution: {integrity: sha512-Vsp28b7DRcimFQvrqu2Wek3z1iYxDCWqHYB8Qsnk/S4RfaCQzPGPyBNuVjJV3cd6UiKtUtp6sNM77gWvzcCH+g==}
     engines: {node: '>=10.0.0'}
     peerDependencies:
       bufferutil: ^4.0.1
@@ -1556,7 +1559,7 @@ snapshots:
       cross-fetch: 3.1.8
       deepmerge: 4.3.1
       events: 3.3.0
-      ws: 8.18.2
+      ws: 8.21.0
     transitivePeerDependencies:
       - bufferutil
       - encoding
@@ -1685,7 +1688,7 @@ snapshots:
       livekit-server-sdk: 2.9.7
       pino: 8.21.0
       pino-pretty: 11.3.0
-      ws: 8.18.2
+      ws: 8.21.0
       zod: 3.24.1
     transitivePeerDependencies:
       - bufferutil
@@ -3184,7 +3187,7 @@ snapshots:
 
   wrappy@1.0.2: {}
 
-  ws@8.18.2: {}
+  ws@8.21.0: {}
 
   yocto-queue@0.1.0: {}
 
diff --git a/services/ai-bot/pod-ai-bot/package.json b/services/ai-bot/pod-ai-bot/package.json
index ab66f6a68c..1628f32ca9 100644
--- a/services/ai-bot/pod-ai-bot/package.json
+++ b/services/ai-bot/pod-ai-bot/package.json
@@ -91,7 +91,7 @@
     "js-tiktoken": "^1.0.14",
     "mongodb": "^6.16.0",
     "openai": "^4.56.0",
-    "uuid": "^8.3.2",
+    "uuid": "^14.0.1",
     "ws": "^8.18.2"
   }
 }
diff --git a/services/billing/pod-billing/package.json b/services/billing/pod-billing/package.json
index 0d096d9a4c..57c305b708 100644
--- a/services/billing/pod-billing/package.json
+++ b/services/billing/pod-billing/package.json
@@ -75,6 +75,6 @@
     "morgan": "^1.10.0",
     "postgres": "^3.4.7",
     "on-headers": "^1.0.2",
-    "uuid": "^8.3.2"
+    "uuid": "^14.0.1"
   }
 }
diff --git a/services/datalake/pod-datalake/package.json b/services/datalake/pod-datalake/package.json
index 44fc1d259f..17390481f5 100644
--- a/services/datalake/pod-datalake/package.json
+++ b/services/datalake/pod-datalake/package.json
@@ -79,6 +79,6 @@
     "morgan": "^1.10.0",
     "on-headers": "^1.0.2",
     "lru-cache": "^11.1.0",
-    "uuid": "^8.3.2"
+    "uuid": "^14.0.1"
   }
 }
diff --git a/services/export/pod-export/package.json b/services/export/pod-export/package.json
index f3972f4e9e..ea4209c287 100644
--- a/services/export/pod-export/package.json
+++ b/services/export/pod-export/package.json
@@ -86,10 +86,10 @@
     "@hcengineering/drive": "workspace:^0.7.0",
     "@hcengineering/export": "workspace:^0.7.0",
     "@hcengineering/products": "workspace:^0.7.0",
-    "uuid": "^8.3.2",
+    "uuid": "^14.0.1",
     "tar": "^7.4.3",
     "archiver": "^7.0.1",
-    "js-yaml": "^4.1.0",
+    "js-yaml": "^5.2.1",
     "csv-stringify": "^6.5.2"
   }
 }
diff --git a/services/github/github-resources/package.json b/services/github/github-resources/package.json
index 94b262b012..6e4b9ba448 100644
--- a/services/github/github-resources/package.json
+++ b/services/github/github-resources/package.json
@@ -39,7 +39,7 @@
   },
   "dependencies": {
     "@hcengineering/platform": "workspace:^0.7.20",
-    "svelte": "^4.2.20",
+    "svelte": "^5.56.4",
     "@hcengineering/github": "workspace:^0.7.0",
     "@hcengineering/ui": "workspace:^0.7.0",
     "@hcengineering/presentation": "workspace:^0.7.0",
diff --git a/services/gmail/pod-gmail/package.json b/services/gmail/pod-gmail/package.json
index bae208fe72..ea71e5d130 100644
--- a/services/gmail/pod-gmail/package.json
+++ b/services/gmail/pod-gmail/package.json
@@ -88,7 +88,7 @@
     "google-auth-library": "^8.0.2",
     "gaxios": "^5.0.1",
     "jwt-simple": "^0.5.6",
-    "uuid": "^8.3.2",
+    "uuid": "^14.0.1",
     "ws": "^8.18.2",
     "@hcengineering/analytics-service": "workspace:^0.7.19",
     "sanitize-html": "^2.15.0"
diff --git a/services/love/package.json b/services/love/package.json
index 944cb2a8b4..de30e737e5 100644
--- a/services/love/package.json
+++ b/services/love/package.json
@@ -71,7 +71,7 @@
     "@hcengineering/billing-client": "workspace:^0.7.0",
     "livekit-server-sdk": "^2.13.3",
     "jwt-simple": "^0.5.6",
-    "uuid": "^8.3.2",
+    "uuid": "^14.0.1",
     "dotenv": "^16.4.5",
     "cors": "^2.8.5",
     "express": "^4.21.2",
diff --git a/services/mail/mail-common/package.json b/services/mail/mail-common/package.json
index 042c401521..d127100095 100644
--- a/services/mail/mail-common/package.json
+++ b/services/mail/mail-common/package.json
@@ -66,7 +66,7 @@
     "markdown-it": "^14.0.0",
     "sanitize-html": "^2.15.0",
     "turndown": "^7.2.0",
-    "uuid": "^8.3.2",
+    "uuid": "^14.0.1",
     "striptags": "^3.2.0"
   }
 }
diff --git a/services/mail/pod-mail-worker/package.json b/services/mail/pod-mail-worker/package.json
index 8d824932f8..32af17aa6f 100644
--- a/services/mail/pod-mail-worker/package.json
+++ b/services/mail/pod-mail-worker/package.json
@@ -82,6 +82,6 @@
     "lru-cache": "^11.1.0",
     "sanitize-html": "^2.15.0",
     "turndown": "^7.2.0",
-    "uuid": "^8.3.2"
+    "uuid": "^14.0.1"
   }
 }
diff --git a/services/mail/pod-mail/package.json b/services/mail/pod-mail/package.json
index d16bf28e82..39f6cd16ff 100644
--- a/services/mail/pod-mail/package.json
+++ b/services/mail/pod-mail/package.json
@@ -63,6 +63,6 @@
     "dotenv": "^16.4.5",
     "express": "^4.21.2",
     "lru-cache": "^11.1.0",
-    "nodemailer": "^6.10.0"
+    "nodemailer": "^9.0.3"
   }
 }
diff --git a/services/payment/pod-payment/package.json b/services/payment/pod-payment/package.json
index 9bc33bf1c0..abc319c14c 100644
--- a/services/payment/pod-payment/package.json
+++ b/services/payment/pod-payment/package.json
@@ -76,6 +76,6 @@
     "morgan": "^1.10.0",
     "postgres": "^3.4.7",
     "on-headers": "^1.0.2",
-    "uuid": "^8.3.2"
+    "uuid": "^14.0.1"
   }
 }
diff --git a/services/rekoni/package.json b/services/rekoni/package.json
index 1edd8a1c09..771d362ca3 100644
--- a/services/rekoni/package.json
+++ b/services/rekoni/package.json
@@ -79,7 +79,7 @@
     "libphonenumber-js": "^1.9.46",
     "mammoth": "^1.9.0",
     "mime-types": "~2.1.34",
-    "pdfjs-dist": "2.12.313",
+    "pdfjs-dist": "4.2.67",
     "sharp": "~0.34.3",
     "morgan": "^1.10.0",
     "@hcengineering/server-core": "workspace:^0.7.19",
diff --git a/services/telegram/pod-telegram/package.json b/services/telegram/pod-telegram/package.json
index 143dd1d506..07915bb6f9 100644
--- a/services/telegram/pod-telegram/package.json
+++ b/services/telegram/pod-telegram/package.json
@@ -77,7 +77,7 @@
     "mime": "^3.0.0",
     "mongodb": "^6.16.0",
     "telegram": "2.22.2",
-    "uuid": "^8.3.2",
+    "uuid": "^14.0.1",
     "ws": "^8.18.2",
     "@hcengineering/analytics-service": "workspace:^0.7.19"
   }
diff --git a/templates/package/package.json b/templates/package/package.json
index 8a251a1a23..6f9b293901 100644
--- a/templates/package/package.json
+++ b/templates/package/package.json
@@ -12,7 +12,7 @@
     "ts-loader": "^9.2.5",
     "svelte-loader": "^3.2.0",
     "css-loader": "^5.2.1",
-    "webpack-dev-server": "^4.11.1",
+    "webpack-dev-server": "^6.0.0",
     "style-loader": "^3.3.1",
     "file-loader": "^6.2.0",
     "sass-loader": "^14.0.0",
@@ -34,7 +34,7 @@
     "svelte-preprocess": "^5.1.4"
   },
   "dependencies": {
-    "svelte": "^4.2.20"
+    "svelte": "^5.56.4"
   },
   "peerDependencies": {
     "svelte": "*",
diff --git a/templates/ui/package.json b/templates/ui/package.json
index f02c227faf..5cde89c578 100644
--- a/templates/ui/package.json
+++ b/templates/ui/package.json
@@ -39,7 +39,7 @@
     "svelte": "*"
   },
   "dependencies": {
-    "svelte": "^4.2.20"
+    "svelte": "^5.56.4"
   },
   "#replaces": [
     ".eslintrc.js",