diff --git a/TopSecret.ProtectedBlob.Tests/TopSecret.ProtectedBlob.Tests.csproj b/TopSecret.ProtectedBlob.Tests/TopSecret.ProtectedBlob.Tests.csproj
index 0db217c..9aa6f61 100644
--- a/TopSecret.ProtectedBlob.Tests/TopSecret.ProtectedBlob.Tests.csproj
+++ b/TopSecret.ProtectedBlob.Tests/TopSecret.ProtectedBlob.Tests.csproj
@@ -21,7 +21,7 @@
       <IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
       <PrivateAssets>all</PrivateAssets>
     </PackageReference>
-    <PackageReference Include="Microsoft.NET.Test.Sdk" Version="18.7.0" />
+    <PackageReference Include="Microsoft.NET.Test.Sdk" Version="18.8.1" />
     <PackageReference Include="NUnit" Version="4.6.1" />
     <PackageReference Include="NUnit3TestAdapter" Version="6.2.0" />
     <PackageReference Include="NUnit.Analyzers" Version="4.14.0">
diff --git a/TopSecret.ProtectedBlob/TopSecret.ProtectedBlob.csproj b/TopSecret.ProtectedBlob/TopSecret.ProtectedBlob.csproj
index 4744a90..d017125 100644
--- a/TopSecret.ProtectedBlob/TopSecret.ProtectedBlob.csproj
+++ b/TopSecret.ProtectedBlob/TopSecret.ProtectedBlob.csproj
@@ -68,7 +68,7 @@
 
   <ItemGroup>
     <ProjectReference Include="..\TopSecret.ProtectedString\TopSecret.ProtectedString.csproj" />
-    <PackageReference Include="Microsoft.SourceLink.GitHub" Version="10.0.300" PrivateAssets="all" Condition="'$(GITHUB_ACTIONS)' == 'true'" />
+    <PackageReference Include="Microsoft.SourceLink.GitHub" Version="10.0.301" PrivateAssets="all" Condition="'$(GITHUB_ACTIONS)' == 'true'" />
   </ItemGroup>
 
   <ItemGroup>
diff --git a/TopSecret.ProtectedString.Analyzers.Tests/TopSecret.ProtectedString.Analyzers.Tests.csproj b/TopSecret.ProtectedString.Analyzers.Tests/TopSecret.ProtectedString.Analyzers.Tests.csproj
index f69bbce..0ac1843 100644
--- a/TopSecret.ProtectedString.Analyzers.Tests/TopSecret.ProtectedString.Analyzers.Tests.csproj
+++ b/TopSecret.ProtectedString.Analyzers.Tests/TopSecret.ProtectedString.Analyzers.Tests.csproj
@@ -20,7 +20,7 @@
       <PrivateAssets>all</PrivateAssets>
       <IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
     </PackageReference>
-    <PackageReference Include="Microsoft.NET.Test.Sdk" Version="18.7.0" />
+    <PackageReference Include="Microsoft.NET.Test.Sdk" Version="18.8.1" />
     <PackageReference Include="NUnit" Version="4.6.1" />
     <PackageReference Include="NUnit3TestAdapter" Version="6.2.0" />
     <PackageReference Include="NUnit.Analyzers" Version="4.14.0">
diff --git a/TopSecret.ProtectedString.Configuration.Tests/TopSecret.ProtectedString.Configuration.Tests.csproj b/TopSecret.ProtectedString.Configuration.Tests/TopSecret.ProtectedString.Configuration.Tests.csproj
index f5596a4..11ff7ca 100644
--- a/TopSecret.ProtectedString.Configuration.Tests/TopSecret.ProtectedString.Configuration.Tests.csproj
+++ b/TopSecret.ProtectedString.Configuration.Tests/TopSecret.ProtectedString.Configuration.Tests.csproj
@@ -12,7 +12,7 @@
   </PropertyGroup>
 
   <ItemGroup>
-    <PackageReference Include="Microsoft.NET.Test.Sdk" Version="18.7.0" />
+    <PackageReference Include="Microsoft.NET.Test.Sdk" Version="18.8.1" />
     <PackageReference Include="NUnit" Version="4.6.1" />
     <PackageReference Include="NUnit3TestAdapter" Version="6.2.0" />
     <PackageReference Include="NUnit.Analyzers" Version="4.14.0">
@@ -23,7 +23,7 @@
          IConfiguration from in-memory key/value pairs without spinning
          up a real appsettings.json file. Version-aligned with the
          abstractions reference in the package under test. -->
-    <PackageReference Include="Microsoft.Extensions.Configuration" Version="10.0.9" />
+    <PackageReference Include="Microsoft.Extensions.Configuration" Version="10.0.10" />
   </ItemGroup>
 
   <ItemGroup>
diff --git a/TopSecret.ProtectedString.Configuration/TopSecret.ProtectedString.Configuration.csproj b/TopSecret.ProtectedString.Configuration/TopSecret.ProtectedString.Configuration.csproj
index d42b076..36a63bb 100644
--- a/TopSecret.ProtectedString.Configuration/TopSecret.ProtectedString.Configuration.csproj
+++ b/TopSecret.ProtectedString.Configuration/TopSecret.ProtectedString.Configuration.csproj
@@ -69,8 +69,8 @@
          types they already have, with no transitive downgrades. NuGet
          resolves to higher versions transparently when the host already
          pulls in 10.x or higher elsewhere. -->
-    <PackageReference Include="Microsoft.Extensions.Configuration.Abstractions" Version="10.0.9" />
-    <PackageReference Include="Microsoft.SourceLink.GitHub" Version="10.0.300" PrivateAssets="all" Condition="'$(GITHUB_ACTIONS)' == 'true'" />
+    <PackageReference Include="Microsoft.Extensions.Configuration.Abstractions" Version="10.0.10" />
+    <PackageReference Include="Microsoft.SourceLink.GitHub" Version="10.0.301" PrivateAssets="all" Condition="'$(GITHUB_ACTIONS)' == 'true'" />
   </ItemGroup>
 
 </Project>
diff --git a/TopSecret.ProtectedString.Json.Tests/TopSecret.ProtectedString.Json.Tests.csproj b/TopSecret.ProtectedString.Json.Tests/TopSecret.ProtectedString.Json.Tests.csproj
index 256e075..ecdeb70 100644
--- a/TopSecret.ProtectedString.Json.Tests/TopSecret.ProtectedString.Json.Tests.csproj
+++ b/TopSecret.ProtectedString.Json.Tests/TopSecret.ProtectedString.Json.Tests.csproj
@@ -12,7 +12,7 @@
   </PropertyGroup>
 
   <ItemGroup>
-    <PackageReference Include="Microsoft.NET.Test.Sdk" Version="18.7.0" />
+    <PackageReference Include="Microsoft.NET.Test.Sdk" Version="18.8.1" />
     <PackageReference Include="NUnit" Version="4.6.1" />
     <PackageReference Include="NUnit3TestAdapter" Version="6.2.0" />
     <PackageReference Include="NUnit.Analyzers" Version="4.14.0">
diff --git a/TopSecret.ProtectedString.Json/TopSecret.ProtectedString.Json.csproj b/TopSecret.ProtectedString.Json/TopSecret.ProtectedString.Json.csproj
index bedfe78..1b68c92 100644
--- a/TopSecret.ProtectedString.Json/TopSecret.ProtectedString.Json.csproj
+++ b/TopSecret.ProtectedString.Json/TopSecret.ProtectedString.Json.csproj
@@ -56,7 +56,7 @@
     <ProjectReference Include="..\TopSecret.ProtectedString\TopSecret.ProtectedString.csproj" />
     <!-- System.Text.Json ships in the net10.0 shared framework, so no
          PackageReference is needed (adding one trips NU1510). -->
-    <PackageReference Include="Microsoft.SourceLink.GitHub" Version="10.0.300" PrivateAssets="all" Condition="'$(GITHUB_ACTIONS)' == 'true'" />
+    <PackageReference Include="Microsoft.SourceLink.GitHub" Version="10.0.301" PrivateAssets="all" Condition="'$(GITHUB_ACTIONS)' == 'true'" />
   </ItemGroup>
 
 </Project>
diff --git a/TopSecret.ProtectedString.LinuxTpm.Tests/TopSecret.ProtectedString.LinuxTpm.Tests.csproj b/TopSecret.ProtectedString.LinuxTpm.Tests/TopSecret.ProtectedString.LinuxTpm.Tests.csproj
index 27adb50..532949d 100644
--- a/TopSecret.ProtectedString.LinuxTpm.Tests/TopSecret.ProtectedString.LinuxTpm.Tests.csproj
+++ b/TopSecret.ProtectedString.LinuxTpm.Tests/TopSecret.ProtectedString.LinuxTpm.Tests.csproj
@@ -16,7 +16,7 @@
       <PrivateAssets>all</PrivateAssets>
       <IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
     </PackageReference>
-    <PackageReference Include="Microsoft.NET.Test.Sdk" Version="18.7.0" />
+    <PackageReference Include="Microsoft.NET.Test.Sdk" Version="18.8.1" />
     <PackageReference Include="NUnit" Version="4.6.1" />
     <PackageReference Include="NUnit3TestAdapter" Version="6.2.0" />
     <PackageReference Include="NUnit.Analyzers" Version="4.14.0">
diff --git a/TopSecret.ProtectedString.LinuxTpm/TopSecret.ProtectedString.LinuxTpm.csproj b/TopSecret.ProtectedString.LinuxTpm/TopSecret.ProtectedString.LinuxTpm.csproj
index 69dd3df..6c52255 100644
--- a/TopSecret.ProtectedString.LinuxTpm/TopSecret.ProtectedString.LinuxTpm.csproj
+++ b/TopSecret.ProtectedString.LinuxTpm/TopSecret.ProtectedString.LinuxTpm.csproj
@@ -53,7 +53,7 @@
   <ItemGroup>
     <ProjectReference Include="..\TopSecret.ProtectedString\TopSecret.ProtectedString.csproj" />
     <PackageReference Include="Microsoft.TSS" Version="2.1.1" />
-    <PackageReference Include="Microsoft.SourceLink.GitHub" Version="10.0.300" PrivateAssets="all" Condition="'$(GITHUB_ACTIONS)' == 'true'" />
+    <PackageReference Include="Microsoft.SourceLink.GitHub" Version="10.0.301" PrivateAssets="all" Condition="'$(GITHUB_ACTIONS)' == 'true'" />
   </ItemGroup>
 
   <ItemGroup>
diff --git a/TopSecret.ProtectedString.Tests/TopSecret.ProtectedString.Tests.csproj b/TopSecret.ProtectedString.Tests/TopSecret.ProtectedString.Tests.csproj
index 2bed874..1b25eec 100644
--- a/TopSecret.ProtectedString.Tests/TopSecret.ProtectedString.Tests.csproj
+++ b/TopSecret.ProtectedString.Tests/TopSecret.ProtectedString.Tests.csproj
@@ -24,7 +24,7 @@
       <IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
       <PrivateAssets>all</PrivateAssets>
     </PackageReference>
-    <PackageReference Include="Microsoft.NET.Test.Sdk" Version="18.7.0" />
+    <PackageReference Include="Microsoft.NET.Test.Sdk" Version="18.8.1" />
     <PackageReference Include="NUnit" Version="4.6.1" />
     <PackageReference Include="NUnit3TestAdapter" Version="6.2.0" />
     <PackageReference Include="NUnit.Analyzers" Version="4.14.0">
@@ -36,7 +36,7 @@
          The main library only references BouncyCastle on the net10.0-browser
          TFM (where AesGcm.IsSupported is false), so these tests verify the
          shim's BC path is correct without needing a wasm test runner. -->
-    <PackageReference Include="BouncyCastle.Cryptography" Version="2.6.2" />
+    <PackageReference Include="BouncyCastle.Cryptography" Version="2.7.0" />
   </ItemGroup>
 
   <ItemGroup>
diff --git a/TopSecret.ProtectedString.WindowsTpm.Tests/TopSecret.ProtectedString.WindowsTpm.Tests.csproj b/TopSecret.ProtectedString.WindowsTpm.Tests/TopSecret.ProtectedString.WindowsTpm.Tests.csproj
index 9fa4529..ccf7c51 100644
--- a/TopSecret.ProtectedString.WindowsTpm.Tests/TopSecret.ProtectedString.WindowsTpm.Tests.csproj
+++ b/TopSecret.ProtectedString.WindowsTpm.Tests/TopSecret.ProtectedString.WindowsTpm.Tests.csproj
@@ -16,7 +16,7 @@
       <PrivateAssets>all</PrivateAssets>
       <IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
     </PackageReference>
-    <PackageReference Include="Microsoft.NET.Test.Sdk" Version="18.7.0" />
+    <PackageReference Include="Microsoft.NET.Test.Sdk" Version="18.8.1" />
     <PackageReference Include="NUnit" Version="4.6.1" />
     <PackageReference Include="NUnit3TestAdapter" Version="6.2.0" />
     <PackageReference Include="NUnit.Analyzers" Version="4.14.0">
diff --git a/TopSecret.ProtectedString.WindowsTpm/TopSecret.ProtectedString.WindowsTpm.csproj b/TopSecret.ProtectedString.WindowsTpm/TopSecret.ProtectedString.WindowsTpm.csproj
index ad1ddd6..62e5ea7 100644
--- a/TopSecret.ProtectedString.WindowsTpm/TopSecret.ProtectedString.WindowsTpm.csproj
+++ b/TopSecret.ProtectedString.WindowsTpm/TopSecret.ProtectedString.WindowsTpm.csproj
@@ -52,7 +52,7 @@
 
   <ItemGroup>
     <ProjectReference Include="..\TopSecret.ProtectedString\TopSecret.ProtectedString.csproj" />
-    <PackageReference Include="Microsoft.SourceLink.GitHub" Version="10.0.300" PrivateAssets="all" Condition="'$(GITHUB_ACTIONS)' == 'true'" />
+    <PackageReference Include="Microsoft.SourceLink.GitHub" Version="10.0.301" PrivateAssets="all" Condition="'$(GITHUB_ACTIONS)' == 'true'" />
   </ItemGroup>
 
   <ItemGroup>
diff --git a/TopSecret.ProtectedString.Xml.Tests/TopSecret.ProtectedString.Xml.Tests.csproj b/TopSecret.ProtectedString.Xml.Tests/TopSecret.ProtectedString.Xml.Tests.csproj
index 82ff8fe..12db91a 100644
--- a/TopSecret.ProtectedString.Xml.Tests/TopSecret.ProtectedString.Xml.Tests.csproj
+++ b/TopSecret.ProtectedString.Xml.Tests/TopSecret.ProtectedString.Xml.Tests.csproj
@@ -12,7 +12,7 @@
   </PropertyGroup>
 
   <ItemGroup>
-    <PackageReference Include="Microsoft.NET.Test.Sdk" Version="18.7.0" />
+    <PackageReference Include="Microsoft.NET.Test.Sdk" Version="18.8.1" />
     <PackageReference Include="NUnit" Version="4.6.1" />
     <PackageReference Include="NUnit3TestAdapter" Version="6.2.0" />
     <PackageReference Include="NUnit.Analyzers" Version="4.14.0">
diff --git a/TopSecret.ProtectedString.Xml/TopSecret.ProtectedString.Xml.csproj b/TopSecret.ProtectedString.Xml/TopSecret.ProtectedString.Xml.csproj
index acc9ac6..cd8755e 100644
--- a/TopSecret.ProtectedString.Xml/TopSecret.ProtectedString.Xml.csproj
+++ b/TopSecret.ProtectedString.Xml/TopSecret.ProtectedString.Xml.csproj
@@ -56,7 +56,7 @@
     <ProjectReference Include="..\TopSecret.ProtectedString\TopSecret.ProtectedString.csproj" />
     <!-- System.Xml (XmlReader) ships in the net10.0 shared framework, so no
          PackageReference is needed. -->
-    <PackageReference Include="Microsoft.SourceLink.GitHub" Version="10.0.300" PrivateAssets="all" Condition="'$(GITHUB_ACTIONS)' == 'true'" />
+    <PackageReference Include="Microsoft.SourceLink.GitHub" Version="10.0.301" PrivateAssets="all" Condition="'$(GITHUB_ACTIONS)' == 'true'" />
   </ItemGroup>
 
 </Project>
diff --git a/TopSecret.ProtectedString/TopSecret.ProtectedString.csproj b/TopSecret.ProtectedString/TopSecret.ProtectedString.csproj
index 4715a02..0fb23e6 100644
--- a/TopSecret.ProtectedString/TopSecret.ProtectedString.csproj
+++ b/TopSecret.ProtectedString/TopSecret.ProtectedString.csproj
@@ -94,7 +94,7 @@
          README's "Why TopSecret.Cryptography.Argon2 instead of upstream"
          section for the full mechanism and verification story. -->
     <PackageReference Include="TopSecret.Cryptography.Argon2" Version="2.1.6" />
-    <PackageReference Include="Microsoft.SourceLink.GitHub" Version="10.0.300" PrivateAssets="all" Condition="'$(GITHUB_ACTIONS)' == 'true'" />
+    <PackageReference Include="Microsoft.SourceLink.GitHub" Version="10.0.301" PrivateAssets="all" Condition="'$(GITHUB_ACTIONS)' == 'true'" />
   </ItemGroup>
 
   <!-- BouncyCastle is referenced ONLY on net10.0-browser, where
@@ -104,7 +104,7 @@
        BouncyCastle assemblies are loaded — consumers on those platforms pay
        no size cost. -->
   <ItemGroup Condition="$(TargetFramework.Contains('-browser'))">
-    <PackageReference Include="BouncyCastle.Cryptography" Version="2.6.2" />
+    <PackageReference Include="BouncyCastle.Cryptography" Version="2.7.0" />
   </ItemGroup>
 
   <ItemGroup>