diff --git a/dependencyCheckSuppression.xml b/dependencyCheckSuppression.xml
index e8926bd673..1cab9c8187 100644
--- a/dependencyCheckSuppression.xml
+++ b/dependencyCheckSuppression.xml
@@ -471,21 +471,40 @@
     </suppress>
 
     <!--
-    CVE in example code. New version not yet available.
+    [FP]: pgvector java library matching CPE for pgvector postgres extension
+    https://github.com/dependency-check/DependencyCheck/issues/8769
     -->
     <suppress>
         <notes><![CDATA[
-    file name: tomcat-*-11.0.24.jar
+    file name: pgvector-0.1.6.jar
     ]]></notes>
-        <packageUrl regex="true">^pkg:maven/org\.apache\.tomcat/tomcat-.*@.*$</packageUrl>
-        <cve>CVE-2026-66299</cve>
+        <packageUrl regex="true">^pkg:maven/com\.pgvector/pgvector@.*$</packageUrl>
+        <cpe>cpe:/a:pgvector_project:pgvector</cpe>
+    </suppress>
+
+    <!--
+    [FP]: opentelemetry-js is the OpenTelemetry JavaScript Client, not the Java client we pull in.
+    -->
+    <suppress>
+        <notes><![CDATA[
+    file name: opentelemetry-api-1.60.1.jar
+    ]]></notes>
+        <packageUrl regex="true">^pkg:maven/io\.opentelemetry/opentelemetry-api@.*$</packageUrl>
+        <cpe>cpe:/a:opentelemetry:opentelemetry</cpe>
+    </suppress>
+    <suppress>
+        <notes><![CDATA[
+    file name: opentelemetry-common-1.60.1.jar
+    ]]></notes>
+        <packageUrl regex="true">^pkg:maven/io\.opentelemetry/opentelemetry-common@.*$</packageUrl>
+        <cpe>cpe:/a:opentelemetry:opentelemetry</cpe>
     </suppress>
     <suppress>
         <notes><![CDATA[
-    file name: tomcat-embed-*-11.0.24.jar
+    file name: opentelemetry-context-1.60.1.jar
     ]]></notes>
-        <packageUrl regex="true">^pkg:maven/org\.apache\.tomcat\.embed/tomcat-embed-.*@.*$</packageUrl>
-        <cve>CVE-2026-66299</cve>
+        <packageUrl regex="true">^pkg:maven/io\.opentelemetry/opentelemetry-context@.*$</packageUrl>
+        <cpe>cpe:/a:opentelemetry:opentelemetry</cpe>
     </suppress>
 
 </suppressions>
diff --git a/gradle.properties b/gradle.properties
index 01ab40b7d8..1a7222befe 100644
--- a/gradle.properties
+++ b/gradle.properties
@@ -44,7 +44,7 @@ buildFromSource=true
 
 # The default version for LabKey artifacts that are built or that we depend on.
 # override in an individual module's gradle.properties file as necessary 
-labkeyVersion=26.7.6
+labkeyVersion=26.7.7
 labkeyClientApiVersion=7.3.0
 
 # Uncomment the following line to download proteomics binaries
@@ -98,7 +98,7 @@ apacheDirectoryVersion=2.1.8
 apacheMinaVersion=2.2.9
 
 # Usually matches the version specified as a Spring Boot dependency (see springBootVersion below)
-apacheTomcatVersion=11.0.24
+apacheTomcatVersion=11.0.25
 
 # (mothership) -> json-path -> json-smart -> accessor-smart
 # (core) -> graalvm
@@ -260,8 +260,8 @@ microsoftGraphVersion=6.65.0
 
 mssqlJdbcVersion=13.4.0.jre11
 
-# Netty - transitive dependency via azure-core-http-netty; force for CVE-2026-33871, CVE-2026-33870, CVE-2026-45674, CVE-2026-47691 (and 20 related) fixed in 4.2.15.Final, plus CVE-2026-44891, CVE-2026-55831, CVE-2026-55833 fixed in 4.2.16.Final
-nettyVersion=4.2.16.Final
+# Netty - transitive dependency via azure-core-http-netty; force for CVE fixes
+nettyVersion=4.2.17.Final
 # Reactor - transitive dependency via azure-core; force for version consistency across modules
 reactorCoreVersion=3.8.1