diff --git a/CHANGELOG.md b/CHANGELOG.md
index 9e9c5460d..55521d9c6 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,15 +1,30 @@
 # Change Log
+
 All notable changes to this project will be documented in this file.
 
+## 2.17.4
+
+#### Dependency upgrades
+
+- bump spring-core version to 5.3.33
+- bump spring-security version to 5.8.11
+- bump og4j2.version to 2.23.1
+- bump commons io version to 2.16.1
+- bump org.json.version to 20240303
+- bump sap.cloud.env.servicebinding.version to 0.10.4
+
 ## 2.17.3
+
 - [java-security]
   - add name property of service binding as property to OAuth2ServiceConfiguration
 - [java-api]
   - add ServiceConstant#NAME which can be used to access that property
 - [env]
-  -  service plan property is no longer uppercased when building OAuth2ServiceConfiguration from service bindings of the environment
+  - service plan property is no longer uppercased when building OAuth2ServiceConfiguration from service bindings of the
+    environment
 - [spring-security]
-  - fixes a bug in which a second XSUAA configuration of plan "broker" was ignored in spring-security auto-configuration for versions >= 2.16.0 and < 2.17.3
+  - fixes a bug in which a second XSUAA configuration of plan "broker" was ignored in spring-security auto-configuration
+    for versions >= 2.16.0 and < 2.17.3
   - add setName getName, setPlan, getPlan to OAuth2ServiceConfigurationProperties, which means, the list of XsuaaServiceConfigurations can now be filtered based on these properties.
 - [token-client] 
   - remove httpclient caching from DefaultHttpClientFactory (#1416)
diff --git a/pom.xml b/pom.xml
index 5dc562715..2ee612007 100644
--- a/pom.xml
+++ b/pom.xml
@@ -58,21 +58,22 @@
 		<maven.source.plugin.version>3.2.1</maven.source.plugin.version>
 		<!-- make sure that spring core and spring boot versions are compatible-->
 		<spring.boot.version>2.7.18</spring.boot.version>
-		<spring.core.version>5.3.31</spring.core.version>
-		<spring.security.version>5.8.9</spring.security.version>
+		<spring.core.version>5.3.33</spring.core.version>
+		<spring.security.version>5.8.11</spring.security.version>
 		<spring.security.oauth2.version>2.5.2.RELEASE</spring.security.oauth2.version>
 		<spring.security.jwt.version>1.1.1.RELEASE</spring.security.jwt.version>
 		<reactor.version>3.4.35</reactor.version>
-		<log4j2.version>2.21.1</log4j2.version>
-		<slf4j.api.version>1.7.36</slf4j.api.version> <!--see also here http://www.slf4j.org/faq.html#changesInVersion18 -->
-		<org.json.version>20231013</org.json.version>
-		<sap.cloud.env.servicebinding.version>0.10.1</sap.cloud.env.servicebinding.version>
+		<log4j2.version>2.23.1</log4j2.version>
+		<slf4j.api.version>1.7.36
+		</slf4j.api.version> <!--see also here http://www.slf4j.org/faq.html#changesInVersion18 -->
+		<org.json.version>20240303</org.json.version>
+		<sap.cloud.env.servicebinding.version>0.10.4</sap.cloud.env.servicebinding.version>
 		<apache.httpclient.version>4.5.14</apache.httpclient.version>
 		<caffeine.version>2.9.3</caffeine.version>
-		<commons.io.version>2.15.1</commons.io.version>
+		<commons.io.version>2.16.1</commons.io.version>
 		<javax.servlet.api.version>4.0.1</javax.servlet.api.version>
 		<junit.version>4.13.2</junit.version>
-		<junit-jupiter.version>5.10.1</junit-jupiter.version>
+		<junit-jupiter.version>5.10.2</junit-jupiter.version>
 		<maven-surefire-plugin>3.2.5</maven-surefire-plugin>
 		<hamcrest.version>1.3</hamcrest.version>
 		<mockito.version>4.11.0</mockito.version>