diff --git a/pom.xml b/pom.xml
index 9dc71bb3..bbc7740e 100644
--- a/pom.xml
+++ b/pom.xml
@@ -44,13 +44,13 @@
         <maven.compiler.target>11</maven.compiler.target>
         <maven.compiler.release>11</maven.compiler.release>
         <!-- internal dependencies -->
-        <dependencies.version>2025.6.25</dependencies.version>
-        <exense-commons.version>2.1.0</exense-commons.version>
+        <dependencies.version>2025.11.28-6929c90d11ea7b7be5b14369</dependencies.version>
+        <exense-commons.version>2025.12.2-692eafc711ea7b7be5aeb998</exense-commons.version>
 
         <!-- external dependencies -->
         <dep.jaxb.version>2.3.1</dep.jaxb.version>
         <dep.antlr.version>4.5.3</dep.antlr.version>
-        <dep.classgraph.version>4.8.147</dep.classgraph.version>
+        <dep.classgraph.version>4.8.165</dep.classgraph.version>
         <dep.swagger-ui.version>5.17.14</dep.swagger-ui.version>
 
         <!-- maven build dependencies -->
@@ -58,6 +58,7 @@
         <dep.mvn.dependency-check.version>10.0.3</dep.mvn.dependency-check.version>
         <dep.mvn.deploy.version>3.0.0-M1</dep.mvn.deploy.version>
         <dep.mvn.download.version>1.2.1</dep.mvn.download.version>
+        <dep.mvn.enforcer.version>3.1.0</dep.mvn.enforcer.version>
         <dep.mvn.gpg.version>1.6</dep.mvn.gpg.version>
         <dep.mvn.jacoco.version>0.8.12</dep.mvn.jacoco.version>
         <dep.mvn.jar.version>3.4.2</dep.mvn.jar.version>
@@ -106,6 +107,14 @@
                 <scope>import</scope>
             </dependency>
 
+            <dependency>
+                <groupId>ch.exense.dependencies</groupId>
+                <artifactId>dependencies-asm</artifactId>
+                <version>${dependencies.version}</version>
+                <type>pom</type>
+                <scope>import</scope>
+            </dependency>
+
             <dependency>
                 <groupId>ch.exense.dependencies</groupId>
                 <artifactId>dependencies-databases</artifactId>
@@ -122,9 +131,18 @@
                 <scope>import</scope>
             </dependency>
 
+            <!-- Javassist is indirectly used by Jersey and Swagger, we need to import a common version -->
+            <dependency>
+                <groupId>ch.exense.dependencies</groupId>
+                <artifactId>dependencies-javassist</artifactId>
+                <version>${dependencies.version}</version>
+                <type>pom</type>
+                <scope>import</scope>
+            </dependency>
+
             <dependency>
                 <groupId>ch.exense.dependencies</groupId>
-                <artifactId>dependencies-guava</artifactId>
+                <artifactId>dependencies-google</artifactId>
                 <version>${dependencies.version}</version>
                 <type>pom</type>
                 <scope>import</scope>
@@ -257,6 +275,11 @@
                     <artifactId>maven-deploy-plugin</artifactId>
                     <version>${dep.mvn.deploy.version}</version>
                 </plugin>
+                <plugin>
+                    <groupId>org.apache.maven.plugins</groupId>
+                    <artifactId>maven-enforcer-plugin</artifactId>
+                    <version>${dep.mvn.enforcer.version}</version>
+                </plugin>
                 <plugin>
                     <groupId>org.apache.maven.plugins</groupId>
                     <artifactId>maven-gpg-plugin</artifactId>
@@ -312,6 +335,28 @@
             </plugins>
         </pluginManagement>
         <plugins>
+            <plugin>
+                <groupId>org.apache.maven.plugins</groupId>
+                <artifactId>maven-enforcer-plugin</artifactId>
+                <executions>
+                    <execution>
+                        <id>enforce-policies</id>
+                        <goals>
+                            <goal>enforce</goal>
+                        </goals>
+                        <configuration>
+                            <rules>
+                                <requireUpperBoundDeps>
+                                    <excludes>
+                                        <exclude>jakarta.xml.bind:jakarta.xml.bind-api</exclude>
+                                    </excludes>
+                                </requireUpperBoundDeps>
+                            </rules>
+                            <fail>true</fail>
+                        </configuration>
+                    </execution>
+                </executions>
+            </plugin>
             <plugin>
                 <groupId>org.jacoco</groupId>
                 <artifactId>jacoco-maven-plugin</artifactId>
diff --git a/step-framework-timeseries/pom.xml b/step-framework-timeseries/pom.xml
index f79c62d8..f05e0fd2 100644
--- a/step-framework-timeseries/pom.xml
+++ b/step-framework-timeseries/pom.xml
@@ -14,10 +14,6 @@
 	</parent>
 	
 	<dependencies>
-		 <dependency>
-			<groupId>jakarta.validation</groupId>
-			<artifactId>jakarta.validation-api</artifactId>
-		</dependency>
 		<dependency>
 			<groupId>ch.exense.step</groupId>
 			<artifactId>step-framework-model</artifactId>
@@ -28,16 +24,24 @@
 			<artifactId>step-framework-collections</artifactId>
 			<version>${project.version}</version>
 		</dependency>
-		<dependency>
-			<groupId>org.apache.commons</groupId>
-			<artifactId>commons-lang3</artifactId>
-		</dependency>
 		<dependency>
 			<groupId>ch.exense.step</groupId>
 			<artifactId>step-framework-collections-mongodb</artifactId>
 			<version>${project.version}</version>
 			<scope>test</scope>
 		</dependency>
+		<dependency>
+			<groupId>org.apache.commons</groupId>
+			<artifactId>commons-lang3</artifactId>
+		</dependency>
+		<dependency>
+			<groupId>jakarta.validation</groupId>
+			<artifactId>jakarta.validation-api</artifactId>
+		</dependency>
+		<dependency>
+			<groupId>com.google.code.findbugs</groupId>
+			<artifactId>jsr305</artifactId>
+		</dependency>
 		<dependency>
 			<groupId>pl.pragmatists</groupId>
 			<artifactId>JUnitParams</artifactId>