diff --git a/package-lock.json b/package-lock.json
index aa9cc6b4..f7dc03d6 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -15,19 +15,19 @@
         "@aws-sdk/credential-providers": "3.1073.0",
         "@defra/forms-common": "^0.1.0",
         "@defra/forms-model": "^4.0.0",
-        "@defra/hapi-tracing": "^1.30.0",
+        "@defra/hapi-tracing": "^1.30.1",
         "@elastic/ecs-pino-format": "^1.5.0",
         "@hapi/hapi": "^21.4.9",
         "@hapi/hoek": "^11.0.7",
         "@hapi/jwt": "^3.2.3",
         "convict": "^6.2.5",
         "date-fns": "^4.1.0",
-        "dotenv": "^17.4.2",
+        "dotenv": "^18.0.9",
         "hapi-pino": "^13.0.0",
         "http-status-codes": "^2.3.0",
         "joi": "^18.2.9",
         "migrate-mongo": "^14.0.7",
-        "mongodb": "^7.2.0",
+        "mongodb": "^7.7.0",
         "pino": "^10.3.1",
         "pino-pretty": "^13.1.3",
         "proxy-agent": "^6.5.0"
@@ -2534,9 +2534,9 @@
       }
     },
     "node_modules/@defra/hapi-tracing": {
-      "version": "1.30.0",
-      "resolved": "https://registry.npmjs.org/@defra/hapi-tracing/-/hapi-tracing-1.30.0.tgz",
-      "integrity": "sha512-G/x4R8lxFCiVF7K+xlToFjxUL+HZ6mg3pDXf7XpTAOMfO51N3kIqSOAtfaqrjy/4/El3TfKuueJb7Y90kJoaHw==",
+      "version": "1.30.1",
+      "resolved": "https://registry.npmjs.org/@defra/hapi-tracing/-/hapi-tracing-1.30.1.tgz",
+      "integrity": "sha512-twwbMdq0mFcfe26mjSzZiRvwlzz4j3DIUy0LMuRuB+bjtVVYcVhw3nD2V9H8dyFDd0uadZqe12Z8a+L5B9YHog==",
       "hasInstallScript": true,
       "license": "OGL-UK-3.0",
       "engines": {
@@ -4869,9 +4869,9 @@
       }
     },
     "node_modules/@mongodb-js/saslprep": {
-      "version": "1.4.6",
-      "resolved": "https://registry.npmjs.org/@mongodb-js/saslprep/-/saslprep-1.4.6.tgz",
-      "integrity": "sha512-y+x3H1xBZd38n10NZF/rEBlvDOOMQ6LKUTHqr8R9VkJ+mmQOYtJFxIlkkK8fZrtOiL6VixbOBWMbZGBdal3Z1g==",
+      "version": "1.6.1",
+      "resolved": "https://registry.npmjs.org/@mongodb-js/saslprep/-/saslprep-1.6.1.tgz",
+      "integrity": "sha512-D4CQtk9IwjCLAvCf1xvHEod3960q8XMUzfmdRU9qjUNlHnesGuTOvJcOTaPm9koZ1caUKA2aTbszZiAkcmSgmg==",
       "license": "MIT",
       "dependencies": {
         "sparse-bitfield": "^3.0.3"
@@ -6894,9 +6894,9 @@
       }
     },
     "node_modules/bson": {
-      "version": "7.2.0",
-      "resolved": "https://registry.npmjs.org/bson/-/bson-7.2.0.tgz",
-      "integrity": "sha512-YCEo7KjMlbNlyHhz7zAZNDpIpQbd+wOEHJYezv0nMYTn4x31eIUM2yomNNubclAt63dObUzKHWsBLJ9QcZNSnQ==",
+      "version": "7.3.3",
+      "resolved": "https://registry.npmjs.org/bson/-/bson-7.3.3.tgz",
+      "integrity": "sha512-oz3LwE3qGEhTCSyhzQRLY3Bj1NLOsjFMf6tcmY5J8M+3R7EVcmoBfSHWvjUK3yXCLDUsGpIuB3aQL4nDZ1EV/g==",
       "license": "Apache-2.0",
       "engines": {
         "node": ">=20.19.0"
@@ -7644,10 +7644,13 @@
       }
     },
     "node_modules/dotenv": {
-      "version": "17.4.2",
-      "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-17.4.2.tgz",
-      "integrity": "sha512-nI4U3TottKAcAD9LLud4Cb7b2QztQMUEfHbvhTH09bqXTxnSie8WnjPALV/WMCrJZ6UV/qHJ6L03OqO3LcdYZw==",
+      "version": "18.0.9",
+      "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-18.0.9.tgz",
+      "integrity": "sha512-3fVOW4cB02R066PUSwn8O4TJyz9NckQl7F81blIbaq9jKBm2tSmOKky7ZHIXzGvkVPXCSn6jkpziBPZdGFs8Tw==",
       "license": "BSD-2-Clause",
+      "bin": {
+        "dotenv": "dist/index.cjs"
+      },
       "engines": {
         "node": ">=12"
       },
@@ -13052,14 +13055,14 @@
       }
     },
     "node_modules/mongodb": {
-      "version": "7.2.0",
-      "resolved": "https://registry.npmjs.org/mongodb/-/mongodb-7.2.0.tgz",
-      "integrity": "sha512-F/2+BMZtLVhY30ioZp0dAmZ+IRZMBqI+nrv6t5+9/1AIwCa8sMRC3jBf81lpxMhnZgqq8CoUD503Z1oZWq1/sw==",
+      "version": "7.7.0",
+      "resolved": "https://registry.npmjs.org/mongodb/-/mongodb-7.7.0.tgz",
+      "integrity": "sha512-XG1xXEqyouAV8GCb3PuRaujofeXKpAJAPvXYWZgHl6Dz4QHSJ1nRLl0+GpqaLTwKvC0RFE9truOur34RNFY1nw==",
       "license": "Apache-2.0",
       "dependencies": {
-        "@mongodb-js/saslprep": "^1.3.0",
-        "bson": "^7.2.0",
-        "mongodb-connection-string-url": "^7.0.0"
+        "@mongodb-js/saslprep": "^1.5.0",
+        "bson": "^7.3.2",
+        "mongodb-connection-string-url": "^7.0.2"
       },
       "engines": {
         "node": ">=20.19.0"
@@ -13069,7 +13072,7 @@
         "@mongodb-js/zstd": "^7.0.0",
         "gcp-metadata": "^7.0.1",
         "kerberos": "^7.0.0",
-        "mongodb-client-encryption": ">=7.0.0 <7.1.0",
+        "mongodb-client-encryption": "^7.2.0",
         "snappy": "^7.3.2",
         "socks": "^2.8.6"
       },
@@ -13098,9 +13101,9 @@
       }
     },
     "node_modules/mongodb-connection-string-url": {
-      "version": "7.0.1",
-      "resolved": "https://registry.npmjs.org/mongodb-connection-string-url/-/mongodb-connection-string-url-7.0.1.tgz",
-      "integrity": "sha512-h0AZ9A7IDVwwHyMxmdMXKy+9oNlF0zFoahHiX3vQ8e3KFcSP3VmsmfvtRSuLPxmyv2vjIDxqty8smTgie/SNRQ==",
+      "version": "7.0.2",
+      "resolved": "https://registry.npmjs.org/mongodb-connection-string-url/-/mongodb-connection-string-url-7.0.2.tgz",
+      "integrity": "sha512-ZoS07RoFqpKYQwAk59qmrx8+jJHNHU30UjlU96QktiGn1ltvDr+vCznLX5DiUBLEpMAHatHNWV1nM/74ul66kA==",
       "license": "Apache-2.0",
       "dependencies": {
         "@types/whatwg-url": "^13.0.0",
diff --git a/package.json b/package.json
index 3bd7642c..f358094f 100644
--- a/package.json
+++ b/package.json
@@ -46,19 +46,19 @@
     "@aws-sdk/credential-providers": "3.1073.0",
     "@defra/forms-common": "^0.1.0",
     "@defra/forms-model": "^4.0.0",
-    "@defra/hapi-tracing": "^1.30.0",
+    "@defra/hapi-tracing": "^1.30.1",
     "@elastic/ecs-pino-format": "^1.5.0",
     "@hapi/hapi": "^21.4.9",
     "@hapi/hoek": "^11.0.7",
     "@hapi/jwt": "^3.2.3",
     "convict": "^6.2.5",
     "date-fns": "^4.1.0",
-    "dotenv": "^17.4.2",
+    "dotenv": "^18.0.9",
     "hapi-pino": "^13.0.0",
     "http-status-codes": "^2.3.0",
     "joi": "^18.2.9",
     "migrate-mongo": "^14.0.7",
-    "mongodb": "^7.2.0",
+    "mongodb": "^7.7.0",
     "pino": "^10.3.1",
     "pino-pretty": "^13.1.3",
     "proxy-agent": "^6.5.0"