diff --git a/Directory.Packages.props b/Directory.Packages.props
index 0e0f176d..57001b4a 100644
--- a/Directory.Packages.props
+++ b/Directory.Packages.props
@@ -5,9 +5,9 @@
     </PropertyGroup>
 
     <ItemGroup Label="Build tools">
-        <PackageVersion Include="ConfigureAwait.Fody" Version="3.3.1" />
-        <PackageVersion Include="Fody" Version="6.5.3" />
-        <PackageVersion Include="Microsoft.SourceLink.GitHub" Version="10.0.300" />
+        <PackageVersion Include="ConfigureAwait.Fody" Version="3.4.1" />
+        <PackageVersion Include="Fody" Version="6.9.3" />
+        <PackageVersion Include="Microsoft.SourceLink.GitHub" Version="10.0.400" />
     </ItemGroup>
 
     <ItemGroup Label="ABP Framework">
@@ -86,19 +86,19 @@
     </ItemGroup>
 
     <ItemGroup Label="ABP Studio">
-        <PackageVersion Include="Volo.Abp.Studio.Client.AspNetCore" Version="2.2.6" />
+        <PackageVersion Include="Volo.Abp.Studio.Client.AspNetCore" Version="2.2.7" />
     </ItemGroup>
 
     <ItemGroup Label="AI">
-        <PackageVersion Include="Microsoft.Extensions.AI" Version="10.6.0" />
-        <PackageVersion Include="Microsoft.Extensions.AI.Abstractions" Version="10.6.0" />
-        <PackageVersion Include="Microsoft.Extensions.AI.OpenAI" Version="10.6.0" />
-        <PackageVersion Include="Microsoft.Agents.AI" Version="1.8.0" />
+        <PackageVersion Include="Microsoft.Extensions.AI" Version="10.9.0" />
+        <PackageVersion Include="Microsoft.Extensions.AI.Abstractions" Version="10.9.0" />
+        <PackageVersion Include="Microsoft.Extensions.AI.OpenAI" Version="10.9.0" />
+        <PackageVersion Include="Microsoft.Agents.AI" Version="1.20.0" />
     </ItemGroup>
 
     <ItemGroup Label="MCP">
         <PackageVersion Include="ModelContextProtocol" Version="1.3.0" />
-        <PackageVersion Include="ModelContextProtocol.AspNetCore" Version="1.3.0" />
+        <PackageVersion Include="ModelContextProtocol.AspNetCore" Version="2.2.0" />
     </ItemGroup>
 
     <ItemGroup Label="OpenTelemetry">
@@ -106,45 +106,45 @@
              (see the plan doc section "MAF version upgrade 1.2 -> 1.5"). The host wires up the export
              pipeline so MAF's built-in CompactionTelemetry, Microsoft.Extensions.AI's
              gen_ai.* spans, and project-owned Dignite.Vault.Extract.* Meters reach OTLP. -->
-        <PackageVersion Include="OpenTelemetry.Extensions.Hosting" Version="1.15.0" />
-        <PackageVersion Include="OpenTelemetry.Exporter.Console" Version="1.15.0" />
-        <PackageVersion Include="OpenTelemetry.Exporter.OpenTelemetryProtocol" Version="1.15.0" />
-        <PackageVersion Include="OpenTelemetry.Instrumentation.AspNetCore" Version="1.13.0" />
-        <PackageVersion Include="OpenTelemetry.Instrumentation.Http" Version="1.13.0" />
+        <PackageVersion Include="OpenTelemetry.Extensions.Hosting" Version="1.18.0" />
+        <PackageVersion Include="OpenTelemetry.Exporter.Console" Version="1.18.0" />
+        <PackageVersion Include="OpenTelemetry.Exporter.OpenTelemetryProtocol" Version="1.18.0" />
+        <PackageVersion Include="OpenTelemetry.Instrumentation.AspNetCore" Version="1.18.0" />
+        <PackageVersion Include="OpenTelemetry.Instrumentation.Http" Version="1.18.0" />
     </ItemGroup>
 
     <ItemGroup Label="Infrastructure">
-        <PackageVersion Include="Microsoft.EntityFrameworkCore.InMemory" Version="10.0.2" />
-        <PackageVersion Include="Microsoft.EntityFrameworkCore.Proxies" Version="10.0.2" />
-        <PackageVersion Include="Microsoft.EntityFrameworkCore.Tools" Version="10.0.2" />
-        <PackageVersion Include="Microsoft.Extensions.FileProviders.Embedded" Version="10.0.9" />
+        <PackageVersion Include="Microsoft.EntityFrameworkCore.InMemory" Version="10.0.11" />
+        <PackageVersion Include="Microsoft.EntityFrameworkCore.Proxies" Version="10.0.11" />
+        <PackageVersion Include="Microsoft.EntityFrameworkCore.Tools" Version="10.0.11" />
+        <PackageVersion Include="Microsoft.Extensions.FileProviders.Embedded" Version="10.0.11" />
         <PackageVersion Include="Microsoft.Extensions.Options.ConfigurationExtensions" Version="10.0.2" />
         <PackageVersion Include="Azure.AI.DocumentIntelligence" Version="1.0.0" />
-        <PackageVersion Include="Microsoft.Extensions.Http" Version="10.0.0" />
-        <PackageVersion Include="ElBruno.MarkItDotNet" Version="0.6.0" />
-        <PackageVersion Include="ElBruno.MarkItDotNet.Excel" Version="0.6.0" />
+        <PackageVersion Include="Microsoft.Extensions.Http" Version="10.0.11" />
+        <PackageVersion Include="ElBruno.MarkItDotNet" Version="0.9.2" />
+        <PackageVersion Include="ElBruno.MarkItDotNet.Excel" Version="0.9.2" />
         <!-- Charset detection for legacy-encoded CSV/TSV/TXT uploads (#493). Tri-licensed MPL-1.1 /
              GPL-2.0-or-later / LGPL-2.1-or-later; taken here under the LGPL arm, which "or later" makes
              compatible with this repository's LGPL-3.0-only license. -->
-        <PackageVersion Include="UTF.Unknown" Version="2.6.0" />
+        <PackageVersion Include="UTF.Unknown" Version="2.7.0" />
         <!-- PdfPig: digital-PDF text layer + embedded raster image extraction for the PdfExtractor (#301).
              Pinned to the exact version ElBruno.MarkItDotNet 0.6.0 pulls transitively, so the host process
              resolves a single PdfPig (no upgrade/downgrade conflict between the two providers). -->
-        <PackageVersion Include="PdfPig" Version="0.1.14" />
+        <PackageVersion Include="PdfPig" Version="0.1.16" />
         <!-- OpenXML SDK: PPTX (#307) / DOCX (#308) structural extraction for the OpenXmlExtractor stack.
              Pinned to the exact version ElBruno.MarkItDotNet 0.6.0 pulls transitively (3.3.0), so the host
              process resolves a single DocumentFormat.OpenXml (no conflict between the two providers). -->
-        <PackageVersion Include="DocumentFormat.OpenXml" Version="3.3.0" />
-        <PackageVersion Include="PDFtoImage" Version="5.2.1" />
+        <PackageVersion Include="DocumentFormat.OpenXml" Version="3.5.1" />
+        <PackageVersion Include="PDFtoImage" Version="5.4.0" />
         <!-- Must exactly match the SkiaSharp main package version transitively used by PDFtoImage 5.2.1 (3.119.2). -->
-        <PackageVersion Include="SkiaSharp.NativeAssets.Linux" Version="3.119.2" />
-        <PackageVersion Include="Markdig" Version="1.1.3" />
+        <PackageVersion Include="SkiaSharp.NativeAssets.Linux" Version="4.151.2" />
+        <PackageVersion Include="Markdig" Version="1.3.2" />
         <!-- ElBruno.MarkItDotNet.Excel 0.6.0 requires ClosedXML >= 0.105.0. Keep the
              application export writer and XLSX Markdown converter on one resolved version. -->
-        <PackageVersion Include="ClosedXML" Version="0.105.0" />
+        <PackageVersion Include="ClosedXML" Version="0.105.1" />
         <PackageVersion Include="IdentityModel" Version="7.0.0" />
-        <PackageVersion Include="KubernetesClient" Version="18.0.5" />
-        <PackageVersion Include="Serilog.AspNetCore" Version="9.0.0" />
+        <PackageVersion Include="KubernetesClient" Version="19.0.2" />
+        <PackageVersion Include="Serilog.AspNetCore" Version="10.0.0" />
         <PackageVersion Include="Serilog.Sinks.Async" Version="2.1.0" />
         <PackageVersion Include="AspNetCore.HealthChecks.UI" Version="9.0.0" />
         <PackageVersion Include="AspNetCore.HealthChecks.UI.Client" Version="9.0.0" />
@@ -152,14 +152,14 @@
     </ItemGroup>
 
     <ItemGroup Label="Test">
-        <PackageVersion Include="Microsoft.NET.Test.Sdk" Version="17.14.1" />
-        <PackageVersion Include="Microsoft.AspNetCore.TestHost" Version="10.0.8" />
-        <PackageVersion Include="NSubstitute" Version="5.3.0" />
+        <PackageVersion Include="Microsoft.NET.Test.Sdk" Version="18.9.0" />
+        <PackageVersion Include="Microsoft.AspNetCore.TestHost" Version="10.0.11" />
+        <PackageVersion Include="NSubstitute" Version="6.2.0" />
         <PackageVersion Include="NSubstitute.Analyzers.CSharp" Version="1.0.17" />
         <PackageVersion Include="Shouldly" Version="4.3.0" />
         <PackageVersion Include="xunit" Version="2.9.3" />
         <PackageVersion Include="xunit.extensibility.execution" Version="2.9.3" />
-        <PackageVersion Include="xunit.runner.visualstudio" Version="3.1.4" />
+        <PackageVersion Include="xunit.runner.visualstudio" Version="4.0.0" />
     </ItemGroup>
 
 </Project>
diff --git a/core/src/Dignite.Vault.Extract.Application/Dignite.Vault.Extract.Application.csproj b/core/src/Dignite.Vault.Extract.Application/Dignite.Vault.Extract.Application.csproj
index 9d97b7f9..d6703a74 100644
--- a/core/src/Dignite.Vault.Extract.Application/Dignite.Vault.Extract.Application.csproj
+++ b/core/src/Dignite.Vault.Extract.Application/Dignite.Vault.Extract.Application.csproj
@@ -14,6 +14,7 @@
   </ItemGroup>
 
   <ItemGroup>
+    <PackageReference Include="DocumentFormat.OpenXml" VersionOverride="3.5.1" />
     <PackageReference Include="Microsoft.Extensions.AI" />
     <PackageReference Include="Microsoft.Agents.AI" />
     <PackageReference Include="Markdig" />
diff --git a/core/src/Dignite.Vault.Extract.HttpApi.Client/Dignite.Vault.Extract.HttpApi.Client.csproj b/core/src/Dignite.Vault.Extract.HttpApi.Client/Dignite.Vault.Extract.HttpApi.Client.csproj
index 9a93248a..f353e119 100644
--- a/core/src/Dignite.Vault.Extract.HttpApi.Client/Dignite.Vault.Extract.HttpApi.Client.csproj
+++ b/core/src/Dignite.Vault.Extract.HttpApi.Client/Dignite.Vault.Extract.HttpApi.Client.csproj
@@ -10,6 +10,7 @@
   </PropertyGroup>
 
   <ItemGroup>
+    <PackageReference Include="Microsoft.Extensions.Http" />
     <PackageReference Include="Volo.Abp.Http.Client"/>
     <ProjectReference Include="..\Dignite.Vault.Extract.Application.Contracts\Dignite.Vault.Extract.Application.Contracts.csproj" />
   </ItemGroup>
diff --git a/core/src/Dignite.Vault.Extract.Installer/Dignite.Vault.Extract.Installer.csproj b/core/src/Dignite.Vault.Extract.Installer/Dignite.Vault.Extract.Installer.csproj
index f00c56cb..4b482143 100644
--- a/core/src/Dignite.Vault.Extract.Installer/Dignite.Vault.Extract.Installer.csproj
+++ b/core/src/Dignite.Vault.Extract.Installer/Dignite.Vault.Extract.Installer.csproj
@@ -11,6 +11,7 @@
   </PropertyGroup>
 
   <ItemGroup>
+    <PackageReference Include="Microsoft.Extensions.FileProviders.Embedded" />
     <PackageReference Include="Volo.Abp.VirtualFileSystem"/>
   </ItemGroup>
 
diff --git a/core/src/Dignite.Vault.Extract.Mcp/Dignite.Vault.Extract.Mcp.csproj b/core/src/Dignite.Vault.Extract.Mcp/Dignite.Vault.Extract.Mcp.csproj
index 83b091b6..96513cc0 100644
--- a/core/src/Dignite.Vault.Extract.Mcp/Dignite.Vault.Extract.Mcp.csproj
+++ b/core/src/Dignite.Vault.Extract.Mcp/Dignite.Vault.Extract.Mcp.csproj
@@ -14,6 +14,7 @@
   </ItemGroup>
 
   <ItemGroup>
+    <PackageReference Include="Microsoft.Extensions.AI.Abstractions" VersionOverride="10.9.0" />
     <PackageReference Include="ModelContextProtocol.AspNetCore" />
     <!-- Used only to translate EntityNotFoundException from AppService.GetAsync into a clean McpException
          resource not-found protocol error. This is ABP's DDD abstractions package; the REST HttpApi exit
diff --git a/core/src/Dignite.Vault.Extract.Parse.ElBrunoMarkItDown/Dignite.Vault.Extract.Parse.ElBrunoMarkItDown.csproj b/core/src/Dignite.Vault.Extract.Parse.ElBrunoMarkItDown/Dignite.Vault.Extract.Parse.ElBrunoMarkItDown.csproj
index c1429b03..c0ad4b2d 100644
--- a/core/src/Dignite.Vault.Extract.Parse.ElBrunoMarkItDown/Dignite.Vault.Extract.Parse.ElBrunoMarkItDown.csproj
+++ b/core/src/Dignite.Vault.Extract.Parse.ElBrunoMarkItDown/Dignite.Vault.Extract.Parse.ElBrunoMarkItDown.csproj
@@ -10,6 +10,9 @@
   </PropertyGroup>
 
   <ItemGroup>
+    <PackageReference Include="ClosedXML" />
+    <PackageReference Include="DocumentFormat.OpenXml" />
+    <PackageReference Include="PdfPig" />
     <InternalsVisibleTo Include="Dignite.Vault.Extract.Application.Tests" />
     <PackageReference Include="Volo.Abp.Core" />
     <PackageReference Include="ElBruno.MarkItDotNet" />
diff --git a/core/test/Dignite.Vault.Extract.HttpApi.Tests/Dignite.Vault.Extract.HttpApi.Tests.csproj b/core/test/Dignite.Vault.Extract.HttpApi.Tests/Dignite.Vault.Extract.HttpApi.Tests.csproj
index 5c1ad1f9..d798fce9 100644
--- a/core/test/Dignite.Vault.Extract.HttpApi.Tests/Dignite.Vault.Extract.HttpApi.Tests.csproj
+++ b/core/test/Dignite.Vault.Extract.HttpApi.Tests/Dignite.Vault.Extract.HttpApi.Tests.csproj
@@ -17,6 +17,7 @@
          in-memory SQLite database, then drive the REST controllers through a real HttpClient. Reuses the EF
          Core test module (SQLite + Application + Domain + always-allow-auth + data seeding) so only the HTTP
          egress is added on top. -->
+    <PackageReference Include="Microsoft.AspNetCore.TestHost" VersionOverride="10.0.11" />
     <PackageReference Include="Microsoft.NET.Test.Sdk" />
     <PackageReference Include="xunit" />
     <PackageReference Include="xunit.runner.visualstudio" />
diff --git a/core/test/Dignite.Vault.Extract.TestBase/Dignite.Vault.Extract.TestBase.csproj b/core/test/Dignite.Vault.Extract.TestBase/Dignite.Vault.Extract.TestBase.csproj
index a55ae4c1..fa56449e 100644
--- a/core/test/Dignite.Vault.Extract.TestBase/Dignite.Vault.Extract.TestBase.csproj
+++ b/core/test/Dignite.Vault.Extract.TestBase/Dignite.Vault.Extract.TestBase.csproj
@@ -9,6 +9,7 @@
   </PropertyGroup>
 
   <ItemGroup>
+    <PackageReference Include="Microsoft.Extensions.FileProviders.Embedded" />
     <PackageReference Include="Microsoft.NET.Test.Sdk" />
     <PackageReference Include="NSubstitute" />
     <PackageReference Include="NSubstitute.Analyzers.CSharp">