diff --git a/mateclaw-server/pom.xml b/mateclaw-server/pom.xml
index ae3a9dc4..81cf535f 100644
--- a/mateclaw-server/pom.xml
+++ b/mateclaw-server/pom.xml
@@ -228,26 +228,26 @@
         <dependency>
             <groupId>com.google.zxing</groupId>
             <artifactId>core</artifactId>
-            <version>3.5.3</version>
+            <version>3.5.4</version>
         </dependency>
         <dependency>
             <groupId>com.google.zxing</groupId>
             <artifactId>javase</artifactId>
-            <version>3.5.3</version>
+            <version>3.5.4</version>
         </dependency>
 
         <!-- ===== Playwright (Browser Automation) ===== -->
         <dependency>
             <groupId>com.microsoft.playwright</groupId>
             <artifactId>playwright</artifactId>
-            <version>1.52.0</version>
+            <version>1.59.0</version>
         </dependency>
 
         <!-- ===== JDA（Discord Bot Gateway WebSocket 长连接） ===== -->
         <dependency>
             <groupId>net.dv8tion</groupId>
             <artifactId>JDA</artifactId>
-            <version>5.2.3</version>
+            <version>6.4.1</version>
             <exclusions>
                 <!-- 排除 audio 相关依赖（MateClaw 不需要语音功能） -->
                 <exclusion>
@@ -267,17 +267,17 @@
         <dependency>
             <groupId>com.slack.api</groupId>
             <artifactId>slack-api-client</artifactId>
-            <version>1.44.2</version>
+            <version>1.48.1</version>
         </dependency>
         <dependency>
             <groupId>com.slack.api</groupId>
             <artifactId>bolt-socket-mode</artifactId>
-            <version>1.44.2</version>
+            <version>1.48.1</version>
         </dependency>
         <dependency>
             <groupId>org.glassfish.tyrus.bundles</groupId>
             <artifactId>tyrus-standalone-client</artifactId>
-            <version>2.2.0</version>
+            <version>2.2.2</version>
         </dependency>
 
         <!-- ===== Apache POI (in-process .docx generation) ===== -->
@@ -302,12 +302,12 @@
         <dependency>
             <groupId>org.apache.xmlgraphics</groupId>
             <artifactId>batik-transcoder</artifactId>
-            <version>1.18</version>
+            <version>1.19</version>
         </dependency>
         <dependency>
             <groupId>org.apache.xmlgraphics</groupId>
             <artifactId>batik-codec</artifactId>
-            <version>1.18</version>
+            <version>1.19</version>
         </dependency>
 
         <!-- ===== jsoup (HTML cleanup for Wiki ingest, RFC-051 PR-1c) ===== -->
@@ -319,7 +319,7 @@
         <dependency>
             <groupId>org.jsoup</groupId>
             <artifactId>jsoup</artifactId>
-            <version>1.18.3</version>
+            <version>1.22.2</version>
         </dependency>
 
         <!-- ===== Apache Tika (RFC-051 PR-?: Java-side last-resort extractor) ===== -->
@@ -338,24 +338,24 @@
         <dependency>
             <groupId>org.apache.tika</groupId>
             <artifactId>tika-core</artifactId>
-            <version>3.0.0</version>
+            <version>3.3.0</version>
         </dependency>
         <dependency>
             <groupId>org.apache.tika</groupId>
             <artifactId>tika-parser-pdf-module</artifactId>
-            <version>3.0.0</version>
+            <version>3.3.0</version>
         </dependency>
         <dependency>
             <groupId>org.apache.tika</groupId>
             <artifactId>tika-parser-microsoft-module</artifactId>
-            <version>3.0.0</version>
+            <version>3.3.0</version>
         </dependency>
 
         <!-- ===== Markdown -> PDF rendering =====
-             Flying Saucer 9.13 ships a single `flying-saucer-pdf` artifact that
-             writes PDF via OpenPDF (LGPL fork of iText 5). It does NOT depend on
+             Flying Saucer ships a single `flying-saucer-pdf` artifact that
+             writes PDF via OpenPDF (LGPL fork of iText). It does NOT depend on
              PDFBox, so it sidesteps a version conflict with the existing
-             pdfbox:3.0.3 dependency. CSS3 paged-media features (@page,
+             pdfbox dependency. CSS3 paged-media features (@page,
              counter(page), counter(pages), @top-center / @bottom-center) are
              supported, which the cover / header / footer rendering relies on.
 
@@ -368,7 +368,7 @@
         <dependency>
             <groupId>org.xhtmlrenderer</groupId>
             <artifactId>flying-saucer-pdf</artifactId>
-            <version>9.13.0</version>
+            <version>10.2.0</version>
         </dependency>
         <dependency>
             <groupId>org.commonmark</groupId>
@@ -434,12 +434,12 @@
         <dependency>
             <groupId>net.javacrumbs.shedlock</groupId>
             <artifactId>shedlock-spring</artifactId>
-            <version>5.16.0</version>
+            <version>7.7.0</version>
         </dependency>
         <dependency>
             <groupId>net.javacrumbs.shedlock</groupId>
             <artifactId>shedlock-provider-jdbc-template</artifactId>
-            <version>5.16.0</version>
+            <version>7.7.0</version>
         </dependency>
 
         <!-- Graph algorithms (community detection, shortest path, centrality)
@@ -447,7 +447,7 @@
         <dependency>
             <groupId>org.jgrapht</groupId>
             <artifactId>jgrapht-core</artifactId>
-            <version>1.5.2</version>
+            <version>1.5.3</version>
         </dependency>
 
         <!-- PDF parsing for inline image extraction (wiki vision-in pipeline).
@@ -456,7 +456,7 @@
         <dependency>
             <groupId>org.apache.pdfbox</groupId>
             <artifactId>pdfbox</artifactId>
-            <version>3.0.3</version>
+            <version>3.0.7</version>
         </dependency>
 
         <!-- Expression language used by the workflow compiler to evaluate
@@ -467,7 +467,7 @@
         <dependency>
             <groupId>io.pebbletemplates</groupId>
             <artifactId>pebble</artifactId>
-            <version>3.2.2</version>
+            <version>4.1.1</version>
         </dependency>
     </dependencies>
 
diff --git a/mateclaw-server/src/main/java/vip/mate/tool/document/pdf/FlyingSaucerPdfBackend.java b/mateclaw-server/src/main/java/vip/mate/tool/document/pdf/FlyingSaucerPdfBackend.java
index 7f9cbae0..4aa578cc 100644
--- a/mateclaw-server/src/main/java/vip/mate/tool/document/pdf/FlyingSaucerPdfBackend.java
+++ b/mateclaw-server/src/main/java/vip/mate/tool/document/pdf/FlyingSaucerPdfBackend.java
@@ -1,6 +1,6 @@
 package vip.mate.tool.document.pdf;
 
-import com.lowagie.text.pdf.BaseFont;
+import org.openpdf.text.pdf.BaseFont;
 import lombok.RequiredArgsConstructor;
 import lombok.extern.slf4j.Slf4j;
 import org.commonmark.ext.autolink.AutolinkExtension;
@@ -118,7 +118,7 @@ public class FlyingSaucerPdfBackend implements PdfBackend {
         // the output PDF — without IDENTITY_H glyph indexing, Chinese characters
         // render as blanks even when the font file is found.
         //
-        // OpenPDF 2.0.5 has a known weakness with Apple-style .ttc font
+        // OpenPDF has a known weakness with Apple-style .ttc font
         // collections (PingFang.ttc, STHeiti.ttc, Songti.ttc on macOS): the
         // load succeeds but the cmap is empty, charExists returns false even
         // for ASCII, and the rendered PDF is a blank page. We probe the font