diff --git a/pom.xml b/pom.xml
index 5cb163d7e4a..39a4908f48c 100644
--- a/pom.xml
+++ b/pom.xml
@@ -125,21 +125,18 @@ under the License.
 
   <properties>
     <javaVersion>8</javaVersion>
-    <minimalMavenBuildVersion>3.5.4</minimalMavenBuildVersion>
-
-    <sisuVersion>0.9.0.M2</sisuVersion>
-    <classWorldsVersion>2.7.0</classWorldsVersion>
-    <commonsCliVersion>1.5.0</commonsCliVersion>
-    <commonsIoVersion>2.11.0</commonsIoVersion>
-    <commonsLangVersion>3.12.0</commonsLangVersion>
+    <classWorldsVersion>2.8.0</classWorldsVersion>
+    <commonsCliVersion>1.7.0</commonsCliVersion>
+    <commonsIoVersion>2.16.1</commonsIoVersion>
+    <commonsLangVersion>3.14.0</commonsLangVersion>
     <junitVersion>4.13.2</junitVersion>
     <hamcrestVersion>2.2</hamcrestVersion>
     <mockitoVersion>4.11.0</mockitoVersion>
-    <!-- plexus 2.1.1 is broken, no new release exists yet (nor will exist) -->
+    <!-- plexus 2.1.1 is broken -->
     <plexusVersion>2.1.0</plexusVersion>
-    <plexusInterpolationVersion>1.26</plexusInterpolationVersion>
-    <!-- Blocked by 3.4.0+ changes, see MNG-7710 -->
-    <plexusUtilsVersion>3.5.1</plexusUtilsVersion>
+    <plexusInterpolationVersion>1.27</plexusInterpolationVersion>
+    <!-- Blocked by 3.4.0+ changes, see MNG-7710, downgrade from parent 4.0.1 -->
+    <version.plexus-utils>3.5.1</version.plexus-utils>
     <guiceVersion>5.1.0</guiceVersion>
     <guavaVersion>32.0.1-jre</guavaVersion>
     <guavafailureaccessVersion>1.0.1</guavafailureaccessVersion>
@@ -149,7 +146,7 @@ under the License.
     <jxpathVersion>1.3</jxpathVersion>
     <resolverVersion>1.9.20</resolverVersion>
     <slf4jVersion>1.7.36</slf4jVersion>
-    <xmlunitVersion>2.9.1</xmlunitVersion>
+    <xmlunitVersion>2.10.0</xmlunitVersion>
     <powermockVersion>2.0.9</powermockVersion>
     <maven.test.redirectTestOutputToFile>true</maven.test.redirectTestOutputToFile>
     <!-- Control the name of the distribution and information output by mvn -->
@@ -238,7 +235,7 @@ under the License.
       <dependency>
         <groupId>org.codehaus.plexus</groupId>
         <artifactId>plexus-utils</artifactId>
-        <version>${plexusUtilsVersion}</version>
+        <version>${version.plexus-utils}</version>
       </dependency>
       <dependency>
         <groupId>com.google.inject</groupId>
@@ -292,7 +289,7 @@ under the License.
       <dependency>
         <groupId>org.eclipse.sisu</groupId>
         <artifactId>org.eclipse.sisu.plexus</artifactId>
-        <version>${sisuVersion}</version>
+        <version>${version.sisu-maven-plugin}</version>
         <exclusions>
           <exclusion>
             <!-- Way too easy to conflict with plugins to be in Maven and leak in plugins -->
@@ -304,7 +301,7 @@ under the License.
       <dependency>
         <groupId>org.eclipse.sisu</groupId>
         <artifactId>org.eclipse.sisu.inject</artifactId>
-        <version>${sisuVersion}</version>
+        <version>${version.sisu-maven-plugin}</version>
       </dependency>
       <dependency>
         <groupId>javax.inject</groupId>
@@ -340,7 +337,7 @@ under the License.
       <dependency>
         <groupId>org.apache.maven.shared</groupId>
         <artifactId>maven-shared-utils</artifactId>
-        <version>3.3.4</version>
+        <version>3.4.2</version>
         <exclusions>
           <!-- We use org.apache.maven.shared.utils.logging only in Maven Core -->
           <exclusion>
@@ -352,7 +349,7 @@ under the License.
       <dependency>
         <groupId>org.fusesource.jansi</groupId>
         <artifactId>jansi</artifactId>
-        <version>2.4.0</version>
+        <version>2.4.1</version>
       </dependency>
       <dependency>
         <groupId>org.slf4j</groupId>