diff --git a/validator/WORKSPACE b/validator/WORKSPACE
index 0510b05e5e72b..a8f205007573f 100644
--- a/validator/WORKSPACE
+++ b/validator/WORKSPACE
@@ -4,47 +4,47 @@ load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")
 
 http_archive(
     name = "com_google_absl",
-    sha256 = "050071396c0483035c9545daaaf953a47449b971978631db040cd31bcb2d3dde",
-    strip_prefix = "abseil-cpp-fc44fa053cc91193d2bb60fb9356bcecb301242e",
-    urls = ["https://github.com/abseil/abseil-cpp/archive/fc44fa053cc91193d2bb60fb9356bcecb301242e.zip"],
+    sha256 = "c66911f9b09c606fdfcbcc45b706da7297aac4c81c9bd5720c8b9985ef70f805",
+    strip_prefix = "abseil-cpp-f46495ea96f68fc3f6c394f099b2992743f6ff7f",
+    urls = ["https://github.com/abseil/abseil-cpp/archive/f46495ea96f68fc3f6c394f099b2992743f6ff7f.zip"],
 )
 
 http_archive(
     name = "com_google_googletest",
-    sha256 = "c83f69fa8cb7a503d3ae9f736cf679b0846772b1ae955c63133520b749491a7c",
-    strip_prefix = "googletest-8a6feabf04bec8fb125e0df0ad1195c42350725f",
-    urls = ["https://github.com/google/googletest/archive/8a6feabf04bec8fb125e0df0ad1195c42350725f.zip"],  # 2019-01-07
+    sha256 = "545a75de46a36c4844a8012c3c667fc0079d4b21ea12398c68ea81097054166c",
+    strip_prefix = "googletest-3ef16ef8b30f52a8f1ff677faa1730e76835aa40",
+    urls = ["https://github.com/google/googletest/archive/3ef16ef8b30f52a8f1ff677faa1730e76835aa40.zip"],  # 2019-01-07
 )
 
 http_archive(
     name = "com_google_protobuf",
-    sha256 = "750428a8c7f1a75a8e6027e30b46a1c2f0475205f44563589736e0f279b938c0",
-    strip_prefix = "protobuf-f0dc78d7e6e331b8c6bb2d5283e06aa26883ca7c",
-    urls = ["https://github.com/protocolbuffers/protobuf/archive/f0dc78d7e6e331b8c6bb2d5283e06aa26883ca7c.zip"],
+    sha256 = "32d5ec74935bb774281f7121f726d70a0790938d8628d974ac6e3b79d4f1578d",
+    strip_prefix = "protobuf-21c545c8c5cec0b052dc7715b778f0353d37d02c",
+    urls = ["https://github.com/protocolbuffers/protobuf/archive/21c545c8c5cec0b052dc7715b778f0353d37d02c.zip"],
 )
 load("@com_google_protobuf//:protobuf_deps.bzl", "protobuf_deps")
 protobuf_deps()
 
 http_archive(
     name = "com_github_gflags_gflags",
-    sha256 = "017e0a91531bfc45be9eaf07e4d8fed33c488b90b58509dbd2e33a33b2648ae6",
-    strip_prefix = "gflags-a738fdf9338412f83ab3f26f31ac11ed3f3ec4bd",
-    urls = ["https://github.com/gflags/gflags/archive/a738fdf9338412f83ab3f26f31ac11ed3f3ec4bd.zip"],
+    sha256 = "4753cbb1e1460d54d03cc1413960a63a46b42c0d691dad45c3f0ce71741d97d6",
+    strip_prefix = "gflags-03a4842c9c6aaef438d7bf0c84e8a62c8064992b",
+    urls = ["https://github.com/gflags/gflags/archive/03a4842c9c6aaef438d7bf0c84e8a62c8064992b.zip"],
 )
 
 http_archive(
     name = "com_googlesource_code_re2",
-    sha256 = "e9e9cd5902c711131825f7dd45dfdb063555171d8d26300b336aace5f97215ef",
-    strip_prefix = "re2-87d09ef4f0307e53f1d3796843f4b90d41cfccaa",
-    urls = ["https://github.com/google/re2/archive/87d09ef4f0307e53f1d3796843f4b90d41cfccaa.zip"],
+    sha256 = "566f95b2427efc0ef8926d2df167cc77ccba55c06f206abc02e8c17081fa5ffd",
+    strip_prefix = "re2-6dcd83d60f7944926bfd308cc13979fc53dd69ca",
+    urls = ["https://github.com/google/re2/archive/6dcd83d60f7944926bfd308cc13979fc53dd69ca.zip"],
 )
 
 # rules_cc defines rules for generating C++ code from Protocol Buffers.
 http_archive(
     name = "rules_cc",
-    sha256 = "97a7c3f2f601a0d0cc9d26a4173d65e4b7028776a66e2e4fc736e49a5300a483",
-    strip_prefix = "rules_cc-b039a551a7b41b70e426e4a3cd60346c89db9b6c",
-    urls = ["https://github.com/bazelbuild/rules_cc/archive/b039a551a7b41b70e426e4a3cd60346c89db9b6c.zip"],
+    sha256 = "22a09267461164a86e6fdfc6eee3e9018a5cd993c8dcca4c41aa0b5941f27984",
+    strip_prefix = "rules_cc-0d1b084cfa75dc2f41e4b638ebd544fc93b82edf",
+    urls = ["https://github.com/bazelbuild/rules_cc/archive/0d1b084cfa75dc2f41e4b638ebd544fc93b82edf.zip"],
 )
 load("@rules_cc//cc:repositories.bzl", "rules_cc_dependencies")
 rules_cc_dependencies()
@@ -52,11 +52,11 @@ rules_cc_dependencies()
 # rules_proto defines abstract rules for building Protocol Buffers.
 http_archive(
     name = "rules_proto",
-    sha256 = "36e4de702036d31b649f96519676509c4027dc10cc3c97f0335c199b305d45b7",
-    strip_prefix = "rules_proto-8aa1e67c09bc8df20df33886909d44129cfb7e63",
+    sha256 = "2b0f9c9314edcf7e0937f6b68124494c58643df763fd59e37fb5dc742e0202d4",
+    strip_prefix = "rules_proto-557db790e7a71993ff85bf523099dfd25060ae2f",
     urls = [
-        "https://mirror.bazel.build/github.com/bazelbuild/rules_proto/archive/8aa1e67c09bc8df20df33886909d44129cfb7e63.tar.gz",
-        "https://github.com/bazelbuild/rules_proto/archive/8aa1e67c09bc8df20df33886909d44129cfb7e63.tar.gz",
+        "https://mirror.bazel.build/github.com/bazelbuild/rules_proto/archive/557db790e7a71993ff85bf523099dfd25060ae2f.tar.gz",
+        "https://github.com/bazelbuild/rules_proto/archive/557db790e7a71993ff85bf523099dfd25060ae2f.tar.gz",
     ],
 )
 load("@rules_proto//proto:repositories.bzl", "rules_proto_dependencies", "rules_proto_toolchains")
@@ -65,9 +65,9 @@ rules_proto_toolchains()
 
 http_archive(
     name = "emsdk",
-    sha256 = "836e9dc2ea0df6e9369f58fcb884df0447304a089cdbef2cd06a28cf2d06b53d",
-    strip_prefix = "emsdk-fc645b7626ebf86530dbd82fbece74d457e7ae07/bazel",
-    url = "https://github.com/emscripten-core/emsdk/archive/fc645b7626ebf86530dbd82fbece74d457e7ae07.tar.gz",
+    sha256 = "a2a498bf4ee62195b1e3cfd323eabc359d133db7247a2fe91af5a4eaa8178259",
+    strip_prefix = "emsdk-0fde04880048f743056bed17cb0543a42e040fae/bazel",
+    url = "https://github.com/emscripten-core/emsdk/archive/0fde04880048f743056bed17cb0543a42e040fae.tar.gz",
 )
 
 load("@emsdk//:deps.bzl", emsdk_deps = "deps")
@@ -78,18 +78,18 @@ emsdk_emscripten_deps(emscripten_version = "2.0.31")
 
 http_archive(
     name = "com_google_javascript_closure_library",
-    sha256 = "d0935e88b306fcaa37ac99031ce8a19b18e27396603eeb8f984233203768a406",
-    strip_prefix = "closure-library-e896a74c48695b2bfe0f586f13870c0bc50ce99e",
-    urls = ["https://github.com/google/closure-library/archive/e896a74c48695b2bfe0f586f13870c0bc50ce99e.tar.gz"],
+    sha256 = "90235e587dbc968a854ab11ac358c3a0fa57b4c121f540880419203dfe3cfa46",
+    strip_prefix = "closure-library-7818ff7dc0b53555a7fb3c3427e6761e88bde3a2",
+    urls = ["https://github.com/google/closure-library/archive/7818ff7dc0b53555a7fb3c3427e6761e88bde3a2.tar.gz"],
 )
 
 http_archive(
     name = "io_bazel_rules_closure",
-    sha256 = "9498e57368efb82b985db1ed426a767cbf1ba0398fd7aed632fc3908654e1b1e",
-    strip_prefix = "rules_closure-0.12.0",
+    sha256 = "70ef2b4da987bf0d266e663d7c251eac509ff70dd65bba02d41d1e86e840a569",
+    strip_prefix = "rules_closure-0.13.0",
     urls = [
-        "https://mirror.bazel.build/github.com/bazelbuild/rules_closure/archive/0.12.0.tar.gz",
-        "https://github.com/bazelbuild/rules_closure/archive/0.12.0.tar.gz",
+        "https://mirror.bazel.build/github.com/bazelbuild/rules_closure/archive/0.13.0.tar.gz",
+        "https://github.com/bazelbuild/rules_closure/archive/0.13.0.tar.gz",
     ],
 )
 
diff --git a/validator/js/gulpjs/package.json b/validator/js/gulpjs/package.json
index 02ded300901ae..1d4fc42eb99a0 100644
--- a/validator/js/gulpjs/package.json
+++ b/validator/js/gulpjs/package.json
@@ -17,12 +17,12 @@
     "url": "https://github.com/ampproject/amphtml/tree/main/validator/js/gulpjs"
   },
   "dependencies": {
-    "amphtml-validator": "1.0.35",
+    "amphtml-validator": "1.0.38",
     "through2": "4.0.2"
   },
   "devDependencies": {
     "gulp": "4.0.2",
-    "mocha": "10.2.0"
+    "mocha": "10.6.0"
   },
   "scripts": {
     "test": " ./node_modules/mocha/bin/mocha",
diff --git a/validator/js/nodejs/package-lock.json b/validator/js/nodejs/package-lock.json
index 36cba10e6d3f1..ed0f81eeef6b9 100644
--- a/validator/js/nodejs/package-lock.json
+++ b/validator/js/nodejs/package-lock.json
@@ -10,7 +10,7 @@
       "license": "Apache-2.0",
       "dependencies": {
         "colors": "1.4.0",
-        "commander": "12.0.0",
+        "commander": "12.1.0",
         "promise": "8.3.0"
       },
       "bin": {
@@ -118,9 +118,10 @@
       }
     },
     "node_modules/commander": {
-      "version": "12.0.0",
-      "resolved": "https://registry.npmjs.org/commander/-/commander-12.0.0.tgz",
-      "integrity": "sha512-MwVNWlYjDTtOjX5PiD7o5pK0UrFU/OYgcJfjjK4RaHZETNtjJqrZa9Y9ds88+A+f+d5lv+561eZ+yCKoS3gbAA==",
+      "version": "12.1.0",
+      "resolved": "https://registry.npmjs.org/commander/-/commander-12.1.0.tgz",
+      "integrity": "sha512-Vw8qHK3bZM9y/P10u3Vib8o/DdkvA2OtPtZvD871QKjy74Wj1WSKFILMPRPSdUSx5RFK1arlJzEtA4PkFgnbuA==",
+      "license": "MIT",
       "engines": {
         "node": ">=18"
       }
diff --git a/validator/js/nodejs/package.json b/validator/js/nodejs/package.json
index 0dc363c501590..2e2235df17c2a 100644
--- a/validator/js/nodejs/package.json
+++ b/validator/js/nodejs/package.json
@@ -20,7 +20,7 @@
   },
   "dependencies": {
     "colors": "1.4.0",
-    "commander": "12.0.0",
+    "commander": "12.1.0",
     "promise": "8.3.0"
   },
   "devDependencies": {
diff --git a/validator/testdata/feature_tests/regexps.html b/validator/testdata/feature_tests/regexps.html
index 3a2e0eb207016..9163533209e8b 100644
--- a/validator/testdata/feature_tests/regexps.html
+++ b/validator/testdata/feature_tests/regexps.html
@@ -68,9 +68,9 @@
     The first two examples are valid, the 3rd one is not.
   -->
   <link rel="stylesheet" type="text/css"
-        href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.3.0/css/all.min.css">
+        href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.2/css/all.min.css">
   <link rel="stylesheet" type="text/css"
-        href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.2/css/all.min.css">
+        href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.2/css/all.min.css">
   <link rel="stylesheet" type="text/css"
         href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/../bootstrap/3.3.7/all.min.css">
   <!--