diff --git a/dependencyCheckSuppression.xml b/dependencyCheckSuppression.xml
index 922ebc022f..6d8d902ffb 100644
--- a/dependencyCheckSuppression.xml
+++ b/dependencyCheckSuppression.xml
@@ -481,21 +481,40 @@
     </suppress>
 
     <!--
-    CVE in example code. New version not yet available.
+    [FP]: pgvector java library matching CPE for pgvector postgres extension
+    https://github.com/dependency-check/DependencyCheck/issues/8769
     -->
     <suppress>
         <notes><![CDATA[
-    file name: tomcat-*-11.0.24.jar
+    file name: pgvector-0.1.6.jar
     ]]></notes>
-        <packageUrl regex="true">^pkg:maven/org\.apache\.tomcat/tomcat-.*@.*$</packageUrl>
-        <cve>CVE-2026-66299</cve>
+        <packageUrl regex="true">^pkg:maven/com\.pgvector/pgvector@.*$</packageUrl>
+        <cpe>cpe:/a:pgvector_project:pgvector</cpe>
+    </suppress>
+
+    <!--
+    [FP]: opentelemetry-js is the OpenTelemetry JavaScript Client, not the Java client we pull in.
+    -->
+    <suppress>
+        <notes><![CDATA[
+    file name: opentelemetry-api-1.60.1.jar
+    ]]></notes>
+        <packageUrl regex="true">^pkg:maven/io\.opentelemetry/opentelemetry-api@.*$</packageUrl>
+        <cpe>cpe:/a:opentelemetry:opentelemetry</cpe>
+    </suppress>
+    <suppress>
+        <notes><![CDATA[
+    file name: opentelemetry-common-1.60.1.jar
+    ]]></notes>
+        <packageUrl regex="true">^pkg:maven/io\.opentelemetry/opentelemetry-common@.*$</packageUrl>
+        <cpe>cpe:/a:opentelemetry:opentelemetry</cpe>
     </suppress>
     <suppress>
         <notes><![CDATA[
-    file name: tomcat-embed-*-11.0.24.jar
+    file name: opentelemetry-context-1.60.1.jar
     ]]></notes>
-        <packageUrl regex="true">^pkg:maven/org\.apache\.tomcat\.embed/tomcat-embed-.*@.*$</packageUrl>
-        <cve>CVE-2026-66299</cve>
+        <packageUrl regex="true">^pkg:maven/io\.opentelemetry/opentelemetry-context@.*$</packageUrl>
+        <cpe>cpe:/a:opentelemetry:opentelemetry</cpe>
     </suppress>
 
 
diff --git a/gradle.properties b/gradle.properties
index d14e8ee9b7..baf53fbc05 100644
--- a/gradle.properties
+++ b/gradle.properties
@@ -98,7 +98,7 @@ apacheDirectoryVersion=2.1.8
 apacheMinaVersion=2.2.9
 
 # Usually matches the version specified as a Spring Boot dependency (see springBootVersion below)
-apacheTomcatVersion=11.0.24
+apacheTomcatVersion=11.0.25
 
 # (mothership) -> json-path -> json-smart -> accessor-smart
 # (core) -> graalvm