diff --git a/Bff.AppHost/Bff.AppHost.csproj b/Bff.AppHost/Bff.AppHost.csproj
index 7d00a17..2fbf33e 100644
--- a/Bff.AppHost/Bff.AppHost.csproj
+++ b/Bff.AppHost/Bff.AppHost.csproj
@@ -9,8 +9,8 @@
   </PropertyGroup>
 
   <ItemGroup>
-	<PackageReference Include="Aspire.Hosting.AppHost" Version="13.4.6" />
-	<PackageReference Include="Aspire.Hosting.JavaScript" Version="13.4.6" />
+	<PackageReference Include="Aspire.Hosting.AppHost" Version="13.6.0" />
+	<PackageReference Include="Aspire.Hosting.JavaScript" Version="13.6.0" />
   </ItemGroup>
 
   <ItemGroup>
diff --git a/Bff.ServiceDefaults/Bff.ServiceDefaults.csproj b/Bff.ServiceDefaults/Bff.ServiceDefaults.csproj
index 9e675fc..e19b6db 100644
--- a/Bff.ServiceDefaults/Bff.ServiceDefaults.csproj
+++ b/Bff.ServiceDefaults/Bff.ServiceDefaults.csproj
@@ -10,13 +10,13 @@
   <ItemGroup>
     <FrameworkReference Include="Microsoft.AspNetCore.App" />
 
-    <PackageReference Include="Microsoft.Extensions.Http.Resilience" Version="10.7.0" />
-    <PackageReference Include="Microsoft.Extensions.ServiceDiscovery" Version="10.7.0" />
-    <PackageReference Include="OpenTelemetry.Exporter.OpenTelemetryProtocol" Version="1.16.0" />
-    <PackageReference Include="OpenTelemetry.Extensions.Hosting" Version="1.16.0" />
-    <PackageReference Include="OpenTelemetry.Instrumentation.AspNetCore" Version="1.15.2" />
-    <PackageReference Include="OpenTelemetry.Instrumentation.Http" Version="1.15.1" />
-    <PackageReference Include="OpenTelemetry.Instrumentation.Runtime" Version="1.15.1" />
+    <PackageReference Include="Microsoft.Extensions.Http.Resilience" Version="10.10.0" />
+    <PackageReference Include="Microsoft.Extensions.ServiceDiscovery" Version="10.10.0" />
+    <PackageReference Include="OpenTelemetry.Exporter.OpenTelemetryProtocol" Version="1.19.1" />
+    <PackageReference Include="OpenTelemetry.Extensions.Hosting" Version="1.19.1" />
+    <PackageReference Include="OpenTelemetry.Instrumentation.AspNetCore" Version="1.19.0" />
+    <PackageReference Include="OpenTelemetry.Instrumentation.Http" Version="1.19.0" />
+    <PackageReference Include="OpenTelemetry.Instrumentation.Runtime" Version="1.19.0" />
   </ItemGroup>
 
 </Project>
diff --git a/README.md b/README.md
index a1ddb51..67aca54 100644
--- a/README.md
+++ b/README.md
@@ -88,6 +88,7 @@ ng update @angular/cli @angular/core
 
 ## History
 
+- 2026-09-30 Updated NuGet packages, update Aspire
 - 2026-06-24 Updated NuGet packages, added new security headers
 - 2026-05-16 Updated NuGet packages, updated Angular to 21.2.0
 - 2026-03-18 Updated .NET Aspire to 13.1.2, updated xunit to xunit.v3, moved permissions from workflow level to job level, updated npm packages
diff --git a/global.json b/global.json
new file mode 100644
index 0000000..3140116
--- /dev/null
+++ b/global.json
@@ -0,0 +1,5 @@
+{
+  "test": {
+    "runner": "Microsoft.Testing.Platform"
+  }
+}
diff --git a/server/BffMicrosoftEntraID.Server.csproj b/server/BffMicrosoftEntraID.Server.csproj
index d02a193..10db49e 100644
--- a/server/BffMicrosoftEntraID.Server.csproj
+++ b/server/BffMicrosoftEntraID.Server.csproj
@@ -21,12 +21,13 @@
 	</ItemGroup>
   
 	<ItemGroup>
-		<PackageReference Include="Microsoft.AspNetCore.Authentication.OpenIdConnect" Version="10.0.9" NoWarn="NU1605" />
-		<PackageReference Include="Microsoft.AspNetCore.Components.WebAssembly.Server" Version="10.0.9" />
-		<PackageReference Include="Microsoft.AspNetCore.OpenApi" Version="10.0.9" />
-		<PackageReference Include="Microsoft.Identity.Web.GraphServiceClient" Version="4.11.0" />
-		<PackageReference Include="Microsoft.Identity.Web" Version="4.11.0" />
-		<PackageReference Include="Microsoft.Identity.Web.UI" Version="4.11.0" />
+		<PackageReference Include="Microsoft.AspNetCore.Authentication.OpenIdConnect" Version="10.0.12" NoWarn="NU1605" />
+		<PackageReference Include="Microsoft.AspNetCore.Components.WebAssembly.Server" Version="10.0.12" />
+		<PackageReference Include="Microsoft.AspNetCore.OpenApi" Version="10.0.12" />
+		<PackageReference Include="Microsoft.Identity.Web.GraphServiceClient" Version="4.15.0" />
+		<PackageReference Include="Microsoft.Identity.Web" Version="4.15.0" />
+		<PackageReference Include="Microsoft.Identity.Web.UI" Version="4.15.0" />
+		<PackageReference Include="Microsoft.OpenApi" Version="2.12.2" />
 		<PackageReference Include="NetEscapades.AspNetCore.SecurityHeaders" Version="1.3.1" />
 		<PackageReference Include="NetEscapades.AspNetCore.SecurityHeaders.TagHelpers" Version="1.3.1" />
 		<PackageReference Include="Yarp.ReverseProxy" Version="2.3.0" />
diff --git a/tests/BffMicrosoftEntraID.Server.IntegrationTests.csproj b/tests/BffMicrosoftEntraID.Server.IntegrationTests.csproj
index 16b0fe0..f1013ec 100644
--- a/tests/BffMicrosoftEntraID.Server.IntegrationTests.csproj
+++ b/tests/BffMicrosoftEntraID.Server.IntegrationTests.csproj
@@ -8,14 +8,14 @@
   </PropertyGroup>
 
   <ItemGroup>
-    <PackageReference Include="coverlet.collector" Version="10.0.1">
+    <PackageReference Include="coverlet.collector" Version="10.1.0">
       <PrivateAssets>all</PrivateAssets>
       <IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
     </PackageReference>
-    <PackageReference Include="Microsoft.AspNetCore.Mvc.Testing" Version="10.0.9" />
-    <PackageReference Include="Microsoft.NET.Test.Sdk" Version="18.7.0" />
-	<PackageReference Include="xunit.v3" Version="3.2.2" />
-    <PackageReference Include="xunit.runner.visualstudio" Version="3.1.5">
+    <PackageReference Include="Microsoft.AspNetCore.Mvc.Testing" Version="10.0.12" />
+    <PackageReference Include="Microsoft.NET.Test.Sdk" Version="18.10.1" />
+	<PackageReference Include="xunit.v3" Version="4.0.1" />
+    <PackageReference Include="xunit.runner.visualstudio" Version="4.0.0">
       <PrivateAssets>all</PrivateAssets>
       <IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
     </PackageReference>
diff --git a/ui/package-lock.json b/ui/package-lock.json
index 5cf1d5b..f72b1ed 100644
--- a/ui/package-lock.json
+++ b/ui/package-lock.json
@@ -6,7 +6,7 @@
   "packages": {
     "": {
       "name": "ui",
-      "version": "1.0.1",
+      "version": "2.0.4",
       "dependencies": {
         "@angular/common": "^21.2.13",
         "@angular/compiler": "^21.2.13",