diff --git a/.github/workflows/comment_bot.yml b/.github/workflows/comment_bot.yml
index b4dbc92df..507d6a969 100644
--- a/.github/workflows/comment_bot.yml
+++ b/.github/workflows/comment_bot.yml
@@ -30,7 +30,7 @@ jobs:
     if: github.event.comment.body == 'take'
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/github-script@v8
+      - uses: actions/github-script@v9
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           script: |-
diff --git a/.github/workflows/dev_pr.yml b/.github/workflows/dev_pr.yml
index 84740628e..20946c818 100644
--- a/.github/workflows/dev_pr.yml
+++ b/.github/workflows/dev_pr.yml
@@ -50,28 +50,28 @@ jobs:
 
       - name: Ensure PR title format
         id: title-format
-        uses: actions/github-script@v8
+        uses: actions/github-script@v9
         with:
           script: |
             const scripts = require(`${process.env.GITHUB_WORKSPACE}/.github/workflows/dev_pr.js`);
             return scripts.check_title_format({core, github, context});
 
       - name: Label PR
-        uses: actions/github-script@v8
+        uses: actions/github-script@v9
         with:
           script: |
             const scripts = require(`${process.env.GITHUB_WORKSPACE}/.github/workflows/dev_pr.js`);
             await scripts.apply_labels({core, github, context});
 
       - name: Ensure PR is labeled
-        uses: actions/github-script@v8
+        uses: actions/github-script@v9
         with:
           script: |
             const scripts = require(`${process.env.GITHUB_WORKSPACE}/.github/workflows/dev_pr.js`);
             await scripts.check_labels({core, github, context});
 
       - name: Ensure PR is linked to an issue
-        uses: actions/github-script@v8
+        uses: actions/github-script@v9
         with:
           script: |
             const scripts = require(`${process.env.GITHUB_WORKSPACE}/.github/workflows/dev_pr.js`);
diff --git a/.github/workflows/rc.yml b/.github/workflows/rc.yml
index 9c75b8c80..2658f1da0 100644
--- a/.github/workflows/rc.yml
+++ b/.github/workflows/rc.yml
@@ -71,7 +71,7 @@ jobs:
         run: |
           dev/release/run_rat.sh "${TAR_GZ}"
       - name: Upload source archive
-        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: release-source
           path: |
@@ -127,7 +127,7 @@ jobs:
         with:
           repository: apache/parquet-testing
           path: arrow/cpp/submodules/parquet-testing
-      - uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4.0.0
+      - uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
@@ -148,7 +148,7 @@ jobs:
       - name: Compress into single artifact to keep directory structure
         run: tar -cvzf jni-linux-${{ matrix.platform.arch }}.tar.gz jni/
       - name: Upload artifacts
-        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: jni-linux-${{ matrix.platform.arch }}
           path: jni-linux-${{ matrix.platform.arch }}.tar.gz
@@ -278,7 +278,7 @@ jobs:
       - name: Compress into single artifact to keep directory structure
         run: tar -cvzf jni-macos-${{ matrix.platform.arch }}.tar.gz jni/
       - name: Upload artifacts
-        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: jni-macos-${{ matrix.platform.arch }}
           path: jni-macos-${{ matrix.platform.arch }}.tar.gz
@@ -356,7 +356,7 @@ jobs:
         shell: bash
         run: tar -cvzf jni-windows-${{ matrix.platform.arch }}.tar.gz jni/
       - name: Upload artifacts
-        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: jni-windows-${{ matrix.platform.arch }}
           path: jni-windows-${{ matrix.platform.arch }}.tar.gz
@@ -428,12 +428,12 @@ jobs:
           cp -a target/site/apidocs reference
           tar -cvzf reference.tar.gz reference
       - name: Upload binaries
-        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: release-binaries
           path: binaries/*
       - name: Upload docs
-        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: reference
           path: reference.tar.gz
@@ -471,7 +471,7 @@ jobs:
       - name: Compress into single artifact to keep directory structure
         run: tar -cvzf html.tar.gz -C docs/build html
       - name: Upload artifacts
-        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: release-html
           path: html.tar.gz
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 5ca9cf9b7..a2c5a5554 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -32,7 +32,7 @@ jobs:
   publish:
     name: Publish
     runs-on: ubuntu-latest
-    timeout-minutes: 5
+    timeout-minutes: 30
     steps:
       - name: Download RC contents
         run: |
diff --git a/.mvn/extensions.xml b/.mvn/extensions.xml
index 4585435b4..f52dfafb4 100644
--- a/.mvn/extensions.xml
+++ b/.mvn/extensions.xml
@@ -23,7 +23,7 @@
     <extension>
         <groupId>com.gradle</groupId>
         <artifactId>develocity-maven-extension</artifactId>
-        <version>2.3.4</version>
+        <version>2.4.0</version>
     </extension>
     <extension>
         <groupId>com.gradle</groupId>
diff --git a/bom/pom.xml b/bom/pom.xml
index e4ccee02d..d97cc291c 100644
--- a/bom/pom.xml
+++ b/bom/pom.xml
@@ -23,8 +23,8 @@ under the License.
   <parent>
     <groupId>org.apache</groupId>
     <artifactId>apache</artifactId>
-    <version>33</version>
-    <relativePath></relativePath>
+    <version>37</version>
+    <relativePath/>
   </parent>
 
   <groupId>org.apache.arrow</groupId>
@@ -78,7 +78,7 @@ under the License.
   </issueManagement>
 
   <properties>
-    <arrow.vector.classifier></arrow.vector.classifier>
+    <arrow.vector.classifier/>
     <!-- org.apache:apache overrides -->
     <minimalJavaBuildVersion>17</minimalJavaBuildVersion>
     <maven.compiler.source>17</maven.compiler.source>
@@ -208,7 +208,7 @@ under the License.
         <plugin>
           <groupId>com.diffplug.spotless</groupId>
           <artifactId>spotless-maven-plugin</artifactId>
-          <version>2.44.4</version>
+          <version>3.4.0</version>
         </plugin>
         <plugin>
           <groupId>org.codehaus.mojo</groupId>
@@ -235,7 +235,7 @@ under the License.
               <file>${maven.multiModuleProjectDirectory}/dev/license/asf-xml.license</file>
               <delimiter>(&lt;configuration|&lt;project)</delimiter>
             </licenseHeader>
-            <sortPom></sortPom>
+            <sortPom/>
           </pom>
         </configuration>
         <executions>
diff --git a/flight/flight-core/pom.xml b/flight/flight-core/pom.xml
index 92490dd67..d199f70da 100644
--- a/flight/flight-core/pom.xml
+++ b/flight/flight-core/pom.xml
@@ -134,7 +134,7 @@ under the License.
     <dependency>
       <groupId>com.google.api.grpc</groupId>
       <artifactId>proto-google-common-protos</artifactId>
-      <version>2.66.0</version>
+      <version>2.70.0</version>
       <scope>test</scope>
     </dependency>
     <dependency>
diff --git a/flight/flight-integration-tests/pom.xml b/flight/flight-integration-tests/pom.xml
index ec81162e5..f6ae8e16a 100644
--- a/flight/flight-integration-tests/pom.xml
+++ b/flight/flight-integration-tests/pom.xml
@@ -101,7 +101,7 @@ under the License.
                 </filter>
               </filters>
               <transformers>
-                <transformer implementation="org.apache.maven.plugins.shade.resource.ServicesResourceTransformer"></transformer>
+                <transformer implementation="org.apache.maven.plugins.shade.resource.ServicesResourceTransformer"/>
                 <transformer implementation="org.apache.maven.plugins.shade.resource.IncludeResourceTransformer">
                   <resource>META-INF/LICENSE.txt</resource>
                   <file>src/shade/LICENSE.txt</file>
diff --git a/flight/flight-sql-jdbc-core/pom.xml b/flight/flight-sql-jdbc-core/pom.xml
index ffeff1246..1f9bc3e00 100644
--- a/flight/flight-sql-jdbc-core/pom.xml
+++ b/flight/flight-sql-jdbc-core/pom.xml
@@ -165,7 +165,7 @@ under the License.
     <dependency>
       <groupId>org.bouncycastle</groupId>
       <artifactId>bcpkix-jdk18on</artifactId>
-      <version>1.83</version>
+      <version>1.84</version>
     </dependency>
 
     <dependency>
@@ -182,7 +182,7 @@ under the License.
     <dependency>
       <groupId>com.nimbusds</groupId>
       <artifactId>oauth2-oidc-sdk</artifactId>
-      <version>11.34</version>
+      <version>11.37</version>
     </dependency>
 
   </dependencies>
diff --git a/flight/flight-sql-jdbc-driver/pom.xml b/flight/flight-sql-jdbc-driver/pom.xml
index 55de7221e..ff5763702 100644
--- a/flight/flight-sql-jdbc-driver/pom.xml
+++ b/flight/flight-sql-jdbc-driver/pom.xml
@@ -138,7 +138,7 @@ under the License.
                 </relocation>
               </relocations>
               <transformers>
-                <transformer implementation="org.apache.maven.plugins.shade.resource.ServicesResourceTransformer"></transformer>
+                <transformer implementation="org.apache.maven.plugins.shade.resource.ServicesResourceTransformer"/>
                 <transformer implementation="org.apache.maven.plugins.shade.resource.IncludeResourceTransformer">
                   <resource>META-INF/LICENSE.txt</resource>
                   <file>src/shade/LICENSE.txt</file>
diff --git a/memory/memory-core/pom.xml b/memory/memory-core/pom.xml
index 1c7b6f883..825b3dae4 100644
--- a/memory/memory-core/pom.xml
+++ b/memory/memory-core/pom.xml
@@ -100,8 +100,8 @@ under the License.
             <phase>test</phase>
             <configuration>
               <!-- Do not inherit the default add-opens flag and excludes -->
-              <argLine combine.self="override"></argLine>
-              <excludes combine.self="override"></excludes>
+              <argLine combine.self="override"/>
+              <excludes combine.self="override"/>
               <includes>
                 <include>**/TestOpens.java</include>
               </includes>
diff --git a/performance/pom.xml b/performance/pom.xml
index 413d5ba1e..d994bff45 100644
--- a/performance/pom.xml
+++ b/performance/pom.xml
@@ -35,10 +35,10 @@ under the License.
     <skip.perf.benchmarks>true</skip.perf.benchmarks>
     <benchmark.filter>.*</benchmark.filter>
     <benchmark.forks>1</benchmark.forks>
-    <benchmark.jvmargs></benchmark.jvmargs>
+    <benchmark.jvmargs/>
     <benchmark.warmups>5</benchmark.warmups>
     <benchmark.runs>5</benchmark.runs>
-    <benchmark.list></benchmark.list>
+    <benchmark.list/>
     <benchmark.resultfile>jmh-result.json</benchmark.resultfile>
     <benchmark.resultformat>json</benchmark.resultformat>
   </properties>
@@ -143,7 +143,7 @@ under the License.
           <executable>java</executable>
           <arguments>
             <argument>-classpath</argument>
-            <classpath></classpath>
+            <classpath/>
             <argument>org.openjdk.jmh.Main</argument>
             <argument>${benchmark.filter}</argument>
             <argument>-f</argument>
diff --git a/pom.xml b/pom.xml
index 863169b47..738aea03b 100644
--- a/pom.xml
+++ b/pom.xml
@@ -23,7 +23,7 @@ under the License.
   <parent>
     <groupId>org.apache</groupId>
     <artifactId>apache</artifactId>
-    <version>35</version>
+    <version>37</version>
   </parent>
 
   <groupId>org.apache.arrow</groupId>
@@ -97,22 +97,22 @@ under the License.
     <dep.junit.platform.version>1.9.0</dep.junit.platform.version>
     <dep.junit.jupiter.version>5.12.2</dep.junit.jupiter.version>
     <dep.slf4j.version>2.0.17</dep.slf4j.version>
-    <dep.guava-bom.version>33.5.0-jre</dep.guava-bom.version>
-    <dep.netty-bom.version>4.2.10.Final</dep.netty-bom.version>
-    <dep.grpc-bom.version>1.79.0</dep.grpc-bom.version>
+    <dep.guava-bom.version>33.6.0-jre</dep.guava-bom.version>
+    <dep.netty-bom.version>4.2.12.Final</dep.netty-bom.version>
+    <dep.grpc-bom.version>1.80.0</dep.grpc-bom.version>
     <dep.protobuf-bom.version>4.34.1</dep.protobuf-bom.version>
     <dep.jackson-bom.version>2.21.2</dep.jackson-bom.version>
-    <dep.hadoop.version>3.4.3</dep.hadoop.version>
+    <dep.hadoop.version>3.5.0</dep.hadoop.version>
     <dep.fbs.version>25.2.10</dep.fbs.version>
     <dep.avro.version>1.12.1</dep.avro.version>
     <dep.parquet.version>1.17.0</dep.parquet.version>
     <dep.mockito-bom.version>5.23.0</dep.mockito-bom.version>
-    <arrow.vector.classifier></arrow.vector.classifier>
+    <arrow.vector.classifier/>
     <forkCount>2</forkCount>
     <checkstyle.version>10.23.0</checkstyle.version>
     <checkstyle.failOnViolation>true</checkstyle.failOnViolation>
     <error_prone_core.version>2.42.0</error_prone_core.version>
-    <checker.framework.version>3.54.0</checker.framework.version>
+    <checker.framework.version>4.0.0</checker.framework.version>
     <logback.version>1.5.32</logback.version>
     <doclint>none</doclint>
     <additionalparam>-Xdoclint:none</additionalparam>
@@ -374,7 +374,7 @@ under the License.
                     </goals>
                   </pluginExecutionFilter>
                   <action>
-                    <ignore></ignore>
+                    <ignore/>
                   </action>
                 </pluginExecution>
                 <pluginExecution>
@@ -387,7 +387,7 @@ under the License.
                     </goals>
                   </pluginExecutionFilter>
                   <action>
-                    <ignore></ignore>
+                    <ignore/>
                   </action>
                 </pluginExecution>
                 <pluginExecution>
@@ -400,7 +400,7 @@ under the License.
                     </goals>
                   </pluginExecutionFilter>
                   <action>
-                    <ignore></ignore>
+                    <ignore/>
                   </action>
                 </pluginExecution>
                 <pluginExecution>
@@ -413,7 +413,7 @@ under the License.
                     </goals>
                   </pluginExecutionFilter>
                   <action>
-                    <ignore></ignore>
+                    <ignore/>
                   </action>
                 </pluginExecution>
                 <pluginExecution>
@@ -492,7 +492,7 @@ under the License.
         <plugin>
           <groupId>com.diffplug.spotless</groupId>
           <artifactId>spotless-maven-plugin</artifactId>
-          <version>2.44.4</version>
+          <version>3.4.0</version>
         </plugin>
         <plugin>
           <groupId>org.codehaus.mojo</groupId>
@@ -734,7 +734,7 @@ under the License.
               <file>${maven.multiModuleProjectDirectory}/dev/license/asf-xml.license</file>
               <delimiter>(&lt;configuration|&lt;project)</delimiter>
             </licenseHeader>
-            <sortPom></sortPom>
+            <sortPom/>
           </pom>
           <java>
             <googleJavaFormat>
diff --git a/tools/pom.xml b/tools/pom.xml
index 64634b9ab..b4d64fd43 100644
--- a/tools/pom.xml
+++ b/tools/pom.xml
@@ -126,7 +126,7 @@ under the License.
                 </filter>
               </filters>
               <transformers>
-                <transformer implementation="org.apache.maven.plugins.shade.resource.ServicesResourceTransformer"></transformer>
+                <transformer implementation="org.apache.maven.plugins.shade.resource.ServicesResourceTransformer"/>
                 <transformer implementation="org.apache.maven.plugins.shade.resource.IncludeResourceTransformer">
                   <resource>META-INF/LICENSE.txt</resource>
                   <file>src/shade/LICENSE.txt</file>