diff --git a/.gitattributes b/.gitattributes
index 4226c14..64be924 100644
--- a/.gitattributes
+++ b/.gitattributes
@@ -1,16 +1,13 @@
 *.sh text eol=lf
 
-.github/workflows/broken_links_checker.yml                          linguist-generated=true
-.github/workflows/ci-build-next-java.yml                            linguist-generated=true
-.github/workflows/ci-build.yml                                      linguist-generated=true
-.github/workflows/dependencies_check.yml                            linguist-generated=true
-.github/workflows/prepare_release_in_app_repo.yml                   linguist-generated=true
-.github/workflows/release_droid_prepare_original_checksum.yml       linguist-generated=true
-.github/workflows/release_droid_print_quick_checksum.yml            linguist-generated=true
-.github/workflows/release_droid_upload_github_release_assets.yml    linguist-generated=true
-
-dependencies.md                                                     linguist-generated=true
-pk_generated_parent.pom                                             linguist-generated=true
-doc/changes/changelog.md                                            linguist-generated=true
-.settings/org.eclipse.jdt.core.prefs                                linguist-generated=true
-.settings/org.eclipse.jdt.ui.prefs                                  linguist-generated=true
+.github/workflows/broken_links_checker.yml  linguist-generated=true
+.github/workflows/ci-build-next-java.yml    linguist-generated=true
+.github/workflows/ci-build.yml              linguist-generated=true
+.github/workflows/dependencies_check.yml    linguist-generated=true
+.github/workflows/dependencies_update.yml   linguist-generated=true
+.github/workflows/release.yml               linguist-generated=true
+dependencies.md                             linguist-generated=true
+pk_generated_parent.pom                     linguist-generated=true
+doc/changes/changelog.md                    linguist-generated=true
+.settings/org.eclipse.jdt.core.prefs        linguist-generated=true
+.settings/org.eclipse.jdt.ui.prefs          linguist-generated=true
diff --git a/.github/workflows/broken_links_checker.yml b/.github/workflows/broken_links_checker.yml
index 0fbcad5..d7a38b4 100644
--- a/.github/workflows/broken_links_checker.yml
+++ b/.github/workflows/broken_links_checker.yml
@@ -13,6 +13,9 @@ on:
 jobs:
   linkChecker:
     runs-on: ubuntu-latest
+    defaults:
+      run:
+        shell: "bash"
     concurrency:
       group: ${{ github.workflow }}-${{ github.ref }}
       cancel-in-progress: true
diff --git a/.github/workflows/ci-build-next-java.yml b/.github/workflows/ci-build-next-java.yml
index e3acdb7..8886e10 100644
--- a/.github/workflows/ci-build-next-java.yml
+++ b/.github/workflows/ci-build-next-java.yml
@@ -10,6 +10,12 @@ on:
 jobs:
   java-17-compatibility:
     runs-on: ubuntu-latest
+    defaults:
+      run:
+        shell: "bash"
+    permissions:
+      contents: read
+      checks: write # Allow scacap/action-surefire-report
     concurrency:
       group: ${{ github.workflow }}-${{ github.ref }}
       cancel-in-progress: true
diff --git a/.github/workflows/ci-build.yml b/.github/workflows/ci-build.yml
index 6a078ed..ad646df 100644
--- a/.github/workflows/ci-build.yml
+++ b/.github/workflows/ci-build.yml
@@ -3,13 +3,18 @@
 name: CI Build
 on:
   push:
-    branches:
-      - main
+    branches: ["main"]
   pull_request:
 
 jobs:
   matrix-build:
     runs-on: ubuntu-latest
+    defaults:
+      run:
+        shell: "bash"
+    permissions:
+      contents: read
+      checks: write # Allow scacap/action-surefire-report
     concurrency:
       group: ${{ github.workflow }}-${{ github.ref }}-${{ matrix.exasol_db_version }}
       cancel-in-progress: true
@@ -38,7 +43,7 @@ jobs:
             17
           cache: "maven"
       - name: Cache SonarCloud packages
-        uses: actions/cache@v3
+        uses: actions/cache@v4
         with:
           path: ~/.sonar/cache
           key: ${{ runner.os }}-sonar
@@ -46,6 +51,7 @@ jobs:
       - name: Enable testcontainer reuse
         run: echo 'testcontainers.reuse.enable=true' > "$HOME/.testcontainers.properties"
       - name: Run tests and build with Maven
+        id: pk-verify
         run: |
           mvn --batch-mode clean verify \
               -Dorg.slf4j.simpleLogger.log.org.apache.maven.cli.transfer.Slf4jMavenTransferListener=warn \
@@ -71,8 +77,58 @@ jobs:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
 
+      - name: Verify Release Artifacts
+        run: |
+          print_message() {
+              local -r message=$1
+              echo "$message"
+              echo "$message" >> "$GITHUB_STEP_SUMMARY"
+          }
+
+          print_message "# Release Artifacts"
+
+          IFS=$'\n' artifacts_array=($ARTIFACTS)
+          missing_files=()
+          for file in "${artifacts_array[@]}";
+          do  
+              echo "Checking if file $file exists..."
+              if ! [[ -f "$file" ]]; then
+                  print_message "* ⚠️ \`$file\` does not exist ⚠️"
+                  echo "Content of directory $(dirname "$file"):"
+                  ls "$(dirname "$file")"
+                  missing_files+=("$file")
+              else
+                  print_message "* \`$file\` ✅" 
+              fi
+          done
+          print_message ""
+          number_of_missing_files=${#missing_files[@]}
+          if [[ $number_of_missing_files -gt 0 ]]; then
+              print_message "⚠️ $number_of_missing_files release artifact(s) missing ⚠️"
+              exit 1
+          else
+              print_message "All ${#artifacts_array[@]} artifact(s) present ✅"
+          fi
+        env:
+          ARTIFACTS: ${{ steps.pk-verify.outputs.release-artifacts }}
+
   build:
     needs: matrix-build
     runs-on: ubuntu-latest
     steps:
       - run: echo "Build successful"
+
+  # [impl->dsn~release-workflow.ci-build-starts-release~1]
+  start_release:
+    needs: build
+    if: ${{ github.ref == 'refs/heads/main' }}
+    concurrency:
+      cancel-in-progress: false
+      group: "release"
+    secrets: inherit
+    permissions:
+      contents: write
+      actions: read
+    uses: ./.github/workflows/release.yml
+    with:
+      started-from-ci: true
diff --git a/.github/workflows/dependencies_check.yml b/.github/workflows/dependencies_check.yml
index 87b64ba..bd26ab6 100644
--- a/.github/workflows/dependencies_check.yml
+++ b/.github/workflows/dependencies_check.yml
@@ -1,6 +1,6 @@
 # Generated by Project Keeper
 # https://github.com/exasol/project-keeper/blob/main/project-keeper/src/main/resources/templates/.github/workflows/dependencies_check.yml
-name: Report Security Issues for Repository
+name: Report Security Issues
 on:
   workflow_dispatch:
   schedule:
@@ -9,11 +9,17 @@ on:
 jobs:
   report_security_issues:
     runs-on: ubuntu-latest
+    defaults:
+      run:
+        shell: "bash"
     permissions:
+      contents: read
       issues: write
-
+    outputs:
+      created-issues: ${{ steps.security-issues.outputs.created-issues }}
     steps:
       - uses: actions/checkout@v4
+
       - name: Set up JDKs
         uses: actions/setup-java@v4
         with:
@@ -25,14 +31,38 @@ jobs:
 
       - name: Generate ossindex report
         run: |
-          mvn org.sonatype.ossindex.maven:ossindex-maven-plugin:audit \
+          mvn --batch-mode org.sonatype.ossindex.maven:ossindex-maven-plugin:audit \
               org.sonatype.ossindex.maven:ossindex-maven-plugin:audit-aggregate \
               -Dossindex.reportFile=$(pwd)/ossindex-report.json \
               -Dossindex.fail=false
 
       - name: Report Security Issues
+        id: security-issues
         uses: exasol/python-toolbox/.github/actions/security-issues@main
         with:
           format: "maven"
           command: "cat ossindex-report.json"
           github-token: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Output security issues (Debugging)
+        run: |
+          echo "$CREATED_ISSUES" > test.jsonl
+          cat test.jsonl
+        env:
+          CREATED_ISSUES: ${{ steps.security-issues.outputs.created-issues }}
+
+  start_dependency_udpate:
+    needs: report_security_issues
+    # [impl->dsn~trigger-dependency-updates~1]
+    if: ${{ needs.report_security_issues.outputs.created-issues }}
+    concurrency:
+      cancel-in-progress: true
+      group: "dependencies_update"
+    # Workflow needs secret INTEGRATION_TEAM_SLACK_NOTIFICATION_WEBHOOK
+    secrets: inherit
+    permissions:
+      contents: write
+      pull-requests: write
+    uses: ./.github/workflows/dependencies_update.yml
+    with:
+      vulnerability_issues: ${{ needs.report_security_issues.outputs.created-issues }}
diff --git a/.github/workflows/dependencies_update.yml b/.github/workflows/dependencies_update.yml
new file mode 100644
index 0000000..0f6b816
--- /dev/null
+++ b/.github/workflows/dependencies_update.yml
@@ -0,0 +1,175 @@
+# Generated by Project Keeper
+# https://github.com/exasol/project-keeper/blob/main/project-keeper/src/main/resources/templates/.github/workflows/dependencies_update.yml
+name: Update dependencies
+on:
+  workflow_call:
+    inputs:
+      # [impl->dsn~dependency-updater.workflow.vulnerability-info~1]
+      vulnerability_issues:
+        description: "GitHub issues for vulnerable dependencies as JSONL"
+        required: true
+        type: string
+  workflow_dispatch:
+
+jobs:
+  update_dependencies:
+    runs-on: ubuntu-latest
+    defaults:
+      run:
+        shell: "bash"
+    permissions:
+      contents: write
+      pull-requests: write
+
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Set up JDKs
+        uses: actions/setup-java@v4
+        with:
+          distribution: "temurin"
+          java-version: |
+            11
+            17
+          cache: "maven"
+
+      - name: Print issues
+        run: |
+          echo "Issues from Action input: $ISSUES"
+        env:
+          ISSUES: ${{ inputs.vulnerability_issues }}
+
+      - name: Fail if not running on a branch
+        if: ${{ !startsWith(github.ref, 'refs/heads/') }}
+        uses: actions/github-script@v7
+        with:
+          script: |
+            core.setFailed('Not running on a branch, github.ref is ${{ github.ref }}. Please start this workflow only on main or a branch')
+
+      - name: Update dependencies
+        # [impl->dsn~dependency-updater.workflow.start-pk-update~1]
+        run: |
+          mvn --batch-mode com.exasol:project-keeper-maven-plugin:update-dependencies --projects . \
+              -Dproject-keeper:vulnerabilities="$CREATED_ISSUES"
+        env:
+          CREATED_ISSUES: ${{ inputs.vulnerability_issues }}
+
+      - name: Project Keeper Fix
+        run: |
+          mvn --batch-mode com.exasol:project-keeper-maven-plugin:fix --projects .
+
+      - name: Project Keeper Fix for updated Project Keeper version
+        # Calling PK fix a second time is necessary because the first invocation potentially updated PK itself.
+        # So we need to run PK fix again with the latest PK version.
+        # [impl->dsn~dependency-updater.workflow.start-pk-fix~1]
+        run: |
+          mvn --batch-mode com.exasol:project-keeper-maven-plugin:fix --projects .
+
+      - name: Generate Pull Request comment
+        id: pr-comment
+        # [impl->dsn~dependency-updater.workflow.create-pull-request~1]
+        # [impl->dsn~dependency-updater.workflow.pull-request-trigger-ci-build~1]
+        run: |
+          echo 'comment<<EOF' >> "$GITHUB_OUTPUT"
+          echo 'This Pull Request was created by [`dependencies_update.yml`](https://github.com/exasol/project-keeper/blob/main/project-keeper/src/main/resources/templates/.github/workflows/dependencies_update.yml) workflow.' >> "$GITHUB_OUTPUT"
+          if [ -n "$CREATED_ISSUES" ]; then
+            echo 'It updates dependencies to fix the following vulnerabilities:' >> "$GITHUB_OUTPUT"
+            echo $CREATED_ISSUES | jq --raw-output '. | "* Closes " + .issue_url + " (" + .cve + ")"' >> "$GITHUB_OUTPUT"
+          else
+            echo 'It updates dependencies.' >> "$GITHUB_OUTPUT"
+          fi
+          echo >> "$GITHUB_OUTPUT"
+          echo '# ⚠️ This PR does not trigger CI workflows by default ⚠️' >> "$GITHUB_OUTPUT"
+          echo 'Please click the **Close pull request** button and then **Reopen pull request** to trigger running checks.' >> "$GITHUB_OUTPUT"
+          echo 'See https://github.com/exasol/project-keeper/issues/534 for details.' >> "$GITHUB_OUTPUT"
+          echo 'EOF' >> "$GITHUB_OUTPUT"
+
+          cat "$GITHUB_OUTPUT"
+        env:
+          CREATED_ISSUES: ${{ inputs.vulnerability_issues }}
+
+      - name: Generate Pull Request Title
+        id: pr-title
+        run: |
+          if [ -n "$CREATED_ISSUES" ]; then
+            echo "Security issues are available"
+            echo "title=🔐 Update dependencies to fix vulnerabilities" >> "$GITHUB_OUTPUT"
+          else
+            echo "Security issues are not available"
+            echo "title=Update dependencies" >> "$GITHUB_OUTPUT"
+          fi
+
+          cat "$GITHUB_OUTPUT"
+        env:
+          CREATED_ISSUES: ${{ inputs.vulnerability_issues }}
+
+      - name: Configure git
+        run: |
+          git config --global user.email "opensource@exasol.com"
+          git config --global user.name "Automatic Dependency Updater"
+
+      - name: Create branch
+        if: ${{ github.ref == 'refs/heads/main' }}
+        run: |
+          branch_name="dependency-update/$(date "+%Y%m%d%H%M%S")"
+          echo "Creating branch $branch_name"
+          git checkout -b "$branch_name"
+
+      - name: Commit changes & push
+        if: ${{ startsWith(github.ref, 'refs/heads/' ) }}
+        run: |
+          branch_name=$(git rev-parse --abbrev-ref HEAD)
+          echo "Current branch: $branch_name"
+          echo "git diff --stat"
+          git diff --stat
+          echo "git diff --numstat"
+          git diff --numstat
+          echo "git diff --name-status"
+          git diff --name-status
+          echo "Adding untracked files:"
+          git add . --verbose --all
+          echo "Committing changes..."
+          git commit --message "$TITLE"
+          echo "Pushing branch $branch_name..."
+          git push --set-upstream origin "$branch_name"
+          echo "Done."
+        env:
+          TITLE: ${{ steps.pr-title.outputs.title }}
+
+      - name: Create pull request
+        id: create-pr
+        if: ${{ github.ref == 'refs/heads/main' }}
+        run: |
+          pr_url=$(gh pr create --base main --title "$TITLE" --body "$COMMENT")
+          echo "Created Pull Request: $pr_url"
+          echo "pr_url=$pr_url" >> "$GITHUB_OUTPUT"
+        env:
+          COMMENT: ${{ steps.pr-comment.outputs.comment }}
+          TITLE: ${{ steps.pr-title.outputs.title }}
+          GH_TOKEN: ${{ github.token }}
+
+      - name: Report failure Status to Slack channel
+        # Also run this step in case of failures
+        if: ${{ always() }}
+        uses: ravsamhq/notify-slack-action@v2
+        with:
+          status: ${{ job.status }}
+          token: ${{ secrets.GITHUB_TOKEN }}
+          notification_title: "Dependency check in {repo} has {status_message}"
+          message_format: "{emoji} *{workflow}* {status_message} in <{repo_url}|{repo}>"
+          notify_when: "failure,cancelled,warnings"
+        env:
+          SLACK_WEBHOOK_URL: ${{ secrets.INTEGRATION_TEAM_SLACK_NOTIFICATION_WEBHOOK }}
+
+      - name: Report new Pull Request to Slack channel
+        if: ${{ steps.create-pr.outputs.pr_url }}
+        uses: ravsamhq/notify-slack-action@v2
+        with:
+          status: ${{ job.status }}
+          token: ${{ secrets.GITHUB_TOKEN }}
+          notification_title: "Dependency update for {repo} created a Pull Request"
+          message_format: "{workflow} created Pull Request ${{ steps.create-pr.outputs.pr_url }}"
+        env:
+          SLACK_WEBHOOK_URL: ${{ secrets.INTEGRATION_TEAM_SLACK_NOTIFICATION_WEBHOOK }}
diff --git a/.github/workflows/prepare_release_in_app_repo.yml b/.github/workflows/prepare_release_in_app_repo.yml
index 225be82..488139d 100644
--- a/.github/workflows/prepare_release_in_app_repo.yml
+++ b/.github/workflows/prepare_release_in_app_repo.yml
@@ -3,7 +3,7 @@ name: Prepare SAM release
 on:
   push:
     tags:
-      - '*'
+      - "*"
   workflow_dispatch:
 
 permissions:
@@ -15,13 +15,13 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout the repository
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
       - name: Set up JDK 11
-        uses: actions/setup-java@v3
+        uses: actions/setup-java@v4
         with:
-          distribution: 'temurin'
+          distribution: "temurin"
           java-version: 11
-          cache: 'maven'
+          cache: "maven"
       - name: Install and configure
         run: |
           pip install awscli aws-sam-cli
@@ -36,11 +36,11 @@ jobs:
           AWS_ACCESS_KEY_ID: ${{ secrets.RELEASE_AWS_ACCESS_KEY_ID }} # The user is defined by the ci-isolation stack.
           AWS_SECRET_ACCESS_KEY: ${{ secrets.RELEASE_AWS_SECRET_ACCESS_KEY }}
       - name: Upload packed template
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v4
         with:
           name: packedTemplate
           path: sam/packed.yml
       - name: Create issue for manual release
         uses: JasonEtco/create-an-issue@v2
         env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
\ No newline at end of file
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
new file mode 100644
index 0000000..7a2dc9c
--- /dev/null
+++ b/.github/workflows/release.yml
@@ -0,0 +1,193 @@
+# Generated by Project Keeper
+# https://github.com/exasol/project-keeper/blob/main/project-keeper/src/main/resources/templates/.github/workflows/release.yml
+name: Release
+on:
+  # [impl->dsn~release-workflow.triggers~1]
+  workflow_call:
+    inputs:
+      started-from-ci:
+        description: "Marks this release as started from CI, skipping precondition check"
+        type: boolean
+        required: true
+        default: false
+  workflow_dispatch:
+    inputs:
+      skip-maven-central:
+        description: "Skip deployment to Maven Central"
+        required: true
+        type: boolean
+        default: false
+      skip-github-release:
+        description: "Skip creating the GitHub release"
+        required: true
+        type: boolean
+        default: false
+
+jobs:
+  release:
+    runs-on: ubuntu-latest
+    defaults:
+      run:
+        shell: "bash"
+    concurrency:
+      group: ${{ github.workflow }}
+      cancel-in-progress: false
+    permissions:
+      contents: write
+      actions: read
+    steps:
+      - name: Checkout the repository
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+      - name: Set up Maven Central Repository
+        if: ${{ false }}
+        uses: actions/setup-java@v4
+        with:
+          distribution: "temurin"
+          java-version: |
+            11
+            17
+          cache: "maven"
+          server-id: ossrh
+          server-username: MAVEN_USERNAME
+          server-password: MAVEN_PASSWORD
+          gpg-private-key: ${{ secrets.OSSRH_GPG_SECRET_KEY }}
+          gpg-passphrase: MAVEN_GPG_PASSPHRASE
+      - name: Set up JDKs
+        if: ${{ ! false }}
+        uses: actions/setup-java@v4
+        with:
+          distribution: "temurin"
+          java-version: |
+            11
+            17
+          cache: "maven"
+
+      # Check preconditions
+
+      - name: Fail if not running on main branch
+        if: ${{ github.ref != 'refs/heads/main' }}
+        uses: actions/github-script@v7
+        with:
+          script: |
+            core.setFailed('Not running on main branch, github.ref is ${{ github.ref }}. Please start this workflow only on main')
+
+      # [impl->dsn~release-workflow.verify-ci-build-success~1]
+      - name: Check CI build of this commit succeeded
+        # We skip this check if this was started from ci-build.yml, because the build status would be "in progress".
+        if: ${{ ! inputs.started-from-ci }}
+        run: |
+          echo "Commit SHA: $COMMIT_SHA"
+          gh run list --workflow ci-build.yml --branch main --event push --commit $COMMIT_SHA
+          ci_build_status=$(gh run list --workflow ci-build.yml --branch main --event push --commit $COMMIT_SHA --json conclusion --template '{{range .}}{{.conclusion}}{{"\n"}}{{end}}')
+          echo "CI build status at commit $COMMIT_SHA was '$ci_build_status'"
+          if [[ "$ci_build_status" != "success" ]]; then
+            gh run list --workflow ci-build.yml --commit $COMMIT_SHA >> $GITHUB_STEP_SUMMARY
+            echo "Status of CI build for commit $COMMIT_SHA was '$ci_build_status', expected 'success'" >> $GITHUB_STEP_SUMMARY
+            cat $GITHUB_STEP_SUMMARY
+            exit 1
+          fi
+        env:
+          COMMIT_SHA: ${{ github.sha }}
+          GH_TOKEN: ${{ github.token }}
+      # [impl->dsn~release-workflow.run-verify-release~1]
+      - name: Verify release preconditions
+        id: verify-release
+        run: |
+          mvn --batch-mode com.exasol:project-keeper-maven-plugin:verify-release --projects .
+          echo "$GITHUB_OUTPUT"
+        env:
+          GITHUB_TOKEN: ${{ github.token }}
+      # [impl->dsn~release-workflow.verify-skip-tests~1]
+      - name: Build project
+        run: mvn --batch-mode -DskipTests clean verify
+
+      # Maven Central Deployment
+      - name: List secret GPG keys
+        if: ${{ false && (! inputs.skip-maven-central) }}
+        run: gpg --list-secret-keys
+      # [impl->dsn~release-workflow.deploy-maven-central~1]
+      - name: Publish to Central Repository
+        if: ${{ false && (! inputs.skip-maven-central) }}
+        run: |
+          mvn --batch-mode -Dgpg.skip=false -DskipTests deploy
+          echo "Published to Maven Central" >> "$GITHUB_STEP_SUMMARY"
+        env:
+          MAVEN_USERNAME: ${{ secrets.OSSRH_USERNAME }}
+          MAVEN_PASSWORD: ${{ secrets.OSSRH_PASSWORD }}
+          MAVEN_GPG_PASSPHRASE: ${{ secrets.OSSRH_GPG_SECRET_KEY_PASSWORD }}
+
+      # Create GitHub releasse
+
+      - name: Calculate Artifact Checksums
+        id: artifact-checksum
+        if: ${{ ! inputs.skip-github-release }}
+        run: |
+          ls target/
+          echo "Calculating sha256 checksum for artifact files"
+          echo "artifacts<<EOF" >> "$GITHUB_OUTPUT"
+          IFS=$'\n' artifacts_array=($ARTIFACTS)
+          for file in "${artifacts_array[@]}";
+          do
+              full_path=$(realpath "$file")
+              echo "Calculate sha256sum for file '$full_path'"
+              file_dir="$(dirname "$full_path")"
+              file_name=$(basename "$full_path")
+              pushd "$file_dir"
+              checksum_file_name="${file_name}.sha256"
+              sha256sum "$file_name" > "$checksum_file_name"
+              echo "$full_path" >> "$GITHUB_OUTPUT"
+              echo "${file_dir}/$checksum_file_name" >> "$GITHUB_OUTPUT"
+              popd
+          done
+          echo "EOF" >> "$GITHUB_OUTPUT"
+          echo "Full artifact file list"
+          cat "$GITHUB_OUTPUT"
+        env:
+          ARTIFACTS: ${{ steps.verify-release.outputs.release-artifacts }}
+
+      # [impl->dsn~release-workflow.create-github-release~1]
+      - name: Create GitHub Release
+        id: create-github-release
+        if: ${{ ! inputs.skip-github-release }}
+        run: |
+          IFS=$'\n' artifacts_array=($ARTIFACTS)
+          for file in "${artifacts_array[@]}";
+          do
+              echo "Attaching file '$file'"
+          done
+          release_url=$(gh release create --draft --latest --title "$TITLE" --notes "$NOTES" --target main $TAG "${artifacts_array[@]}")
+          echo "Created release $TAG with title '$TITLE' at $release_url" >> "$GITHUB_STEP_SUMMARY"
+          echo "release-url=$release_url" >> "$GITHUB_OUTPUT"
+          git fetch --tags origin
+        env:
+          GH_TOKEN: ${{ github.token }}
+          TAG: ${{ steps.verify-release.outputs.version }}
+          NOTES: ${{ steps.verify-release.outputs.release-notes }}
+          TITLE: ${{ steps.verify-release.outputs.release-title }}
+          ARTIFACTS: ${{ steps.artifact-checksum.outputs.artifacts }}
+
+      - name: Report failure Status to Slack channel
+        # Also run this step in case of failures
+        if: ${{ always() }}
+        uses: ravsamhq/notify-slack-action@v2
+        with:
+          status: ${{ job.status }}
+          token: ${{ github.token }}
+          notification_title: "Release build in {repo} has {status_message}"
+          message_format: "{emoji} *{workflow}* {status_message} in <{repo_url}|{repo}>"
+          notify_when: "failure,cancelled,warnings,skipped"
+        env:
+          SLACK_WEBHOOK_URL: ${{ secrets.INTEGRATION_TEAM_SLACK_NOTIFICATION_WEBHOOK }}
+
+      - name: Report new release to Slack channel
+        if: ${{ steps.create-github-release.outputs.release-url }}
+        uses: ravsamhq/notify-slack-action@v2
+        with:
+          status: ${{ job.status }}
+          token: ${{ github.token }}
+          notification_title: "Release build for {repo} created a new release"
+          message_format: "{workflow} created release ${{ steps.create-github-release.outputs.release-url }}"
+        env:
+          SLACK_WEBHOOK_URL: ${{ secrets.INTEGRATION_TEAM_SLACK_NOTIFICATION_WEBHOOK }}
diff --git a/.github/workflows/release_droid_prepare_original_checksum.yml b/.github/workflows/release_droid_prepare_original_checksum.yml
deleted file mode 100644
index 4f58aab..0000000
--- a/.github/workflows/release_droid_prepare_original_checksum.yml
+++ /dev/null
@@ -1,39 +0,0 @@
-# Generated by Project Keeper
-# https://github.com/exasol/project-keeper/blob/main/project-keeper/src/main/resources/templates/.github/workflows/release_droid_prepare_original_checksum.yml
-name: Release Droid - Prepare Original Checksum
-on:
-  workflow_dispatch:
-
-jobs:
-  build:
-    runs-on: ubuntu-latest
-    steps:
-      - name: Free Disk Space
-        if: ${{ false }}
-        run: |
-          sudo rm -rf /usr/local/lib/android
-          sudo rm -rf /usr/share/dotnet
-      - name: Checkout the repository
-        uses: actions/checkout@v4
-        with:
-          fetch-depth: 0
-      - name: Set up JDKs
-        uses: actions/setup-java@v4
-        with:
-          distribution: "temurin"
-          java-version: |
-            11
-            17
-          cache: "maven"
-      - name: Enable testcontainer reuse
-        run: echo 'testcontainers.reuse.enable=true' > "$HOME/.testcontainers.properties"
-      - name: Run tests and build with Maven
-        run: mvn --batch-mode clean verify --file pom.xml
-      - name: Prepare checksum
-        run: find target -maxdepth 1 -name *.jar -exec sha256sum "{}" + > original_checksum
-      - name: Upload checksum to the artifactory
-        uses: actions/upload-artifact@v3
-        with:
-          name: original_checksum
-          retention-days: 5
-          path: original_checksum
diff --git a/.github/workflows/release_droid_print_quick_checksum.yml b/.github/workflows/release_droid_print_quick_checksum.yml
deleted file mode 100644
index 86979cd..0000000
--- a/.github/workflows/release_droid_print_quick_checksum.yml
+++ /dev/null
@@ -1,26 +0,0 @@
-# Generated by Project Keeper
-# https://github.com/exasol/project-keeper/blob/main/project-keeper/src/main/resources/templates/.github/workflows/release_droid_print_quick_checksum.yml
-name: Release Droid - Print Quick Checksum
-on:
-  workflow_dispatch:
-
-jobs:
-  build:
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout the repository
-        uses: actions/checkout@v4
-        with:
-          fetch-depth: 0
-      - name: Set up JDKs
-        uses: actions/setup-java@v4
-        with:
-          distribution: "temurin"
-          java-version: |
-            11
-            17
-          cache: "maven"
-      - name: Build with Maven skipping tests
-        run: mvn --batch-mode clean verify -DskipTests
-      - name: Print checksum
-        run: echo 'checksum_start==';find target -maxdepth 1 -name *.jar -exec sha256sum "{}" + | xargs;echo '==checksum_end'
diff --git a/.github/workflows/release_droid_upload_github_release_assets.yml b/.github/workflows/release_droid_upload_github_release_assets.yml
deleted file mode 100644
index b19f7cf..0000000
--- a/.github/workflows/release_droid_upload_github_release_assets.yml
+++ /dev/null
@@ -1,47 +0,0 @@
-# Generated by Project Keeper
-# https://github.com/exasol/project-keeper/blob/main/project-keeper/src/main/resources/templates/.github/workflows/release_droid_upload_github_release_assets.yml
-name: Release Droid - Upload GitHub Release Assets
-on:
-  workflow_dispatch:
-    inputs:
-      upload_url:
-        description: "Assets upload URL"
-        required: true
-
-jobs:
-  build:
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout the repository
-        uses: actions/checkout@v4
-        with:
-          fetch-depth: 0
-      - name: Set up JDKs
-        uses: actions/setup-java@v4
-        with:
-          distribution: "temurin"
-          java-version: |
-            11
-            17
-          cache: "maven"
-      - name: Build with Maven skipping tests
-        run: mvn --batch-mode clean verify -DskipTests
-      - name: Generate sha256sum files
-        run: |
-          cd target
-          find . -maxdepth 1 -name \*.jar -exec bash -c 'sha256sum {} > {}.sha256' \;
-      - name: Upload assets to the GitHub release draft
-        uses: shogo82148/actions-upload-release-asset@v1
-        with:
-          upload_url: ${{ github.event.inputs.upload_url }}
-          asset_path: target/*.jar
-      - name: Upload sha256sum files
-        uses: shogo82148/actions-upload-release-asset@v1
-        with:
-          upload_url: ${{ github.event.inputs.upload_url }}
-          asset_path: target/*.sha256
-      - name: Upload error-code-report
-        uses: shogo82148/actions-upload-release-asset@v1
-        with:
-          upload_url: ${{ github.event.inputs.upload_url }}
-          asset_path: target/error_code_report.json
diff --git a/.vscode/settings.json b/.vscode/settings.json
index 99b0851..2eed481 100644
--- a/.vscode/settings.json
+++ b/.vscode/settings.json
@@ -3,8 +3,8 @@
   "editor.codeActionsOnSave": {
     "source.organizeImports": "explicit",
     "source.generate.finalModifiers": "explicit",
-    "source.fixAll": true
-  },
+    "source.fixAll": "explicit"
+},
   "java.saveActions.organizeImports": true,
   "java.sources.organizeImports.starThreshold": 3,
   "java.sources.organizeImports.staticStarThreshold": 3,
diff --git a/ci-isolation/pom.xml b/ci-isolation/pom.xml
index b03e011..2bab5b3 100644
--- a/ci-isolation/pom.xml
+++ b/ci-isolation/pom.xml
@@ -15,12 +15,12 @@
         <dependency>
             <groupId>com.exasol</groupId>
             <artifactId>ci-isolation-aws</artifactId>
-            <version>2.0.1</version>
+            <version>2.0.2</version>
         </dependency>
         <dependency>
             <groupId>software.amazon.awscdk</groupId>
             <artifactId>aws-cdk-lib</artifactId>
-            <version>2.110.0</version>
+            <version>2.132.1</version>
         </dependency>
         <dependency>
             <groupId>software.constructs</groupId>
@@ -34,7 +34,7 @@
             <plugin>
                 <groupId>org.apache.maven.plugins</groupId>
                 <artifactId>maven-compiler-plugin</artifactId>
-                <version>3.11.0</version>
+                <version>3.12.1</version>
                 <configuration>
                     <source>11</source>
                     <target>11</target>
@@ -44,11 +44,11 @@
             <plugin>
                 <groupId>org.codehaus.mojo</groupId>
                 <artifactId>exec-maven-plugin</artifactId>
-                <version>3.1.0</version>
+                <version>3.2.0</version>
                 <configuration>
                     <mainClass>com.exasol.adapter.document.files.ciisolation.CiIsolationApp</mainClass>
                 </configuration>
             </plugin>
         </plugins>
     </build>
-</project>
\ No newline at end of file
+</project>
diff --git a/dependencies.md b/dependencies.md
index fb19cb5..8aef682 100644
--- a/dependencies.md
+++ b/dependencies.md
@@ -7,7 +7,7 @@
 | ---------------------------------------------------- | -------------------------------------------------------------------------------------------------------------- |
 | [AWS Java SDK :: Services :: Amazon CloudWatch][0]   | [Apache License, Version 2.0][1]                                                                               |
 | [AWS Java SDK :: Services :: AWS Secrets Manager][0] | [Apache License, Version 2.0][1]                                                                               |
-| [EXASolution JDBC Driver][2]                         | [EXAClient License][3]                                                                                         |
+| [Exasol JDBC Driver][2]                              | [EXAClient License][3]                                                                                         |
 | [error-reporting-java][4]                            | [MIT License][5]                                                                                               |
 | [AWS Lambda Java Core Library][6]                    | [Apache License, Version 2.0][1]                                                                               |
 | [AWS Lambda Java Events Library][6]                  | [Apache License, Version 2.0][1]                                                                               |
@@ -62,8 +62,8 @@
 
 [0]: https://aws.amazon.com/sdkforjava
 [1]: https://aws.amazon.com/apache2.0
-[2]: http://www.exasol.com
-[3]: https://repo1.maven.org/maven2/com/exasol/exasol-jdbc/7.1.20/exasol-jdbc-7.1.20-license.txt
+[2]: http://www.exasol.com/
+[3]: https://repo1.maven.org/maven2/com/exasol/exasol-jdbc/24.0.0/exasol-jdbc-24.0.0-license.txt
 [4]: https://github.com/exasol/error-reporting-java/
 [5]: https://github.com/exasol/error-reporting-java/blob/main/LICENSE
 [6]: https://aws.amazon.com/lambda/
diff --git a/doc/changes/changelog.md b/doc/changes/changelog.md
index ef72388..5ae9bfa 100644
--- a/doc/changes/changelog.md
+++ b/doc/changes/changelog.md
@@ -1,5 +1,6 @@
 # Changes
 
+* [1.0.10](changes_1.0.10.md)
 * [1.0.9](changes_1.0.9.md)
 * [1.0.8](changes_1.0.8.md)
 * [1.0.7](changes_1.0.7.md)
diff --git a/doc/changes/changes_1.0.10.md b/doc/changes/changes_1.0.10.md
new file mode 100644
index 0000000..9b2fefc
--- /dev/null
+++ b/doc/changes/changes_1.0.10.md
@@ -0,0 +1,43 @@
+# Cloudwatch Adapter 1.0.10, released 2024-03-14
+
+Code name: Fix CVE-2024-26308 and CVE-2024-25710 in test dependency
+
+## Summary
+
+This release fixed CVE-2024-26308 and CVE-2024-25710 in test dependency `org.apache.commons:commons-compress:1.24.0`.
+
+## Security
+
+* #95: Fixed CVE-2024-26308 in `org.apache.commons:commons-compress:jar:1.24.0:test`
+* #94: Fixed CVE-2024-25710 in `org.apache.commons:commons-compress:jar:1.24.0:test`
+
+## Dependency Updates
+
+### Compile Dependency Updates
+
+* Updated `com.exasol:exasol-jdbc:7.1.20` to `24.0.0`
+* Updated `com.exasol:test-db-builder-java:3.5.3` to `3.5.4`
+* Updated `org.apache.logging.log4j:log4j-api:2.22.1` to `2.23.1`
+* Updated `org.apache.logging.log4j:log4j-core:2.22.1` to `2.23.1`
+* Updated `org.apache.logging.log4j:log4j-slf4j-impl:2.22.1` to `2.23.1`
+* Updated `software.amazon.awssdk:cloudwatch:2.23.4` to `2.25.9`
+* Updated `software.amazon.awssdk:secretsmanager:2.23.4` to `2.25.9`
+
+### Test Dependency Updates
+
+* Updated `com.amazonaws:aws-java-sdk-s3:1.12.638` to `1.12.679`
+* Updated `com.exasol:exasol-testcontainers:7.0.0` to `7.0.1`
+* Updated `nl.jqno.equalsverifier:equalsverifier:3.15.6` to `3.15.8`
+* Updated `org.junit.jupiter:junit-jupiter:5.10.1` to `5.10.2`
+* Updated `org.mockito:mockito-core:5.9.0` to `5.11.0`
+* Updated `org.testcontainers:junit-jupiter:1.19.3` to `1.19.7`
+* Updated `org.testcontainers:localstack:1.19.3` to `1.19.7`
+
+### Plugin Dependency Updates
+
+* Updated `com.exasol:error-code-crawler-maven-plugin:1.3.1` to `2.0.1`
+* Updated `com.exasol:project-keeper-maven-plugin:3.0.0` to `4.2.0`
+* Updated `org.apache.maven.plugins:maven-compiler-plugin:3.11.0` to `3.12.1`
+* Updated `org.apache.maven.plugins:maven-failsafe-plugin:3.2.3` to `3.2.5`
+* Updated `org.apache.maven.plugins:maven-surefire-plugin:3.2.3` to `3.2.5`
+* Updated `org.codehaus.mojo:flatten-maven-plugin:1.5.0` to `1.6.0`
diff --git a/pk_generated_parent.pom b/pk_generated_parent.pom
index eb8cdc0..178ffb6 100644
--- a/pk_generated_parent.pom
+++ b/pk_generated_parent.pom
@@ -3,7 +3,7 @@
     <modelVersion>4.0.0</modelVersion>
     <groupId>com.exasol</groupId>
     <artifactId>cloudwatch-adapter-generated-parent</artifactId>
-    <version>1.0.9</version>
+    <version>1.0.10</version>
     <packaging>pom</packaging>
     <properties>
         <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
@@ -63,7 +63,7 @@
             <plugin>
                 <groupId>org.apache.maven.plugins</groupId>
                 <artifactId>maven-compiler-plugin</artifactId>
-                <version>3.11.0</version>
+                <version>3.12.1</version>
                 <configuration>
                     <source>${java.version}</source>
                     <target>${java.version}</target>
@@ -101,7 +101,7 @@
             <plugin>
                 <groupId>org.codehaus.mojo</groupId>
                 <artifactId>flatten-maven-plugin</artifactId>
-                <version>1.5.0</version>
+                <version>1.6.0</version>
                 <configuration>
                     <updatePomFile>true</updatePomFile>
                     <flattenMode>oss</flattenMode>
@@ -140,7 +140,7 @@
             <plugin>
                 <groupId>org.apache.maven.plugins</groupId>
                 <artifactId>maven-surefire-plugin</artifactId>
-                <version>3.2.3</version>
+                <version>3.2.5</version>
                 <configuration>
                     <!-- Set the highest log level for coverage testing, so that we
           have a chance to reach branches in the logging lambdas too. -->
@@ -164,6 +164,17 @@
                 </executions>
                 <configuration>
                     <rulesUri>file:///${project.basedir}/versionsMavenPluginRules.xml</rulesUri>
+                    <allowDowngrade>false</allowDowngrade>
+                    <allowIncrementalUpdates>true</allowIncrementalUpdates>
+                    <allowMinorUpdates>true</allowMinorUpdates>
+                    <allowMajorUpdates>true</allowMajorUpdates>
+                    <allowSnapshots>false</allowSnapshots>
+                    <generateBackupPoms>true</generateBackupPoms>
+                    <processDependencies>true</processDependencies>
+                    <processDependencyManagement>true</processDependencyManagement>
+                    <processParent>false</processParent>
+                    <autoLinkItems>true</autoLinkItems>
+                    <excludeReactor>true</excludeReactor>
                 </configuration>
             </plugin>
             <plugin>
@@ -194,7 +205,7 @@
             <plugin>
                 <groupId>org.apache.maven.plugins</groupId>
                 <artifactId>maven-failsafe-plugin</artifactId>
-                <version>3.2.3</version>
+                <version>3.2.5</version>
                 <configuration>
                     <!-- Set the highest log level for coverage testing, so that we have a chance to reach branches in the logging lambdas too. -->
                     <argLine>-Djava.util.logging.config.file=src/test/resources/logging.properties ${argLine}</argLine>
@@ -255,7 +266,7 @@
             <plugin>
                 <groupId>com.exasol</groupId>
                 <artifactId>error-code-crawler-maven-plugin</artifactId>
-                <version>1.3.1</version>
+                <version>2.0.1</version>
                 <executions>
                     <execution>
                         <id>verify</id>
diff --git a/pom.xml b/pom.xml
index 51d633c..5fd4444 100644
--- a/pom.xml
+++ b/pom.xml
@@ -3,14 +3,14 @@
     <modelVersion>4.0.0</modelVersion>
     <groupId>com.exasol</groupId>
     <artifactId>cloudwatch-adapter</artifactId>
-    <version>1.0.9</version>
+    <version>1.0.10</version>
     <name>cloudwatch-adapter</name>
     <description>Makes Exasol database monitoring data available in AWS CloudWatch</description>
     <url>https://github.com/exasol/cloudwatch-adapter/</url>
     <properties>
-        <org.testcontainers.version>1.19.3</org.testcontainers.version>
-        <log4j.version>2.22.1</log4j.version>
-        <aws.sdk.version>2.23.4</aws.sdk.version>
+        <org.testcontainers.version>1.19.7</org.testcontainers.version>
+        <log4j.version>2.23.1</log4j.version>
+        <aws.sdk.version>2.25.9</aws.sdk.version>
     </properties>
     <dependencies>
         <dependency>
@@ -26,7 +26,7 @@
         <dependency>
             <groupId>com.exasol</groupId>
             <artifactId>exasol-jdbc</artifactId>
-            <version>7.1.20</version>
+            <version>24.0.0</version>
         </dependency>
         <dependency>
             <groupId>com.exasol</groupId>
@@ -84,13 +84,13 @@
         <dependency>
             <groupId>org.junit.jupiter</groupId>
             <artifactId>junit-jupiter</artifactId>
-            <version>5.10.1</version>
+            <version>5.10.2</version>
             <scope>test</scope>
         </dependency>
         <dependency>
             <groupId>com.exasol</groupId>
             <artifactId>exasol-testcontainers</artifactId>
-            <version>7.0.0</version>
+            <version>7.0.1</version>
             <scope>test</scope>
         </dependency>
         <dependency>
@@ -102,13 +102,13 @@
         <dependency>
             <groupId>org.mockito</groupId>
             <artifactId>mockito-core</artifactId>
-            <version>5.9.0</version>
+            <version>5.11.0</version>
             <scope>test</scope>
         </dependency>
         <dependency>
             <groupId>com.exasol</groupId>
             <artifactId>test-db-builder-java</artifactId>
-            <version>3.5.3</version>
+            <version>3.5.4</version>
         </dependency>
         <dependency>
             <groupId>org.itsallcode</groupId>
@@ -125,13 +125,13 @@
             <!-- Required by org.testcontainer:localstack -->
             <groupId>com.amazonaws</groupId>
             <artifactId>aws-java-sdk-s3</artifactId>
-            <version>1.12.638</version>
+            <version>1.12.679</version>
             <scope>test</scope>
         </dependency>
         <dependency>
             <groupId>nl.jqno.equalsverifier</groupId>
             <artifactId>equalsverifier</artifactId>
-            <version>3.15.6</version>
+            <version>3.15.8</version>
             <scope>test</scope>
         </dependency>
     </dependencies>
@@ -159,7 +159,7 @@
             <plugin>
                 <groupId>com.exasol</groupId>
                 <artifactId>project-keeper-maven-plugin</artifactId>
-                <version>3.0.0</version>
+                <version>4.2.0</version>
                 <executions>
                     <execution>
                         <goals>
@@ -215,7 +215,7 @@
     <parent>
         <artifactId>cloudwatch-adapter-generated-parent</artifactId>
         <groupId>com.exasol</groupId>
-        <version>1.0.9</version>
+        <version>1.0.10</version>
         <relativePath>pk_generated_parent.pom</relativePath>
     </parent>
 </project>
diff --git a/sam/template.yaml b/sam/template.yaml
index bae8255..d43673c 100644
--- a/sam/template.yaml
+++ b/sam/template.yaml
@@ -9,7 +9,7 @@ Metadata:
     LicenseUrl: ../LICENSE
     ReadmeUrl: ../README.md
     HomePageUrl: https://github.com/exasol/cloudwatch-adapter
-    SemanticVersion: 1.0.9
+    SemanticVersion: 1.0.10
     SourceCodeUrl: https://github.com/exasol/cloudwatch-adapter
 
 Globals: