diff --git a/cmake/StaticBuild.cmake b/cmake/StaticBuild.cmake
index cb0a1ce15..d0b9f7b29 100644
--- a/cmake/StaticBuild.cmake
+++ b/cmake/StaticBuild.cmake
@@ -11,25 +11,25 @@ set(OPENSSL_SOURCE openssl-${OPENSSL_VERSION}.tar.gz)
 set(OPENSSL_HASH SHA256=aa7d8d9bef71ad6525c55ba11e5f4397889ce49c2c9349dcea6d3e4f0b024a7a
     CACHE STRING "openssl source hash")
 
-set(EXPAT_VERSION 2.4.8 CACHE STRING "expat version")
+set(EXPAT_VERSION 2.4.9 CACHE STRING "expat version")
 string(REPLACE "." "_" EXPAT_TAG "R_${EXPAT_VERSION}")
 set(EXPAT_MIRROR ${LOCAL_MIRROR} https://github.com/libexpat/libexpat/releases/download/${EXPAT_TAG}
     CACHE STRING "expat download mirror(s)")
 set(EXPAT_SOURCE expat-${EXPAT_VERSION}.tar.xz)
-set(EXPAT_HASH SHA256=f79b8f904b749e3e0d20afeadecf8249c55b2e32d4ebb089ae378df479dcaf25
+set(EXPAT_HASH SHA512=8508379b4915d84d50f3638678a90792179c98247d1cb5e6e6387d117af4dc148ac7031c1debea8b96e7b710ef436cf0dd5da91f3d22b8186a00cfafe1201169
     CACHE STRING "expat source hash")
 
-set(UNBOUND_VERSION 1.16.2 CACHE STRING "unbound version")
+set(UNBOUND_VERSION 1.17.0 CACHE STRING "unbound version")
 set(UNBOUND_MIRROR ${LOCAL_MIRROR} https://nlnetlabs.nl/downloads/unbound CACHE STRING "unbound download mirror(s)")
 set(UNBOUND_SOURCE unbound-${UNBOUND_VERSION}.tar.gz)
-set(UNBOUND_HASH SHA512=0ea65ea63265be677441bd2a28df12098ec5e86c3372240c2874f9bd13752b8b818da81ae6076cf02cbeba3d36e397698a4c2b50570be1a6a8e47f57a0251572
+set(UNBOUND_HASH SHA512=f6b9f279330fb19b5feca09524959940aad8c4e064528aa82b369c726d77e9e8e5ca23f366f6e9edcf2c061b96f482ed7a2c26ac70fc15ae5762b3d7e36a5284
     CACHE STRING "unbound source hash")
 
-set(SQLITE3_VERSION 3380500 CACHE STRING "sqlite3 version")
+set(SQLITE3_VERSION 3390400 CACHE STRING "sqlite3 version")
 set(SQLITE3_MIRROR ${LOCAL_MIRROR} https://www.sqlite.org/2022
     CACHE STRING "sqlite3 download mirror(s)")
 set(SQLITE3_SOURCE sqlite-autoconf-${SQLITE3_VERSION}.tar.gz)
-set(SQLITE3_HASH SHA3_256=ab649fea76f49a6ec7f907f001d87b8bd76dec0679c783e3992284c5a882a98c
+set(SQLITE3_HASH SHA3_256=431328e30d12c551da9ba7ef2122b269076058512014afa799caaf62ca567090
   CACHE STRING "sqlite3 source hash")
 
 set(SODIUM_VERSION 1.0.18 CACHE STRING "libsodium version")
@@ -48,11 +48,11 @@ set(ZMQ_SOURCE zeromq-${ZMQ_VERSION}.tar.gz)
 set(ZMQ_HASH SHA512=e198ef9f82d392754caadd547537666d4fba0afd7d027749b3adae450516bcf284d241d4616cad3cb4ad9af8c10373d456de92dc6d115b037941659f141e7c0e
     CACHE STRING "libzmq source hash")
 
-set(LIBUV_VERSION 1.44.1 CACHE STRING "libuv version")
+set(LIBUV_VERSION 1.44.2 CACHE STRING "libuv version")
 set(LIBUV_MIRROR ${LOCAL_MIRROR} https://dist.libuv.org/dist/v${LIBUV_VERSION}
     CACHE STRING "libuv mirror(s)")
 set(LIBUV_SOURCE libuv-v${LIBUV_VERSION}.tar.gz)
-set(LIBUV_HASH SHA512=b4f8944e2c79e3a6a31ded6cccbe4c0eeada50db6bc8a448d7015642795012a4b80ffeef7ca455bb093c59a8950d0e1430566c3c2fa87b73f82699098162d834
+set(LIBUV_HASH SHA512=91197ff9303112567bbb915bbb88058050e2ad1c048815a3b57c054635d5dc7df458b956089d785475290132236cb0edcfae830f5d749de29a9a3213eeaf0b20
     CACHE STRING "libuv source hash")
 
 set(ZLIB_VERSION 1.2.13 CACHE STRING "zlib version")
@@ -62,11 +62,11 @@ set(ZLIB_SOURCE zlib-${ZLIB_VERSION}.tar.xz)
 set(ZLIB_HASH SHA256=d14c38e313afc35a9a8760dadf26042f51ea0f5d154b0630a31da0540107fb98
   CACHE STRING "zlib source hash")
 
-set(CURL_VERSION 7.83.1 CACHE STRING "curl version")
+set(CURL_VERSION 7.85.0 CACHE STRING "curl version")
 set(CURL_MIRROR ${LOCAL_MIRROR} https://curl.haxx.se/download https://curl.askapache.com
   CACHE STRING "curl mirror(s)")
 set(CURL_SOURCE curl-${CURL_VERSION}.tar.xz)
-set(CURL_HASH SHA256=2cb9c2356e7263a1272fd1435ef7cdebf2cd21400ec287b068396deb705c22c4
+set(CURL_HASH SHA512=b57cc31649a4f47cc4b482f56a85c86c8e8aaeaf01bc1b51b065fdb9145a9092bc52535e52a85a66432eb163605b2edbf5bc5c33ea6e40e50f26a69ad1365cbd
   CACHE STRING "curl source hash")
 
 include(ExternalProject)
@@ -167,6 +167,11 @@ if(APPLE)
   set(deps_CXXFLAGS "${deps_CXXFLAGS} -mmacosx-version-min=${CMAKE_OSX_DEPLOYMENT_TARGET}")
 endif()
 
+if(_winver)
+  set(deps_CFLAGS "${deps_CFLAGS} -D_WIN32_WINNT=${_winver}")
+  set(deps_CXXFLAGS "${deps_CXXFLAGS} -D_WIN32_WINNT=${_winver}")
+endif()
+
 
 if("${CMAKE_GENERATOR}" STREQUAL "Unix Makefiles")
   set(_make $(MAKE))
diff --git a/cmake/win32.cmake b/cmake/win32.cmake
index ae3bdb6d2..a8f977c28 100644
--- a/cmake/win32.cmake
+++ b/cmake/win32.cmake
@@ -13,9 +13,6 @@ option(WITH_WINDOWS_32 "build 32 bit windows" OFF)
 # GNU ld sees fit to merge *all* the .ident sections in object files
 # to .r[o]data section one after the other!
 add_compile_options(-fno-ident -Wa,-mbig-obj)
-# the minimum windows version, set to 6 rn because supporting older windows is hell
-set(_winver 0x0600)
-add_definitions(-D_WIN32_WINNT=${_winver})
 
 if(EMBEDDED_CFG)
   link_libatomic()
diff --git a/contrib/cross/mingw_core.cmake b/contrib/cross/mingw_core.cmake
index a42673eda..8086ab7f3 100644
--- a/contrib/cross/mingw_core.cmake
+++ b/contrib/cross/mingw_core.cmake
@@ -1,4 +1,8 @@
-set(CMAKE_SYSTEM_VERSION 5.0)
+set(CMAKE_SYSTEM_VERSION 6.0)
+
+# the minimum windows version, set to 6 rn because supporting older windows is hell
+set(_winver 0x0600)
+add_definitions(-D_WIN32_WINNT=${_winver})
 
 # target environment on the build host system
 # second one is for non-root installs
diff --git a/external/CMakeLists.txt b/external/CMakeLists.txt
index 0e43855c0..d235c1ec2 100644
--- a/external/CMakeLists.txt
+++ b/external/CMakeLists.txt
@@ -124,4 +124,19 @@ if(WITH_BOOTSTRAP)
   target_include_directories(cpr PUBLIC cpr/include)
   target_compile_definitions(cpr PUBLIC CPR_CURL_NOSIGNAL)
   add_library(cpr::cpr ALIAS cpr)
+
+  file(READ cpr/CMakeLists.txt cpr_cmake_head LIMIT 1000)
+  if(cpr_cmake_head MATCHES "project\\(cpr VERSION ([0-9]+)\.([0-9]+)\.([0-9]+) LANGUAGES CXX\\)")
+    set(cpr_VERSION_MAJOR ${CMAKE_MATCH_1})
+    set(cpr_VERSION_MINOR ${CMAKE_MATCH_2})
+    set(cpr_VERSION_PATCH ${CMAKE_MATCH_3})
+    set(cpr_VERSION "${cpr_VERSION_MAJOR}.${cpr_VERSION_MINOR}.${cpr_VERSION_PATCH}")
+    set(cpr_VERSION_NUM "(${cpr_VERSION_MAJOR} * 0x10000 + ${cpr_VERSION_MINOR} * 0x100 + ${cpr_VERSION_PATCH})")
+
+    configure_file(cpr/cmake/cprver.h.in "${CMAKE_CURRENT_BINARY_DIR}/cpr_generated_includes/cpr/cprver.h")
+    target_include_directories(cpr PUBLIC "${CMAKE_CURRENT_BINARY_DIR}/cpr_generated_includes")
+  else()
+    message(FATAL_ERROR "Could not identify cpr submodule version!")
+  endif()
+
 endif()
diff --git a/external/cpr b/external/cpr
index aac5058a1..f88fd7737 160000
--- a/external/cpr
+++ b/external/cpr
@@ -1 +1 @@
-Subproject commit aac5058a15e9ad5ad393973dc6fe44d7614a7f55
+Subproject commit f88fd7737de3e640c61703eb57a0fa0ce00c60cd
diff --git a/external/cxxopts b/external/cxxopts
index 6fa46a748..c74846a89 160000
--- a/external/cxxopts
+++ b/external/cxxopts
@@ -1 +1 @@
-Subproject commit 6fa46a748838d5544ff8e9ab058906ba2c4bc0f3
+Subproject commit c74846a891b3cc3bfa992d588b1295f528d43039
diff --git a/external/ghc-filesystem b/external/ghc-filesystem
index 2a8b380f8..cd6805e94 160000
--- a/external/ghc-filesystem
+++ b/external/ghc-filesystem
@@ -1 +1 @@
-Subproject commit 2a8b380f8d4e77b389c42a194ab9c70d8e3a0f1e
+Subproject commit cd6805e94dd5d6346be1b75a54cdc27787319dd2
diff --git a/external/nlohmann b/external/nlohmann
index db78ac1d7..bc889afb4 160000
--- a/external/nlohmann
+++ b/external/nlohmann
@@ -1 +1 @@
-Subproject commit db78ac1d7716f56fc9f1b030b715f872f93964e4
+Subproject commit bc889afb4c5bf1c0d8ee29ef35eaaf4c8bef8a5d
diff --git a/external/pybind11 b/external/pybind11
index 8de7772cc..aa304c9c7 160000
--- a/external/pybind11
+++ b/external/pybind11
@@ -1 +1 @@
-Subproject commit 8de7772cc72daca8e947b79b83fea46214931604
+Subproject commit aa304c9c7d725ffb9d10af08a3b34cb372307020
diff --git a/external/sqlite_orm b/external/sqlite_orm
index 4c6a46bd4..fdcc1da46 160000
--- a/external/sqlite_orm
+++ b/external/sqlite_orm
@@ -1 +1 @@
-Subproject commit 4c6a46bd4dcfba14a650e0fafb86331526878587
+Subproject commit fdcc1da46fbd90feb886c0588462a62d29eb5a06