diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 76698e4..8589f05 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -72,7 +72,7 @@ jobs:
 
       - name: Bump version
         id: version
-        uses: paulhatch/semantic-version@v5.0.2
+        uses: paulhatch/semantic-version@5f6f89c4e06f9e1a2df00821598c0ac1f9085094 # v5.2.1
 
       - name: Create GitHub tag and release
         uses: softprops/action-gh-release@v0.1.15
diff --git a/build.gradle.kts b/build.gradle.kts
index d0f9692..b500747 100644
--- a/build.gradle.kts
+++ b/build.gradle.kts
@@ -11,8 +11,8 @@ logger.quiet("Gradle version: ${gradle.gradleVersion}")
 
 plugins {
   id("java-library")
-  id("com.diffplug.gradle.spotless") version "6.19.0" apply (false)
-  id("com.github.spotbugs") version "5.0.14" apply (false)
+  id("com.diffplug.gradle.spotless") version "6.21.0" apply (false)
+  id("com.github.spotbugs") version "5.1.3" apply (false)
   id("com.asarkar.gradle.build-time-tracker") version "4.3.0"
 }
 
@@ -102,14 +102,14 @@ subprojects {
 
   dependencies {
     val log4jVersion = "2.20.0"
-    val guavaVersion = "32.0.1-jre"
+    val guavaVersion = "32.1.2-jre"
     implementation("org.apache.logging.log4j:log4j-core:$log4jVersion")
     implementation("com.github.spotbugs:spotbugs-annotations:4.7.3")
     implementation("com.google.guava:guava:$guavaVersion")
 
-    val junitVersion = "5.9.3"
-    val truthVersion = "1.1.4"
-    val mockitoVersion = "5.3.1"
+    val junitVersion = "5.10.0"
+    val truthVersion = "1.1.5"
+    val mockitoVersion = "5.5.0"
     testImplementation("org.junit.jupiter:junit-jupiter:$junitVersion")
     testImplementation("com.google.truth:truth:$truthVersion")
     testImplementation("com.google.truth.extensions:truth-java8-extension:$truthVersion")