diff --git a/versions.lock b/versions.lock
index 4e612680d9f..7d7d6034991 100644
--- a/versions.lock
+++ b/versions.lock
@@ -18,7 +18,7 @@ com.github.ben-manes.caffeine:caffeine:3.1.8 (1 constraints: 0e050536)
 com.github.jai-imageio:jai-imageio-core:1.4.0 (1 constraints: 5c0ced01)
 com.github.junrar:junrar:7.5.3 (1 constraints: 660c1102)
 com.github.openjson:openjson:1.0.12 (1 constraints: 8b0c6d0e)
-com.github.spotbugs:spotbugs-annotations:4.8.0 (1 constraints: 0e051736)
+com.github.spotbugs:spotbugs-annotations:4.8.6 (1 constraints: 14051d36)
 com.github.stephenc.jcip:jcip-annotations:1.0-1 (3 constraints: c71d2c87)
 com.github.virtuald:curvesapi:1.07 (1 constraints: 9e0ac7c0)
 com.google.android:annotations:4.1.1.4 (2 constraints: b918820a)
diff --git a/versions.props b/versions.props
index 844bf553fdf..7292003f331 100644
--- a/versions.props
+++ b/versions.props
@@ -7,7 +7,7 @@ com.carrotsearch:hppc=0.10.0
 com.cybozu.labs:langdetect=1.1-20120112
 com.fasterxml.jackson:jackson-bom=2.17.2
 com.github.ben-manes.caffeine:caffeine=3.1.8
-com.github.spotbugs:*=4.8.0
+com.github.spotbugs:*=4.8.6
 com.github.stephenc.jcip:jcip-annotations=1.0-1
 com.google.cloud:google-cloud-bom=0.224.0
 com.google.errorprone:*=2.23.0