diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 4b638859187d7..1ed55a74c7ee8 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -117,6 +117,7 @@ updates:
       - dependency-name: com.amazonaws:aws-lambda-java-events
       # Apache Commons
       - dependency-name: commons-io:commons-io
+      - dependency-name: com.thoughtworks.xstream:xstream
     rebase-strategy: disabled
   - package-ecosystem: gradle
     directory: "/integration-tests/gradle"
diff --git a/test-framework/junit5/pom.xml b/test-framework/junit5/pom.xml
index 93e47bb8f5778..9a6524da70549 100644
--- a/test-framework/junit5/pom.xml
+++ b/test-framework/junit5/pom.xml
@@ -48,8 +48,8 @@
         <dependency>
             <groupId>com.thoughtworks.xstream</groupId>
             <artifactId>xstream</artifactId>
-            <!-- Avoid adding this to the BOM / Version has to be kept in sync with what optaplanner uses otherwise the enforcer complains -->
-            <version>1.4.11.1</version>
+            <!-- Avoid adding this to the BOM -->
+            <version>1.4.13</version>
         </dependency>
     </dependencies>