diff --git a/dependency-bundles/bom/pom.xml b/dependency-bundles/bom/pom.xml
index 3389e9d84..b326eac24 100644
--- a/dependency-bundles/bom/pom.xml
+++ b/dependency-bundles/bom/pom.xml
@@ -63,7 +63,7 @@
 		<findbugs-jsr305.version>3.0.2</findbugs-jsr305.version>
 		<!-- @Nonnull/@Nullable annotations -->
 		<vavr.version>1.0.1</vavr.version>
-		<guava.version>33.6.0-jre</guava.version>
+		<guava.version>33.7.1-jre</guava.version>
 		<!-- collection utilities, @Beta annotation -->
 		<commons-io.version>2.22.0</commons-io.version>
 		<!-- Apache file utils for SOAP (deprecated, we do not maintain!) -->
diff --git a/pom.xml b/pom.xml
index d40ca93b7..022ab3026 100644
--- a/pom.xml
+++ b/pom.xml
@@ -126,7 +126,8 @@
 		<handlebars.version>4.5.4</handlebars.version>
 		<commons-text.version>1.15.0</commons-text.version>
 		<checkstyle.version>12.3.1</checkstyle.version>
-		<byte-buddy.version>1.18.11</byte-buddy.version>
+		<byte-buddy.version>1.18.12</byte-buddy.version>
+		<jspecify.version>1.0.1</jspecify.version>
 		<snakeyaml.version>2.6</snakeyaml.version>
 		<commons-codec.version>1.22.1</commons-codec.version>
 		<commons-beanutils.version>1.11.0</commons-beanutils.version>
@@ -444,6 +445,13 @@
 				<version>${byte-buddy.version}</version>
 				<scope>test</scope>
 			</dependency>
+			<!--Transitive dependency of junit-jupiter-engine, pinned for dependency convergence-->
+			<dependency>
+				<groupId>org.jspecify</groupId>
+				<artifactId>jspecify</artifactId>
+				<version>${jspecify.version}</version>
+				<scope>test</scope>
+			</dependency>
 			<!-- Added to resolve dependency convergence between httpclient5, httpclient, and olingo-odata2-core -->
 			<dependency>
 				<groupId>commons-codec</groupId>