diff --git a/core/pom.xml b/core/pom.xml
index bd7e2f07b..05c0997d4 100644
--- a/core/pom.xml
+++ b/core/pom.xml
@@ -227,7 +227,7 @@
       <plugin>
         <groupId>org.apache.maven.plugins</groupId>
         <artifactId>maven-project-info-reports-plugin</artifactId>
-        <version>3.7.0</version>
+        <version>3.8.0</version>
       </plugin>
     </plugins>
   </reporting>
diff --git a/pom.xml b/pom.xml
index 0c179a6e3..6a5823ecb 100644
--- a/pom.xml
+++ b/pom.xml
@@ -30,7 +30,7 @@
     -->
     <guava.jre.version>33.3.1-jre</guava.jre.version>
     <gwt.version>2.10.0</gwt.version>
-    <protobuf.version>4.28.2</protobuf.version>
+    <protobuf.version>4.28.3</protobuf.version>
     <!-- Property for protobuf-lite protocArtifact, which isn't a "normal" Maven dep. -->
     <!-- TODO(cpovirk): Use protobuf.version instead. But that requires finding the new way to request the Lite runtime. -->
     <protobuf-lite.protoc.version>3.1.0</protobuf-lite.protoc.version>
@@ -103,7 +103,7 @@
       <dependency>
         <groupId>com.google.errorprone</groupId>
         <artifactId>error_prone_annotations</artifactId>
-        <version>2.34.0</version>
+        <version>2.35.1</version>
       </dependency>
       <dependency>
         <groupId>com.google.protobuf</groupId>
@@ -219,12 +219,12 @@
         <plugin>
           <groupId>org.apache.maven.plugins</groupId>
           <artifactId>maven-site-plugin</artifactId>
-          <version>3.20.0</version>
+          <version>3.21.0</version>
         </plugin>
         <plugin>
           <groupId>org.apache.maven.plugins</groupId>
           <artifactId>maven-project-info-reports-plugin</artifactId>
-          <version>3.7.0</version>
+          <version>3.8.0</version>
         </plugin>
         <plugin>
           <artifactId>maven-javadoc-plugin</artifactId>