diff --git a/sigstore-java/build.gradle.kts b/sigstore-java/build.gradle.kts
index 56a86a49..2e2f853e 100644
--- a/sigstore-java/build.gradle.kts
+++ b/sigstore-java/build.gradle.kts
@@ -45,7 +45,7 @@ dependencies {
     implementation("com.google.oauth-client:google-oauth-client-java6")
 
     testImplementation(project(":sigstore-testkit"))
-    testImplementation(platform("org.junit:junit-bom:5.14.2"))
+    testImplementation(platform("org.junit:junit-bom:5.14.4"))
 
     testImplementation(platform("org.mockito:mockito-bom:5.21.0"))
     testImplementation("org.mockito:mockito-core")
diff --git a/sigstore-testkit/build.gradle.kts b/sigstore-testkit/build.gradle.kts
index a077ad92..0abc2990 100644
--- a/sigstore-testkit/build.gradle.kts
+++ b/sigstore-testkit/build.gradle.kts
@@ -11,7 +11,7 @@ dependencies {
 
     // This is different from typical "testImplementation" dependencies, because
     // testkit exposes junit5 dependencies in its API (e.g. annotations)
-    api(platform("org.junit:junit-bom:5.14.2"))
+    api(platform("org.junit:junit-bom:5.14.4"))
     api("org.junit.jupiter:junit-jupiter-api")
     api("org.junit.jupiter:junit-jupiter-params")
     implementation("org.junit.jupiter:junit-jupiter")