diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index dad093b..13f8e97 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -12,7 +12,7 @@ jobs:
     verify-gradle-wrapper:
         runs-on: ubuntu-latest
         steps:
-            - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+            - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
             - uses: gradle/wrapper-validation-action@f9c9c575b8b21b6485636a91ffecd10e558c62f6 # v3.5.0
 
     build:
@@ -22,7 +22,7 @@ jobs:
             matrix:
                 jdk: [11, 15]
         steps:
-            - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+            - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
             - uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4.0.2
               with:
                 path: |
@@ -32,7 +32,7 @@ jobs:
                 restore-keys: |
                     ${{ runner.os }}-jdk-${{ matrix.jdk }}-gradlewrapper-${{ hashFiles('**/gradle-wrapper.properties') }}-gradlescripts-
             - name: Set up JDK
-              uses: actions/setup-java@6a0805fcefea3d4657a47ac4c165951e33482018 # v4.2.2
+              uses: actions/setup-java@b36c23c0d998641eff861008f374ee103c25ac73 # v4.4.0
               with:
                   distribution: adopt
                   java-version: ${{ matrix.jdk }}
diff --git a/MappingTest/build.gradle b/MappingTest/build.gradle
index c73bbbf..f9bfefa 100644
--- a/MappingTest/build.gradle
+++ b/MappingTest/build.gradle
@@ -16,7 +16,7 @@ plugins {
 	id 'maven-publish'
 	//id 'org.minimallycorrect.mixin.gradle-plugin' version '0.0.6-SNAPSHOT'
 	id 'dev.minco.mapping' version '0.0.1-SNAPSHOT'
-	id("dev.minco.gradle.defaults-plugin") version "0.2.67"
+	id("dev.minco.gradle.defaults-plugin") version "0.2.80"
 }
 
 import dev.minco.mapping.GradleExtensions
diff --git a/build.gradle b/build.gradle
index cc89020..73ddf29 100644
--- a/build.gradle
+++ b/build.gradle
@@ -1,9 +1,9 @@
 plugins {
 	id 'java-library'
 	id 'maven-publish'
-	id "com.gradle.plugin-publish" version "1.2.2"
+	id "com.gradle.plugin-publish" version "1.3.0"
 	id 'java-gradle-plugin'
-	id("dev.minco.gradle.defaults-plugin") version "0.2.67"
+	id("dev.minco.gradle.defaults-plugin") version "0.2.80"
 }
 
 sourceSets.main.java.srcDirs = files('src')
@@ -32,13 +32,13 @@ repositories {
 
 dependencies {
 	compileOnly "org.jetbrains:annotations:24.1.0"
-	compileOnly "org.checkerframework:checker-qual:3.47.0"
+	compileOnly "org.checkerframework:checker-qual:3.48.0"
 	testImplementation "junit:junit:4.13.2"
 	// TODO: actually test Mixin at the same time
 	//api 'org.minimallycorrect.mixin:Mixin:0.0.6'
 	implementation 'net.fabricmc:tiny-remapper:0.10.4'
 	implementation 'net.fabricmc:tiny-mappings-parser:0.3.0+build.17'
-	implementation 'com.google.guava:guava:33.3.0-jre'
+	implementation 'com.google.guava:guava:33.3.1-jre'
 
 	compileOnly 'org.projectlombok:lombok:1.18.34'
 	annotationProcessor 'org.projectlombok:lombok:1.18.34'
@@ -46,8 +46,8 @@ dependencies {
 	testAnnotationProcessor 'org.projectlombok:lombok:1.18.34'
 
 	// https://junit.org/junit5/docs/current/user-guide/#running-tests-build
-	testImplementation("org.junit.jupiter:junit-jupiter-api:5.11.0")
-	testRuntimeOnly("org.junit.jupiter:junit-jupiter-engine:5.11.0")
+	testImplementation("org.junit.jupiter:junit-jupiter-api:5.11.1")
+	testRuntimeOnly("org.junit.jupiter:junit-jupiter-engine:5.11.1")
 }
 
 test {
@@ -64,8 +64,8 @@ allprojects {
 			resolutionStrategy {
 				failOnVersionConflict()
 
-				force('org.checkerframework:checker-qual:3.47.0')
-				force('com.google.guava:guava:33.3.0-jre')
+				force('org.checkerframework:checker-qual:3.48.0')
+				force('com.google.guava:guava:33.3.1-jre')
 				force('com.google.code.findbugs:jsr305:3.0.2')
 				def asmVer = '9.7'
 				force("org.ow2.asm:asm:$asmVer")