diff --git a/pom.xml b/pom.xml
index c45d16359a9d8134d0ca32d3225fa18de11b1e96..2759c6e9b092976f2ace6d2f5f07c3186bd3a85b 100644
--- a/pom.xml
+++ b/pom.xml
@@ -126,7 +126,7 @@
 			<groupId>com.github.spotbugs</groupId>
 			<artifactId>spotbugs-annotations</artifactId>
 			<scope>provided</scope>
-			<version>4.2.2</version>
+			<version>4.2.3</version>
 		</dependency>
 		<!--
 			make other qa libs
@@ -339,7 +339,7 @@
 			<plugin>
 				<groupId>com.github.spotbugs</groupId>
 				<artifactId>spotbugs-maven-plugin</artifactId>
-				<version>4.2.2</version>
+				<version>4.2.3</version>
 			</plugin>
 			<!--
 				official docs: https://maven.apache.org/enforcer/enforcer-rules/requireMavenVersion.html
@@ -548,7 +548,7 @@
 				<plugins>
 					<plugin>
 						<artifactId>maven-gpg-plugin</artifactId>
-						<version>1.6</version>
+						<version>3.0.1</version>
 						<executions>
 							<execution>
 								<id>sign-artifacts</id>
@@ -656,7 +656,7 @@
 						<!-- plugin docs: http://eclemma.org/jacoco/trunk/doc/ -->
 						<groupId>org.jacoco</groupId>
 						<artifactId>jacoco-maven-plugin</artifactId>
-						<version>0.8.6</version>
+						<version>0.8.7</version>
 						<executions>
 							<execution>
 								<goals>
diff --git a/pom4ide.xml b/pom4ide.xml
index 7bb3dc11543138acaa783ad16c44c0118fc0f797..b8e0919d83f8a8287d7eb6c4b7a4202597b415c0 100644
--- a/pom4ide.xml
+++ b/pom4ide.xml
@@ -126,7 +126,7 @@
 			<groupId>com.github.spotbugs</groupId>
 			<artifactId>spotbugs-annotations</artifactId>
 			<scope>provided</scope>
-			<version>4.2.2</version>
+			<version>4.2.3</version>
 		</dependency>
 		<!--
 			make other qa libs
@@ -339,7 +339,7 @@
 			<plugin>
 				<groupId>com.github.spotbugs</groupId>
 				<artifactId>spotbugs-maven-plugin</artifactId>
-				<version>4.2.2</version>
+				<version>4.2.3</version>
 			</plugin>
 			<!--
 				official docs: https://maven.apache.org/enforcer/enforcer-rules/requireMavenVersion.html
@@ -548,7 +548,7 @@
 				<plugins>
 					<plugin>
 						<artifactId>maven-gpg-plugin</artifactId>
-						<version>1.6</version>
+						<version>3.0.1</version>
 						<executions>
 							<execution>
 								<id>sign-artifacts</id>
@@ -656,7 +656,7 @@
 						<!-- plugin docs: http://eclemma.org/jacoco/trunk/doc/ -->
 						<groupId>org.jacoco</groupId>
 						<artifactId>jacoco-maven-plugin</artifactId>
-						<version>0.8.6</version>
+						<version>0.8.7</version>
 						<executions>
 							<execution>
 								<goals>