diff --git a/.github/workflows/opencode-upgrades.yml b/.github/workflows/opencode-upgrades.yml
index 36584fc..5609cf1 100644
--- a/.github/workflows/opencode-upgrades.yml
+++ b/.github/workflows/opencode-upgrades.yml
@@ -21,7 +21,7 @@ jobs:
 
       - uses: actions/setup-java@v5
         with:
-          java-version: "21"
+          java-version: "17"
           distribution: temurin
       - uses: sbt/setup-sbt@v1
 
diff --git a/.github/workflows/opencode.yml b/.github/workflows/opencode.yml
index ce8284a..240d807 100644
--- a/.github/workflows/opencode.yml
+++ b/.github/workflows/opencode.yml
@@ -27,7 +27,7 @@ jobs:
 
       - uses: actions/setup-java@v5
         with:
-          java-version: "21"
+          java-version: "17"
           distribution: temurin
       - uses: sbt/setup-sbt@v1
 
diff --git a/build.gradle.kts b/build.gradle.kts
index 3f37267..01aa77a 100644
--- a/build.gradle.kts
+++ b/build.gradle.kts
@@ -13,7 +13,7 @@ repositories {
 
 buildscript {
     dependencies {
-        classpath("org.jetbrains.dokka:dokka-base:2.1.0")
+        classpath("org.jetbrains.dokka:dokka-base:2.2.0")
         // classpath("org.jetbrains.dokka:kotlin-as-java-plugin:2.0.0")
     }
 }
diff --git a/gradle/libs.versions.toml b/gradle/libs.versions.toml
index 7cb9496..5bde04d 100644
--- a/gradle/libs.versions.toml
+++ b/gradle/libs.versions.toml
@@ -1,14 +1,14 @@
 [versions]
-arrow = "2.2.1.1"
+arrow = "2.2.2.1"
 binary-compatibility-validator = "0.18.1"
-dokka = "2.1.0"
-errorprone = "2.42.0"
+dokka = "2.2.0"
+errorprone = "2.42.0" # DO NOT upgrade beyond 2.42.0 — it is the last version supporting JDK 17
 errorprone-plugin = "5.1.0"
-jetbrains-annotations = "26.0.2"
+jetbrains-annotations = "26.1.0"
 jspecify = "1.0.0"
-kotlin = "2.3.0"
-kover = "0.9.5"
-nullaway = "0.13.1"
+kotlin = "2.3.21"
+kover = "0.9.8"
+nullaway = "0.13.4"
 nullaway-plugin = "3.0.0"
 publish-plugin = "0.36.0"
 versions-plugin = "0.53.0"
diff --git a/tasks-jvm/build.gradle.kts b/tasks-jvm/build.gradle.kts
index 2d81dde..e4de75a 100644
--- a/tasks-jvm/build.gradle.kts
+++ b/tasks-jvm/build.gradle.kts
@@ -23,7 +23,7 @@ dependencies {
     errorprone(libs.errorprone.core)
     errorprone(libs.nullaway)
 
-    testImplementation(platform("org.junit:junit-bom:6.0.2"))
+    testImplementation(platform("org.junit:junit-bom:6.0.3"))
     testImplementation("org.junit.jupiter:junit-jupiter")
     testRuntimeOnly("org.junit.platform:junit-platform-launcher")
 }