diff --git a/CHANGES.md b/CHANGES.md
index 94c5cb922d..2ed0bbb6d4 100644
--- a/CHANGES.md
+++ b/CHANGES.md
@@ -16,6 +16,9 @@ We adhere to the [keepachangelog](https://keepachangelog.com/en/1.0.0/) format (
 - Bump default `gherkin` version `42.0.0` -> `42.0.1`. ([#3088](https://github.com/diffplug/spotless/pull/3088))
 - Bump default `jackson` version `2.22.2` -> `2.22.3`. ([#3101](https://github.com/diffplug/spotless/pull/3101))
 - Bump default `palantir-java-format` version `2.98.0` -> `2.99.0`. ([#3103](https://github.com/diffplug/spotless/pull/3103))
+- Bump default `google-java-format` version `1.36.1` -> `1.37.0`. ([#3130](https://github.com/diffplug/spotless/pull/3130))
+- Bump default `palantir-java-format` version `2.98.0` -> `2.99.0`. ([#3130](https://github.com/diffplug/spotless/pull/3130))
+
 
 ## [4.10.3] - 2026-09-25
 
diff --git a/gradle/libs.versions.toml b/gradle/libs.versions.toml
index d668b53079..ba71fc7c76 100644
--- a/gradle/libs.versions.toml
+++ b/gradle/libs.versions.toml
@@ -31,7 +31,7 @@ palantir-java-format = "com.palantir.javaformat:palantir-java-format:2.99.0"
 jgit = "org.eclipse.jgit:org.eclipse.jgit:7.8.0.202609011348-r"
 junit-jupiter = "org.junit.jupiter:junit-jupiter:6.1.3"
 assertj-core = "org.assertj:assertj-core:3.27.7"
-mockito-core = "org.mockito:mockito-core:5.23.0"
+mockito-core = "org.mockito:mockito-core:5.24.0"
 osgi = "org.eclipse.platform:org.eclipse.osgi:3.24.300"
 slf4j-api = "org.slf4j:slf4j-api:2.0.20"
 jsr305 = "com.google.code.findbugs:jsr305:3.0.2"
@@ -40,7 +40,7 @@ jakarta-annotation-api = "jakarta.annotation:jakarta.annotation-api:3.0.0"
 plexus-resources = "org.codehaus.plexus:plexus-resources:1.4.0"
 plexus-utils = "org.codehaus.plexus:plexus-utils:4.1.0"
 concurrent-trees = "com.googlecode.concurrent-trees:concurrent-trees:2.6.1"
-owasp-encoder = "org.owasp.encoder:encoder:1.4.0"
+owasp-encoder = "org.owasp.encoder:encoder:1.5.0"
 mustache-compiler = "com.github.spullara.mustache.java:compiler:0.9.14"
 adocfmt = "org.drjekyll:adocfmt:0.3.1"
 antlr4-formatter = "com.khubla.antlr4formatter:antlr4-formatter:1.2.1"
@@ -51,7 +51,7 @@ flexmark-all = "com.vladsch.flexmark:flexmark-all:0.64.8"
 freshmark = "com.diffplug.freshmark:freshmark:1.3.1"
 cucumber-gherkin = "io.cucumber:gherkin:42.0.1"
 gherkin-utils = "io.cucumber:gherkin-utils:12.0.2"
-google-java-format = "com.google.googlejavaformat:google-java-format:1.36.1"
+google-java-format = "com.google.googlejavaformat:google-java-format:1.37.0"
 gson = "com.google.code.gson:gson:2.14.0"
 json-simple = "org.json:json:20210307"
 ktfmt = "com.facebook:ktfmt:0.64"
diff --git a/plugin-gradle/CHANGES.md b/plugin-gradle/CHANGES.md
index 126ed90044..54151a0fa5 100644
--- a/plugin-gradle/CHANGES.md
+++ b/plugin-gradle/CHANGES.md
@@ -9,6 +9,9 @@ We adhere to the [keepachangelog](https://keepachangelog.com/en/1.0.0/) format (
 - Bump default `gherkin` version `42.0.0` -> `42.0.1`. ([#3088](https://github.com/diffplug/spotless/pull/3088))
 - Bump default `jackson` version `2.22.2` -> `2.22.3`. ([#3101](https://github.com/diffplug/spotless/pull/3101))
 - Bump default `palantir-java-format` version `2.98.0` -> `2.99.0`. ([#3103](https://github.com/diffplug/spotless/pull/3103))
+- Bump default `google-java-format` version `1.36.1` -> `1.37.0`. ([#3130](https://github.com/diffplug/spotless/pull/3130))
+- Bump default `palantir-java-format` version `2.98.0` -> `2.99.0`. ([#3130](https://github.com/diffplug/spotless/pull/3130))
+
 
 ## [8.10.3] - 2026-09-25
 ### Changes
diff --git a/plugin-maven/CHANGES.md b/plugin-maven/CHANGES.md
index 3686b806f4..8d634fc94f 100644
--- a/plugin-maven/CHANGES.md
+++ b/plugin-maven/CHANGES.md
@@ -9,6 +9,9 @@ We adhere to the [keepachangelog](https://keepachangelog.com/en/1.0.0/) format (
 - Bump default `gherkin` version `42.0.0` -> `42.0.1`. ([#3088](https://github.com/diffplug/spotless/pull/3088))
 - Bump default `jackson` version `2.22.2` -> `2.22.3`. ([#3101](https://github.com/diffplug/spotless/pull/3101))
 - Bump default `palantir-java-format` version `2.98.0` -> `2.99.0`. ([#3103](https://github.com/diffplug/spotless/pull/3103))
+- Bump default `google-java-format` version `1.36.1` -> `1.37.0`. ([#3130](https://github.com/diffplug/spotless/pull/3130))
+- Bump default `palantir-java-format` version `2.98.0` -> `2.99.0`. ([#3130](https://github.com/diffplug/spotless/pull/3130))
+
 
 ## [3.10.3] - 2026-09-25
 ### Changes