diff --git a/.github/dependabot.yaml b/.github/dependabot.yaml
index 6c73c48d8d7..5e7fa1e63ce 100644
--- a/.github/dependabot.yaml
+++ b/.github/dependabot.yaml
@@ -90,6 +90,9 @@ updates:
     registries:
       - maven-central
     ignore:
+      # `com.github.spotbugs:spotbugs-annotations:4.9.0` and onwards require Java 11
+      - dependency-name: "com.github.spotbugs:spotbugs-annotations"
+        versions: [ "[4.9.0,)" ]
       # Jetty 10.x does not have an internal logging API
       - dependency-name: "org.eclipse.jetty:*"
         versions: [ "[10,)" ]
diff --git a/log4j-parent/pom.xml b/log4j-parent/pom.xml
index 33c3c9ac70a..c1e38a9231e 100644
--- a/log4j-parent/pom.xml
+++ b/log4j-parent/pom.xml
@@ -130,7 +130,8 @@
     <osgi.annotation.versioning.version>1.1.2</osgi.annotation.versioning.version>
     <pax-exam.version>4.14.0</pax-exam.version>
     <plexus-utils.version>3.6.0</plexus-utils.version>
-    <spotbugs-annotations.version>4.9.3</spotbugs-annotations.version>
+    <!-- `com.github.spotbugs:spotbugs-annotations:4.9.0` and onwards require Java 11: -->
+    <spotbugs-annotations.version>4.8.6</spotbugs-annotations.version>
     <spring-boot.version>2.7.18</spring-boot.version>
     <spring-framework.version>5.3.39</spring-framework.version>
     <system-stubs.version>2.0.3</system-stubs.version>