diff --git a/pom.xml b/pom.xml
index 4dc09189..fca6660c 100644
--- a/pom.xml
+++ b/pom.xml
@@ -228,7 +228,7 @@
     <log4j-changelog-maven-plugin.version>0.9.0</log4j-changelog-maven-plugin.version>
     <maven-artifact-plugin.version>3.6.0</maven-artifact-plugin.version>
     <restrict-imports-enforcer-rule.version>2.6.1</restrict-imports-enforcer-rule.version>
-    <spotbugs-maven-plugin.version>4.9.3.0</spotbugs-maven-plugin.version>
+    <spotbugs-maven-plugin.version>4.9.4.2</spotbugs-maven-plugin.version>
     <spotless-maven-plugin.version>2.44.5</spotless-maven-plugin.version>
     <xml-maven-plugin.version>1.1.0</xml-maven-plugin.version>
     <!-- Due to a missing `maven-metadata.xml`, Dependabot does not update this automatically -->
diff --git a/src/changelog/.12.x.x/update_com_github_spotbugs_spotbugs_maven_plugin.xml b/src/changelog/.12.x.x/update_com_github_spotbugs_spotbugs_maven_plugin.xml
new file mode 100644
index 00000000..73ed1f33
--- /dev/null
+++ b/src/changelog/.12.x.x/update_com_github_spotbugs_spotbugs_maven_plugin.xml
@@ -0,0 +1,8 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<entry xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+       xmlns="https://logging.apache.org/xml/ns"
+       xsi:schemaLocation="https://logging.apache.org/xml/ns https://logging.apache.org/xml/ns/log4j-changelog-0.xsd"
+       type="updated">
+  <issue id="439" link="https://github.com/apache/logging-parent/pull/439"/>
+  <description format="asciidoc">Update `com.github.spotbugs:spotbugs-maven-plugin` to version `4.9.4.2`</description>
+</entry>