diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 5a357119407..1cdb99f4565 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -133,6 +133,10 @@ updates:
       - dependency-name: "org.skyscreamer:jsonassert"
       - dependency-name: "org.eclipse.jdt:ecj"
         versions: [ "3.42.0", "3.43.0" ]
+      # We depend on the JUnit version in ORM, hence we cannot just bump to a next major/minor
+      - dependency-name: "org.junit:*"
+        update-types: [ "version-update:semver-minor", "version-update:semver-major" ]
+
   - package-ecosystem: "docker"
     registries:
       - dockerhub
diff --git a/pom.xml b/pom.xml
index 37ee0a396e7..f7420ebc9d2 100644
--- a/pom.xml
+++ b/pom.xml
@@ -271,9 +271,9 @@
         <!-- Plugin versions -->
         <version.clean.plugin>3.5.0</version.clean.plugin>
         <version.install.plugin>3.1.4</version.install.plugin>
-        <version.enforcer.plugin>3.6.1</version.enforcer.plugin>
+        <version.enforcer.plugin>3.6.2</version.enforcer.plugin>
         <version.project-info.plugin>3.9.0</version.project-info.plugin>
-        <version.japicmp.plugin>0.23.1</version.japicmp.plugin>
+        <version.japicmp.plugin>0.24.1</version.japicmp.plugin>
         <version.deploy.plugin>3.1.4</version.deploy.plugin>
         <version.flatten-maven-plugin>1.7.3</version.flatten-maven-plugin>
         <version.assembly.plugin>3.7.1</version.assembly.plugin>
@@ -281,11 +281,11 @@
         <version.checkstyle.plugin>3.6.0</version.checkstyle.plugin>
         <version.bundle.plugin>6.0.0</version.bundle.plugin>
         <version.compiler.plugin>3.14.1</version.compiler.plugin>
-        <version.dependency.plugin>3.8.1</version.dependency.plugin>
+        <version.dependency.plugin>3.9.0</version.dependency.plugin>
         <!-- Check dependencies for security vulnerabilities -->
         <version.dependency-check.plugin>12.1.6</version.dependency-check.plugin>
-        <version.exec.plugin>3.5.1</version.exec.plugin>
-        <version.forbiddenapis.plugin>3.9</version.forbiddenapis.plugin>
+        <version.exec.plugin>3.6.1</version.exec.plugin>
+        <version.forbiddenapis.plugin>3.10</version.forbiddenapis.plugin>
         <!-- Make sure that upgraded Jandex plugin aligns with the Jandex version imported from the ORM platform pom -->
         <version.jandex.plugin>3.5.0</version.jandex.plugin>
         <version.maven.injection.plugin>1.0.2</version.maven.injection.plugin>
@@ -298,7 +298,7 @@
         <version.source.plugin>3.3.1</version.source.plugin>
         <!-- Surefire versions are a minefield of bugs: be careful with upgrades -->
         <version.surefire.plugin>3.5.4</version.surefire.plugin>
-        <version.surefire.plugin.java-version.asm>9.8</version.surefire.plugin.java-version.asm>
+        <version.surefire.plugin.java-version.asm>9.9</version.surefire.plugin.java-version.asm>
         <version.jacoco.plugin>0.8.13</version.jacoco.plugin>
         <version.com.buschmais.jqassistant.plugin>2.7.1</version.com.buschmais.jqassistant.plugin>
         <version.moditect.plugin>1.3.0.Final</version.moditect.plugin>
@@ -360,7 +360,7 @@
         <version.org.hibernate.infra.hibernate-asciidoctor-theme>6.0.2.Final</version.org.hibernate.infra.hibernate-asciidoctor-theme>
         <version.org.hibernate.infra.hibernate-asciidoctor-extensions>3.2.0.Final</version.org.hibernate.infra.hibernate-asciidoctor-extensions>
         <version.org.asciidoctor.asciidoctorj>3.0.0</version.org.asciidoctor.asciidoctorj>
-        <version.org.asciidoctor.asciidoctorj-pdf>2.3.19</version.org.asciidoctor.asciidoctorj-pdf>
+        <version.org.asciidoctor.asciidoctorj-pdf>2.3.20</version.org.asciidoctor.asciidoctorj-pdf>
 
         <!--
             Defines what to do with dependency management section of the flattened pom.