diff --git a/build.gradle b/build.gradle
index 81f4c8135..96706d71c 100644
--- a/build.gradle
+++ b/build.gradle
@@ -46,7 +46,7 @@ configure(subprojects.findAll { ['core', 'examples'].contains(it.name) }) {
     }
 
     spotbugs {
-        toolVersion = "4.7.3" // com.github.spotbugs:spotbugs-annotations
+        toolVersion = "4.9.4" // com.github.spotbugs:spotbugs-annotations
         reportsDir = file("$project.buildDir/reports/SpotBugsReports")
         effort = "max"
         reportLevel = "high"
diff --git a/core/build.gradle b/core/build.gradle
index 34dfc53bb..c98efdd27 100644
--- a/core/build.gradle
+++ b/core/build.gradle
@@ -201,7 +201,7 @@ dependencies {
     )
 
     providedCompile('javax.servlet:javax.servlet-api:4.0.1')
-    compileOnly 'com.github.spotbugs:spotbugs-annotations:4.7.3'
+    compileOnly 'com.github.spotbugs:spotbugs-annotations:4.9.4'
 
     testImplementation group: 'de.saly', name: 'javamail-mock2-fullmock', version: '0.5-beta4'
     testImplementation group: 'com.h2database', name: 'h2', version: '2.3.232'