diff --git a/sigstore-cli/build.gradle.kts b/sigstore-cli/build.gradle.kts
index 096322f5..bf82bf98 100644
--- a/sigstore-cli/build.gradle.kts
+++ b/sigstore-cli/build.gradle.kts
@@ -12,7 +12,7 @@ repositories {
 
 dependencies {
     implementation(project(":sigstore-java"))
-    implementation("info.picocli:picocli:4.7.6")
+    implementation("info.picocli:picocli:4.7.7")
     implementation("com.google.guava:guava:33.4.8-jre")
 
     implementation(platform("com.google.oauth-client:google-oauth-client-bom:1.39.0"))
@@ -23,7 +23,7 @@ dependencies {
 
     implementation("org.slf4j:slf4j-simple:2.0.17")
 
-    annotationProcessor("info.picocli:picocli-codegen:4.7.6")
+    annotationProcessor("info.picocli:picocli-codegen:4.7.7")
 }
 
 tasks.compileJava {
diff --git a/tuf-cli/build.gradle.kts b/tuf-cli/build.gradle.kts
index 6e5e47cd..9cde6b33 100644
--- a/tuf-cli/build.gradle.kts
+++ b/tuf-cli/build.gradle.kts
@@ -9,13 +9,13 @@ repositories {
 
 dependencies {
     implementation(project(":sigstore-java"))
-    implementation("info.picocli:picocli:4.7.6")
+    implementation("info.picocli:picocli:4.7.7")
     implementation("com.google.guava:guava:33.4.8-jre")
 
     implementation(platform("com.google.oauth-client:google-oauth-client-bom:1.39.0"))
     implementation("com.google.oauth-client:google-oauth-client")
 
-    annotationProcessor("info.picocli:picocli-codegen:4.7.6")
+    annotationProcessor("info.picocli:picocli-codegen:4.7.7")
 }
 
 tasks.compileJava {