diff --git a/dependencies.gradle b/dependencies.gradle
index 494351b9d4d..1b90ef5a6ee 100644
--- a/dependencies.gradle
+++ b/dependencies.gradle
@@ -97,8 +97,8 @@ dependencies {
     runtimeOnly 'org.apache.avalon.framework:avalon-framework-api:4.3.1' // required by barcode4j SPI scanning in xmlgraphics-commons 2.10+
     runtimeOnly 'org.apache.axis2:axis2-transport-http:1.8.2'
     runtimeOnly 'org.apache.axis2:axis2-transport-local:1.8.2'
-    runtimeOnly 'org.apache.derby:derby:10.16.1.1' // 10.17.x.x requires Java 21
-    runtimeOnly 'org.apache.derby:derbytools:10.16.1.1' // 10.17.x.x requires Java 21
+    runtimeOnly 'org.apache.derby:derby:10.17.1.0' // 10.17.x.x requires Java 21
+    runtimeOnly 'org.apache.derby:derbytools:10.17.1.0' // 10.17.x.x requires Java 21
     runtimeOnly 'org.apache.geronimo.specs:geronimo-jaxrpc_1.1_spec:2.1'
     runtimeOnly 'org.apache.logging.log4j:log4j-1.2-api:2.25.4' // for external jars using the old log4j1.2: routes logging to log4j 2
     runtimeOnly 'org.apache.logging.log4j:log4j-jul:2.25.4' // for external jars using the java.util.logging: routes logging to log4j 2