diff --git a/sigstore-java/build.gradle.kts b/sigstore-java/build.gradle.kts
index 2e2f853ea..cd9916e1f 100644
--- a/sigstore-java/build.gradle.kts
+++ b/sigstore-java/build.gradle.kts
@@ -36,8 +36,8 @@ dependencies {
 
     implementation("commons-codec:commons-codec:1.18.0")
     implementation("com.google.code.gson:gson:2.13.2")
-    implementation("org.bouncycastle:bcutil-jdk18on:1.83")
-    implementation("org.bouncycastle:bcpkix-jdk18on:1.83")
+    implementation("org.bouncycastle:bcutil-jdk18on:1.84")
+    implementation("org.bouncycastle:bcpkix-jdk18on:1.84")
 
     implementation(platform("com.google.oauth-client:google-oauth-client-bom:1.39.0"))
     implementation("com.google.oauth-client:google-oauth-client")
diff --git a/sigstore-maven-plugin/build.gradle.kts b/sigstore-maven-plugin/build.gradle.kts
index af7b5fea2..133306e13 100644
--- a/sigstore-maven-plugin/build.gradle.kts
+++ b/sigstore-maven-plugin/build.gradle.kts
@@ -14,7 +14,7 @@ dependencies {
     compileOnly("org.apache.maven.plugin-tools:maven-plugin-annotations:3.15.2")
 
     implementation(project(":sigstore-java"))
-    implementation("org.bouncycastle:bcutil-jdk18on:1.83")
+    implementation("org.bouncycastle:bcutil-jdk18on:1.84")
     implementation("org.apache.maven.plugins:maven-gpg-plugin:3.2.8")
 
     testImplementation("org.apache.maven.shared:maven-verifier:1.8.0")