diff --git a/.talismanrc b/.talismanrc
index 28d1988..2e1f3ec 100644
--- a/.talismanrc
+++ b/.talismanrc
@@ -15,4 +15,4 @@ fileignoreconfig:
   - filename: README.md
     ignore_detectors: [filecontent]
   - filename: build.gradle.kts
-    checksum: 09304b63f048e12a866dbbedec91f4e5ad268cec0ddce1beddaa606851d91cc2
+    checksum: 77b3ebb74c1ff33229ad194d91acaff773bc014904846710554118421277dc04
diff --git a/buildSrc/src/main/kotlin/de.bund.digitalservice.version-catalog-conventions.gradle.kts b/buildSrc/src/main/kotlin/de.bund.digitalservice.version-catalog-conventions.gradle.kts
index b89d8c3..c995f58 100644
--- a/buildSrc/src/main/kotlin/de.bund.digitalservice.version-catalog-conventions.gradle.kts
+++ b/buildSrc/src/main/kotlin/de.bund.digitalservice.version-catalog-conventions.gradle.kts
@@ -15,3 +15,10 @@ tasks {
         rejectVersionIf { !isStable(candidate.version) }
     }
 }
+
+versionCatalogUpdate {
+    keep {
+        versions.set(listOf("jacoco"))
+        keepUnusedPlugins.set(true)
+    }
+}
diff --git a/gradle/libs.versions.toml b/gradle/libs.versions.toml
index 03cf6c8..386b134 100644
--- a/gradle/libs.versions.toml
+++ b/gradle/libs.versions.toml
@@ -1,5 +1,4 @@
 [versions]
-# @keep
 jacoco = "0.8.10"
 kotlin = "1.9.10"
 spring-boot = "3.1.3"
@@ -28,9 +27,7 @@ kotlin-jvm = { id = "org.jetbrains.kotlin.jvm", version.ref = "kotlin" }
 kotlin-spring = { id = "org.jetbrains.kotlin.plugin.spring", version.ref = "kotlin" }
 sonarqube = "org.sonarqube:4.3.1.3277"
 spotless = "com.diffplug.spotless:6.21.0"
-# @keep
 spring-boot = { id = "org.springframework.boot", version.ref = "spring-boot" }
-# @keep
 spring-dependency-management = "io.spring.dependency-management:1.1.3"
 test-logger = "com.adarshr.test-logger:3.2.0"
 version-catalog-update = "nl.littlerobots.version-catalog-update:0.8.1"