diff --git a/sigstore-java/build.gradle.kts b/sigstore-java/build.gradle.kts
index a270e958..34adcc2c 100644
--- a/sigstore-java/build.gradle.kts
+++ b/sigstore-java/build.gradle.kts
@@ -45,7 +45,7 @@ dependencies {
     implementation("com.google.oauth-client:google-oauth-client-java6")
 
     testImplementation(project(":sigstore-testkit"))
-    testImplementation(platform("org.junit:junit-bom:5.11.0"))
+    testImplementation(platform("org.junit:junit-bom:5.11.1"))
     testImplementation("org.junit.jupiter:junit-jupiter")
 
     testImplementation(platform("org.mockito:mockito-bom:5.12.0"))
diff --git a/sigstore-testkit/build.gradle.kts b/sigstore-testkit/build.gradle.kts
index 1f156f03..fe66e4b5 100644
--- a/sigstore-testkit/build.gradle.kts
+++ b/sigstore-testkit/build.gradle.kts
@@ -11,7 +11,7 @@ dependencies {
 
     // This is different from typical "testImplementation" dependencies, because
     // testkit exposes junit5 dependencies in its API (e.g. annotations)
-    api(platform("org.junit:junit-bom:5.11.0"))
+    api(platform("org.junit:junit-bom:5.11.1"))
     api("org.junit.jupiter:junit-jupiter-api")
     api("org.junit.jupiter:junit-jupiter-params")
     implementation("org.junit.jupiter:junit-jupiter")