diff --git a/versions.lock b/versions.lock
index 088bc70..b2321a9 100644
--- a/versions.lock
+++ b/versions.lock
@@ -5,9 +5,9 @@ com.fasterxml.jackson.core:jackson-databind:2.18.2 (6 constraints: 7f5fac94)
 com.fasterxml.jackson.datatype:jackson-datatype-jdk8:2.18.2 (1 constraints: 3f05493b)
 com.fasterxml.jackson.datatype:jackson-datatype-jsr310:2.18.2 (1 constraints: 3f05493b)
 com.google.code.findbugs:jsr305:3.0.2 (2 constraints: ae19c301)
-com.google.errorprone:error_prone_annotations:2.28.0 (3 constraints: 422be8de)
+com.google.errorprone:error_prone_annotations:2.36.0 (3 constraints: 412b88de)
 com.google.guava:failureaccess:1.0.2 (1 constraints: 150ae2b4)
-com.google.guava:guava:33.3.1-jre (2 constraints: d31e777d)
+com.google.guava:guava:33.4.0-jre (2 constraints: d31e797d)
 com.google.guava:listenablefuture:9999.0-empty-to-avoid-conflict-with-guava (1 constraints: bd17c918)
 com.google.j2objc:j2objc-annotations:3.0.0 (1 constraints: 150aeab4)
 com.palantir.conjure.java:conjure-lib:6.1.0 (1 constraints: 2718096d)
diff --git a/versions.props b/versions.props
index 771b158..6694577 100644
--- a/versions.props
+++ b/versions.props
@@ -1,7 +1,7 @@
 com.fasterxml.jackson.core:jackson-databind = 2.18.2
 com.fasterxml.jackson.*:* = 2.18.2
 com.palantir.witchcraft.api:* = 2.0.0
-com.google.guava:guava = 33.3.1-jre
+com.google.guava:guava = 33.4.0-jre
 org.immutables:* = 2.10.1
 org.assertj:assertj-core = 3.26.3
 org.junit.jupiter:* = 5.11.4