diff --git a/pom.xml b/pom.xml
index a3525dac8..87366a910 100644
--- a/pom.xml
+++ b/pom.xml
@@ -138,7 +138,7 @@
     <commons.jar-plugin.version>3.2.2</commons.jar-plugin.version>
     <commons.javadoc.version>3.4.1</commons.javadoc.version>
     <commons.jxr.version>3.3.0</commons.jxr.version>
-    <commons.pmd.version>3.18.0</commons.pmd.version>
+    <commons.pmd.version>3.19.0</commons.pmd.version>
     <commons.pmd-impl.version>6.49.0</commons.pmd-impl.version>
     <commons.project-info.version>3.4.1</commons.project-info.version>
     <commons.rat.version>0.14</commons.rat.version>
@@ -191,8 +191,8 @@
     -->
     <commons.site-plugin.version>4.0.0-M3</commons.site-plugin.version>
     <commons.source-plugin.version>3.2.1</commons.source-plugin.version>
-    <commons.spotbugs.plugin.version>4.7.1.1</commons.spotbugs.plugin.version>
-    <commons.spotbugs.impl.version>4.7.1</commons.spotbugs.impl.version>
+    <commons.spotbugs.plugin.version>4.7.2.0</commons.spotbugs.plugin.version>
+    <commons.spotbugs.impl.version>4.7.2</commons.spotbugs.impl.version>
     <commons.surefire-report.version>3.0.0-M7</commons.surefire-report.version>
     <commons.surefire.version>3.0.0-M7</commons.surefire.version>
     <commons.wagon-ssh.version>3.5.2</commons.wagon-ssh.version>
@@ -684,7 +684,7 @@
           <groupId>org.codehaus.mojo</groupId>
           <artifactId>versions-maven-plugin</artifactId>
           <!-- Version 2.2 causes an NPE with Maven 3.3.9 -->
-          <version>2.11.0</version>
+          <version>2.12.0</version>
         </plugin>
         <plugin>
           <groupId>org.jacoco</groupId>
diff --git a/src/changes/changes.xml b/src/changes/changes.xml
index 0c491d301..5cc99d1e8 100644
--- a/src/changes/changes.xml
+++ b/src/changes/changes.xml
@@ -77,8 +77,8 @@ The <action> type attribute can be add,update,fix,remove.
            <action type="update" dev="ggregory" due-to="Dependabot">Bump apache from 24 to 27 #112, #127.</action>
            <action type="update" dev="ggregory" due-to="Dependabot">Bump build-helper-maven-plugin from 3.2.0 to 3.3.0 #105.</action>
            <action type="update" dev="ggregory" due-to="Gary Gregory">Bump jacoco-maven-plugin from 0.8.7 to 0.8.8.</action>
-           <action type="update" dev="ggregory" due-to="Gary Gregory, Dependabot">Bump spotbugs from 4.5.3 to 4.7.1 #120.</action>
-           <action type="update" dev="ggregory" due-to="Gary Gregory, Dependabot">Bump spotbugs-maven-plugin from 4.5.3.0 to 4.7.1.1, #129.</action>
+           <action type="update" dev="ggregory" due-to="Gary Gregory, Dependabot">Bump spotbugs from 4.5.3 to 4.7.2 #120, #143.</action>
+           <action type="update" dev="ggregory" due-to="Gary Gregory, Dependabot">Bump spotbugs-maven-plugin from 4.5.3.0 to 4.7.2.0, #129, #142.</action>
            <action type="update" dev="ggregory" due-to="Dependabot">Bump maven-project-info-reports-plugin from 3.2.2 to 3.4.1 #107, #128.</action>
            <action type="update" dev="ggregory" due-to="Dependabot">Bump maven-site-plugin from 3.11.0 to 4.0.0-M3 #108, #132. Fix [WARNING] An issue has occurred with apache-rat-plugin:0.14:rat report, skipping LinkageError org.apache.rat.mp.RatReportMojo.generate(Lorg/codehaus/doxia/sink/Sink;Ljava/util/Locale;)V,</action>
            <action type="update" dev="ggregory" due-to="Gary Gregory, Dependabot">Bump maven-bundle-plugin from 5.1.4 to 5.1.8, #111, #126, #133.</action>
@@ -87,7 +87,7 @@ The <action> type attribute can be add,update,fix,remove.
            <action type="update" dev="ggregory" due-to="Dependabot, Gary Gregory">Bump maven-javadoc-plugin from 3.3.2 to 3.4.1 #114.</action>
            <action type="update" dev="ggregory" due-to="Gary Gregory">Bump apache-rat from 0.13 to 0.14.</action>
            <action type="update" dev="ggregory" due-to="Gary Gregory">Bump biz.aQute.bndlib from 6.2.0 to 6.3.1.</action>
-           <action type="update" dev="ggregory" due-to="Gary Gregory">Bump maven-pmd-plugin from 3.16.0 to 3.18.0.</action>
+           <action type="update" dev="ggregory" due-to="Gary Gregory, Dependabot">Bump maven-pmd-plugin from 3.16.0 to 3.19.0 #141.</action>
            <action type="update" dev="ggregory" due-to="Gary Gregory">Bump maven-enforcer-plugin from 3.0.0 to 3.1.0.</action>
            <action type="update" dev="ggregory" due-to="Gary Gregory">Bump org.apache.maven.wagon:wagon-ssh 3.5.1 to 3.5.2.</action>
            <action type="update" dev="ggregory" due-to="Dependabot, Gary Gregory">Bump maven-assembly-plugin from 3.3.0 to 3.4.2 #123.</action>
@@ -96,6 +96,7 @@ The <action> type attribute can be add,update,fix,remove.
            <action type="update" dev="ggregory" due-to="Gary Gregory">Bump animal-sniffer-maven-plugin from 1.21 to 1.22.</action>
            <action type="update" dev="ggregory" due-to="Gary Gregory">Bump maven-checkstyle-plugin from 3.1.2 to 3.2.0.</action>
            <action type="update" dev="ggregory" due-to="Gary Gregory">Bump japicmp-maven-plugin from 0.15.7 to 0.16.0 #140.</action>
+           <action type="update" dev="ggregory" due-to="Dependabot">Bump versions-maven-plugin from 2.11.0 to 2.12.0 #144.</action>
         </release>
 
         <release version="53" date="2022-03-31" description="WARNING: checkstyle version has been updated; there are breaking changes which may require updates to checkstyle.xml files">