diff --git a/CHANGES.md b/CHANGES.md
index 94c5cb922d..dd59bd4eea 100644
--- a/CHANGES.md
+++ b/CHANGES.md
@@ -16,6 +16,8 @@ We adhere to the [keepachangelog](https://keepachangelog.com/en/1.0.0/) format (
 - Bump default `gherkin` version `42.0.0` -> `42.0.1`. ([#3088](https://github.com/diffplug/spotless/pull/3088))
 - Bump default `jackson` version `2.22.2` -> `2.22.3`. ([#3101](https://github.com/diffplug/spotless/pull/3101))
 - Bump default `palantir-java-format` version `2.98.0` -> `2.99.0`. ([#3103](https://github.com/diffplug/spotless/pull/3103))
+- Bump default `palantir-java-format` version `2.98.0` -> `2.99.0`. ([#3116](https://github.com/diffplug/spotless/pull/3116))
+
 
 ## [4.10.3] - 2026-09-25
 
diff --git a/gradle/libs.versions.toml b/gradle/libs.versions.toml
index d668b53079..ff098240d7 100644
--- a/gradle/libs.versions.toml
+++ b/gradle/libs.versions.toml
@@ -31,7 +31,7 @@ palantir-java-format = "com.palantir.javaformat:palantir-java-format:2.99.0"
 jgit = "org.eclipse.jgit:org.eclipse.jgit:7.8.0.202609011348-r"
 junit-jupiter = "org.junit.jupiter:junit-jupiter:6.1.3"
 assertj-core = "org.assertj:assertj-core:3.27.7"
-mockito-core = "org.mockito:mockito-core:5.23.0"
+mockito-core = "org.mockito:mockito-core:5.24.0"
 osgi = "org.eclipse.platform:org.eclipse.osgi:3.24.300"
 slf4j-api = "org.slf4j:slf4j-api:2.0.20"
 jsr305 = "com.google.code.findbugs:jsr305:3.0.2"
@@ -40,7 +40,7 @@ jakarta-annotation-api = "jakarta.annotation:jakarta.annotation-api:3.0.0"
 plexus-resources = "org.codehaus.plexus:plexus-resources:1.4.0"
 plexus-utils = "org.codehaus.plexus:plexus-utils:4.1.0"
 concurrent-trees = "com.googlecode.concurrent-trees:concurrent-trees:2.6.1"
-owasp-encoder = "org.owasp.encoder:encoder:1.4.0"
+owasp-encoder = "org.owasp.encoder:encoder:1.5.0"
 mustache-compiler = "com.github.spullara.mustache.java:compiler:0.9.14"
 adocfmt = "org.drjekyll:adocfmt:0.3.1"
 antlr4-formatter = "com.khubla.antlr4formatter:antlr4-formatter:1.2.1"
diff --git a/plugin-gradle/CHANGES.md b/plugin-gradle/CHANGES.md
index 126ed90044..f349da531e 100644
--- a/plugin-gradle/CHANGES.md
+++ b/plugin-gradle/CHANGES.md
@@ -9,6 +9,8 @@ We adhere to the [keepachangelog](https://keepachangelog.com/en/1.0.0/) format (
 - Bump default `gherkin` version `42.0.0` -> `42.0.1`. ([#3088](https://github.com/diffplug/spotless/pull/3088))
 - Bump default `jackson` version `2.22.2` -> `2.22.3`. ([#3101](https://github.com/diffplug/spotless/pull/3101))
 - Bump default `palantir-java-format` version `2.98.0` -> `2.99.0`. ([#3103](https://github.com/diffplug/spotless/pull/3103))
+- Bump default `palantir-java-format` version `2.98.0` -> `2.99.0`. ([#3116](https://github.com/diffplug/spotless/pull/3116))
+
 
 ## [8.10.3] - 2026-09-25
 ### Changes
diff --git a/plugin-maven/CHANGES.md b/plugin-maven/CHANGES.md
index 3686b806f4..a4e8d63476 100644
--- a/plugin-maven/CHANGES.md
+++ b/plugin-maven/CHANGES.md
@@ -9,6 +9,8 @@ We adhere to the [keepachangelog](https://keepachangelog.com/en/1.0.0/) format (
 - Bump default `gherkin` version `42.0.0` -> `42.0.1`. ([#3088](https://github.com/diffplug/spotless/pull/3088))
 - Bump default `jackson` version `2.22.2` -> `2.22.3`. ([#3101](https://github.com/diffplug/spotless/pull/3101))
 - Bump default `palantir-java-format` version `2.98.0` -> `2.99.0`. ([#3103](https://github.com/diffplug/spotless/pull/3103))
+- Bump default `palantir-java-format` version `2.98.0` -> `2.99.0`. ([#3116](https://github.com/diffplug/spotless/pull/3116))
+
 
 ## [3.10.3] - 2026-09-25
 ### Changes