diff --git a/gradle/libs.versions.toml b/gradle/libs.versions.toml
index 1b4773208771..4a91ddd401a1 100644
--- a/gradle/libs.versions.toml
+++ b/gradle/libs.versions.toml
@@ -105,7 +105,7 @@ foojayResolver = { id = "org.gradle.toolchains.foojay-resolver", version = "1.0.
 gitPublish = { id = "org.ajoberstar.git-publish", version = "5.1.3" }
 japicmp = { id = "me.champeau.gradle.japicmp", version = "0.4.6" }
 jmh = { id = "me.champeau.jmh", version = "0.7.3" }
-jreleaser = { id = "org.jreleaser", version = "1.20.0" }
+jreleaser = { id = "org.jreleaser", version = "1.21.0" }
 # check if workaround in gradle.properties can be removed when updating
 kotlin = { id = "org.jetbrains.kotlin.jvm", version = "2.2.21" }
 nullaway = { id = "net.ltgt.nullaway", version = "2.3.0" }
diff --git a/gradle/plugins/publishing/build.gradle.kts b/gradle/plugins/publishing/build.gradle.kts
index 99791df232bd..67f12269c158 100644
--- a/gradle/plugins/publishing/build.gradle.kts
+++ b/gradle/plugins/publishing/build.gradle.kts
@@ -15,12 +15,6 @@ dependencies {
 			}
 			because("Workaround for CVE-2025-4949")
 		}
-		implementation("org.apache.commons:commons-lang3") {
-			version {
-				require("3.18.0")
-			}
-			because("Workaround for CVE-2025-48924")
-		}
 	}
 }