diff --git a/.github/workflows/osv-scanner.yml b/.github/workflows/osv-scanner.yml
index ae608fa7..9aa96688 100644
--- a/.github/workflows/osv-scanner.yml
+++ b/.github/workflows/osv-scanner.yml
@@ -17,7 +17,7 @@ permissions: read-all
 jobs:
   scan-scheduled:
     if: ${{ github.event_name == 'push' || github.event_name == 'schedule' || github.event_name == 'workflow_dispatch' }}
-    uses: "google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml@v2.5.1"
+    uses: "google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml@v2.6.0"
     permissions:
       actions: read
       contents: read
@@ -25,7 +25,7 @@ jobs:
 
   scan-pr:
     if: ${{ github.event_name == 'pull_request' }}
-    uses: "google/osv-scanner-action/.github/workflows/osv-scanner-reusable-pr.yml@v2.5.1"
+    uses: "google/osv-scanner-action/.github/workflows/osv-scanner-reusable-pr.yml@v2.6.0"
     permissions:
       actions: read
       contents: read
diff --git a/pom.xml b/pom.xml
index 10948f91..79f1f7c7 100644
--- a/pom.xml
+++ b/pom.xml
@@ -35,7 +35,7 @@ SPDX-License-Identifier: Apache-2.0
         <jspecify.version>1.0.1</jspecify.version>
         <checker.version>4.2.3</checker.version>
         <spotless.version>3.10.2</spotless.version>
-        <palantir-java-format.version>2.97.0</palantir-java-format.version>
+        <palantir-java-format.version>2.98.0</palantir-java-format.version>
         <spotbugs.version>4.10.4.1</spotbugs.version>
         <fb-contrib.version>7.7.4</fb-contrib.version>
         <findsecbugs.version>1.14.0</findsecbugs.version>