diff --git a/CHANGELOG.md b/CHANGELOG.md
index c82c1331..672abeb3 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -17,6 +17,8 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - Cancellable pipeline start-gate via a `startgate` GitHub Environment with configurable wait timer.
 
 ### Changed
+- Build and test tooling bumped to latest stable in step with the sibling repos: spotless 3.10.2 → 3.10.3,
+  palantir-java-format 2.98.0 → 2.99.0, NullAway 0.14.1 → 0.14.2, archunit-junit5 1.5.0 → 1.5.1.
 - Build plugins bumped to latest stable: `com.diffplug.spotless:spotless-maven-plugin` 3.9.0 → 3.10.0,
   `com.github.spotbugs:spotbugs-maven-plugin` 4.10.3.0 → 4.10.4.0 (restores parity with the
   cross-repo tool-version matrix).
diff --git a/pom.xml b/pom.xml
index 79f1f7c7..3a287859 100644
--- a/pom.xml
+++ b/pom.xml
@@ -31,15 +31,15 @@ SPDX-License-Identifier: Apache-2.0
              section "jqwik prompt-injection in test output" for full context. -->
         <jqwik.version>1.9.3</jqwik.version>
         <errorprone.version>2.50.0</errorprone.version>
-        <nullaway.version>0.14.1</nullaway.version>
+        <nullaway.version>0.14.2</nullaway.version>
         <jspecify.version>1.0.1</jspecify.version>
         <checker.version>4.2.3</checker.version>
-        <spotless.version>3.10.2</spotless.version>
-        <palantir-java-format.version>2.98.0</palantir-java-format.version>
+        <spotless.version>3.10.3</spotless.version>
+        <palantir-java-format.version>2.99.0</palantir-java-format.version>
         <spotbugs.version>4.10.4.1</spotbugs.version>
         <fb-contrib.version>7.7.4</fb-contrib.version>
         <findsecbugs.version>1.14.0</findsecbugs.version>
-        <archunit.version>1.5.0</archunit.version>
+        <archunit.version>1.5.1</archunit.version>
         <awaitility.version>4.3.0</awaitility.version>
         <concurrentunit.version>0.4.6</concurrentunit.version>
         <lincheck.version>3.7</lincheck.version>