diff --git a/CHANGES b/CHANGES
index 538412940..d13e34ece 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,5 +1,14 @@
 Platform 3.29
 
+* Library upgrades
+
+  - Guava to 33.4.0-jre (was 32.1.2-jre)
+  - logback to 1.5.17 (was 1.5.13)
+  - slf4j to 2.0.17 (was 2.0.16)
+  - error_prone_annotations to 2.36.0 (was 2.25.0)
+  - error_prone_core to 2.36.0 (was 2.3.4)
+  - plexus-compiler-javac-errorprone to 2.15.0 (was 2.8.6)
+
 * Maven plugin upgrades
 
   - maven-surefire-plugin to 3.5.2 (was 2.22.2)
diff --git a/library/pom.xml b/library/pom.xml
index 685b50c60..79266d059 100644
--- a/library/pom.xml
+++ b/library/pom.xml
@@ -85,10 +85,10 @@
 
         <dep.auto-value.version>1.10.4</dep.auto-value.version>
         <dep.jetty.version>12.0.16</dep.jetty.version>
-        <dep.guava.version>32.1.2-jre</dep.guava.version>
+        <dep.guava.version>33.4.0-jre</dep.guava.version>
         <dep.guice.version>7.0.0</dep.guice.version>
-        <dep.slf4j.version>2.0.16</dep.slf4j.version>
-        <dep.logback.version>1.5.13</dep.logback.version>
+        <dep.slf4j.version>2.0.17</dep.slf4j.version>
+        <dep.logback.version>1.5.17</dep.logback.version>
         <dep.javax-servlet.version>6.0.0</dep.javax-servlet.version>
         <dep.jackson.version>2.16.1</dep.jackson.version>
         <dep.jersey.version>3.1.10</dep.jersey.version>
@@ -1024,7 +1024,7 @@
             <dependency>
                 <groupId>com.google.errorprone</groupId>
                 <artifactId>error_prone_annotations</artifactId>
-                <version>2.25.0</version>
+                <version>2.36.0</version>
             </dependency>
 
             <dependency>
@@ -1372,12 +1372,12 @@
                             <dependency>
                                 <groupId>org.codehaus.plexus</groupId>
                                 <artifactId>plexus-compiler-javac-errorprone</artifactId>
-                                <version>2.8.6</version>
+                                <version>2.15.0</version>
                             </dependency>
                             <dependency>
                                 <groupId>com.google.errorprone</groupId>
                                 <artifactId>error_prone_core</artifactId>
-                                <version>2.3.4</version>
+                                <version>2.36.0</version>
                             </dependency>
                         </dependencies>
                     </plugin>