diff --git a/build.sbt b/build.sbt
index 47efef970..8931ca604 100644
--- a/build.sbt
+++ b/build.sbt
@@ -113,7 +113,7 @@ lazy val `sbt-shading` = project
     libraryDependencies += "io.get-coursier.jarjar" % "jarjar-core" % "1.0.1-coursier-1" % "shaded",
     // dependencies of jarjar-core - directly depending on these so that they don't get shaded
     libraryDependencies ++= Seq(
-      "com.google.code.findbugs" % "jsr305" % "2.0.3",
+      "com.google.code.findbugs" % "jsr305" % "3.0.2",
       "org.ow2.asm" % "asm-commons" % "7.0",
       "org.ow2.asm" % "asm-util" % "7.0",
       "org.slf4j" % "slf4j-api" % "1.7.25"