diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 8c43ac62f..84eed770c 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -6,6 +6,9 @@ updates:
   - dependency-name: com.google.cloud:libraries-bom
   - dependency-name: com.fasterxml.jackson:jackson-bom
   - dependency-name: org.apache.avro:avro
+  - dependency-name: org.springframework:spring-core
+    # Spring 6 requires Java 17
+    versions: [">=6.0.0"]
   schedule:
     interval: daily
   reviewers:
diff --git a/ingestion-beam/pom.xml b/ingestion-beam/pom.xml
index 5b5dc418c..d3006aa36 100644
--- a/ingestion-beam/pom.xml
+++ b/ingestion-beam/pom.xml
@@ -104,7 +104,7 @@
         <dependency>
             <groupId>org.springframework</groupId>
             <artifactId>spring-core</artifactId>
-            <version>5.3.29</version>
+            <version>5.3.39</version>
             <scope>test</scope>
         </dependency>
         <dependency>