diff --git a/.github/workflows/scorecards-analysis.yml b/.github/workflows/scorecards-analysis.yml
index 975383a92b..09795bcfce 100644
--- a/.github/workflows/scorecards-analysis.yml
+++ b/.github/workflows/scorecards-analysis.yml
@@ -45,7 +45,7 @@ jobs:
           persist-credentials: false
 
       - name: "Run analysis"
-        uses: ossf/scorecard-action@80e868c13c90f172d68d1f4501dee99e2479f7af    # 2.1.3
+        uses: ossf/scorecard-action@08b4669551908b1024bb425080c797723083c031    # 2.2.0
         with:
           results_file: results.sarif
           results_format: sarif
diff --git a/pom.xml b/pom.xml
index 4515b5967b..e971e22ddf 100644
--- a/pom.xml
+++ b/pom.xml
@@ -512,7 +512,7 @@
     <dependency>
       <groupId>com.google.guava</groupId>
       <artifactId>guava-testlib</artifactId>
-      <version>32.0.1-jre</version>
+      <version>32.1.0-jre</version>
       <scope>test</scope>
     </dependency>
   </dependencies>
diff --git a/src/changes/changes.xml b/src/changes/changes.xml
index fc9df8603a..f775c14255 100644
--- a/src/changes/changes.xml
+++ b/src/changes/changes.xml
@@ -356,7 +356,7 @@
       Bump pmd from 6.46.0 to 6.52.0 #318, #327, #333, #347.
     </action>
     <action type="update" dev="ggregory" due-to="Dependabot">
-      Bump guava-testlib from 31.1-jre to 32.0.1-jre #394, #395.
+      Bump guava-testlib from 31.1-jre to 32.1.0-jre #394, #395, #404.
     </action>
   </release>
   <release version="4.4" date="2019-07-05" description="Maintenance release.">