diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index a8cc6aa9..c7ce35f5 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -3,4 +3,17 @@ updates:
   - package-ecosystem: "gradle"
     directory: "/"
     schedule:
-      interval: "daily" 
+      interval: "daily"
+    groups:
+      test-deps:
+        patterns:
+          - "org.junit*"
+          - "org.mockito*"
+          - "org.apache.logging.log4j*"
+          - "org.hamcrest*"
+    open-pull-requests-limit: 10
+
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
diff --git a/build.gradle b/build.gradle
index a43cbb1c..1cd2bbb6 100644
--- a/build.gradle
+++ b/build.gradle
@@ -4,7 +4,7 @@ plugins {
     id 'maven-publish'
     id 'io.github.gradle-nexus.publish-plugin' version '2.0.0'
     id 'io.freefair.lombok' version '8.14.4'
-    id "org.sonarqube" version "7.0.1.6134"
+    id "org.sonarqube" version "7.3.1.8318"
     id 'jacoco'
 }
 
@@ -42,9 +42,9 @@ dependencies {
     testImplementation 'org.hamcrest:hamcrest:3.0'
     testImplementation 'org.mockito:mockito-inline:5.2.0'
     testImplementation 'org.mockito:mockito-junit-jupiter:5.2.0'
-    testImplementation 'org.apache.logging.log4j:log4j-api:2.25.3'
-    testImplementation 'org.apache.logging.log4j:log4j-core:2.25.3'
-    testImplementation 'org.apache.logging.log4j:log4j-slf4j2-impl:2.25.3'
+    testImplementation 'org.apache.logging.log4j:log4j-api:2.25.5'
+    testImplementation 'org.apache.logging.log4j:log4j-core:2.25.5'
+    testImplementation 'org.apache.logging.log4j:log4j-slf4j2-impl:2.25.5'
     testImplementation 'org.apache.httpcomponents:httpclient:4.5.14'
 }