diff --git a/.github/renovate.json5 b/.github/renovate.json5
index df06f33..f24d8d3 100644
--- a/.github/renovate.json5
+++ b/.github/renovate.json5
@@ -1,3 +1,9 @@
 {
   extends: ["github>cloudquery/.github//.github/renovate-java-default.json5"],
+  packageRules: [
+    {
+      matchPackageNames: ["^org.junit"],
+      groupName: "junit",
+    },
+  ],
 }
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index b953b8b..4248786 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -8,6 +8,9 @@ on:
     branches:
       - main
 
+permissions:
+  contents: read
+
 jobs:
   build:
     runs-on: ubuntu-latest
@@ -24,7 +27,7 @@ jobs:
         uses: docker/setup-buildx-action@v3
       - name: Validate Gradle wrapper
         # v4.4.1
-        uses: gradle/actions/wrapper-validation@83c124bfb09badf85ddfbf01158b5592c1a78c4a
+        uses: gradle/actions/wrapper-validation@4d9f0ba0025fe599b4ebab900eb7f3a1d93ef4c2
       - name: Build package
         run: ./gradlew build
         env:
diff --git a/.github/workflows/pr_title.yml b/.github/workflows/pr_title.yml
index c7c8e47..1844a58 100644
--- a/.github/workflows/pr_title.yml
+++ b/.github/workflows/pr_title.yml
@@ -7,6 +7,9 @@ on:
       - edited
       - synchronize
 
+permissions:
+  pull-requests: read
+
 jobs:
   main:
     name: Validate PR title
@@ -41,7 +44,7 @@ jobs:
           # special "[WIP]" prefix to indicate this state. This will avoid the
           # validation of the PR title and the pull request checks remain pending.
           # Note that a second check will be reported if this is enabled.
-          wip: true
+          wip: false
           # When using "Squash and merge" on a PR with only one commit, GitHub
           # will suggest using that commit message instead of the PR title for the
           # merge commit, and it's easy to commit this by mistake. Enable this option
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 091c0d4..781e68e 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -2,24 +2,27 @@ name: publish
 on:
   push:
     tags:
-      - 'v*.*.*'
+      - "v*.*.*"
+
+permissions:
+  contents: read
 
 jobs:
-   publish:
-     runs-on: ubuntu-latest
-     steps:
-       - name: Checkout
-         uses: actions/checkout@v4
-       - uses: actions/setup-java@v4
-         with:
-           distribution: 'temurin'
-           java-version: '18'
-           cache: 'gradle'
-       - name: Validate Gradle wrapper
-         uses: gradle/wrapper-validation-action@f9c9c575b8b21b6485636a91ffecd10e558c62f6
-       - name: Publish package
-         uses: gradle/gradle-build-action@093dfe9d598ec5a42246855d09b49dc76803c005
-         with:
-           arguments: publish
-         env:
-           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+  publish:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+      - uses: actions/setup-java@v4
+        with:
+          distribution: "temurin"
+          java-version: "18"
+          cache: "gradle"
+      - name: Validate Gradle wrapper
+        uses: gradle/wrapper-validation-action@f9c9c575b8b21b6485636a91ffecd10e558c62f6
+      - name: Publish package
+        uses: gradle/gradle-build-action@093dfe9d598ec5a42246855d09b49dc76803c005
+        with:
+          arguments: publish
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/release_pr.yml b/.github/workflows/release_pr.yml
index ddb8a6b..524d22a 100644
--- a/.github/workflows/release_pr.yml
+++ b/.github/workflows/release_pr.yml
@@ -4,6 +4,9 @@ on:
     branches:
       - main
 
+permissions:
+  contents: read
+
 jobs:
   release-please:
     runs-on: ubuntu-latest
diff --git a/.release-please-manifest.json b/.release-please-manifest.json
index d7a636b..23eee9e 100644
--- a/.release-please-manifest.json
+++ b/.release-please-manifest.json
@@ -1,3 +1,3 @@
 {
-  ".": "0.0.43"
+  ".": "0.0.44"
 }
diff --git a/CHANGELOG.md b/CHANGELOG.md
index d6c97d2..ebf7349 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,19 @@
 # Changelog
 
+## [0.0.44](https://github.com/cloudquery/plugin-sdk-java/compare/v0.0.43...v0.0.44) (2025-10-01)
+
+
+### Bug Fixes
+
+* **deps:** Update dependency com.google.guava:guava to v33.5.0-jre ([#358](https://github.com/cloudquery/plugin-sdk-java/issues/358)) ([e60eb99](https://github.com/cloudquery/plugin-sdk-java/commit/e60eb99b2ea35bbd45ed88d439e1db1e27ba7752))
+* **deps:** Update dependency io.cloudquery:plugin-pb-java to v0.0.35 ([#353](https://github.com/cloudquery/plugin-sdk-java/issues/353)) ([fbb196c](https://github.com/cloudquery/plugin-sdk-java/commit/fbb196cfb7268e3209cfa99997055e77deb75c8c))
+* **deps:** Update dependency org.assertj:assertj-core to v3.27.6 ([#357](https://github.com/cloudquery/plugin-sdk-java/issues/357)) ([af74a56](https://github.com/cloudquery/plugin-sdk-java/commit/af74a56160220e58d901db67961b3bd3f95d43d2))
+* **deps:** Update grpc-java monorepo to v1.75.0 ([#365](https://github.com/cloudquery/plugin-sdk-java/issues/365)) ([cd8f5fa](https://github.com/cloudquery/plugin-sdk-java/commit/cd8f5fa719f99abf70d3e96ec54fa675792974d1))
+* **deps:** Update jackson monorepo ([#366](https://github.com/cloudquery/plugin-sdk-java/issues/366)) ([05df6b2](https://github.com/cloudquery/plugin-sdk-java/commit/05df6b2e6984b48d1e2997b3438903d291a9601c))
+* **deps:** Update log4j2 monorepo to v2.25.2 ([#367](https://github.com/cloudquery/plugin-sdk-java/issues/367)) ([a978959](https://github.com/cloudquery/plugin-sdk-java/commit/a97895901f8dac1cbd0155e2b85a9c3f87e977fd))
+* **deps:** Update plugin io.freefair.lombok to v8.14.2 ([#369](https://github.com/cloudquery/plugin-sdk-java/issues/369)) ([94dd81c](https://github.com/cloudquery/plugin-sdk-java/commit/94dd81c2d396cdaa425cb1b020415b117fcc1520))
+* **deps:** Update plugin org.gradle.toolchains.foojay-resolver-convention to v0.10.0 ([#370](https://github.com/cloudquery/plugin-sdk-java/issues/370)) ([fbe0ce7](https://github.com/cloudquery/plugin-sdk-java/commit/fbe0ce7b8969add19d555dd17368349729b35047))
+
 ## [0.0.43](https://github.com/cloudquery/plugin-sdk-java/compare/v0.0.42...v0.0.43) (2025-09-01)
 
 
diff --git a/lib/build.gradle b/lib/build.gradle
index 05e7930..684b3a0 100644
--- a/lib/build.gradle
+++ b/lib/build.gradle
@@ -1,6 +1,6 @@
 plugins {
     id 'java-library'
-    id "io.freefair.lombok" version "8.11"
+    id "io.freefair.lombok" version "8.14.2"
     id "maven-publish"
     id "com.diffplug.spotless" version "6.25.0"
 }
@@ -11,7 +11,7 @@ ext {
 
 group 'io.cloudquery'
 // x-release-please-start-version
-version = '0.0.43'
+version = '0.0.44'
 // x-release-please-end
 
 repositories {
@@ -31,32 +31,32 @@ dependencies {
 
     // This dependency is used internally, and not exposed to consumers on their own compile classpath.
     implementation 'org.jooq:joou:0.9.4'
-    implementation 'com.google.guava:guava:33.4.8-jre'
+    implementation 'com.google.guava:guava:33.5.0-jre'
     implementation 'info.picocli:picocli:4.7.7'
-    implementation 'com.google.guava:guava:33.4.8-jre'
-    implementation 'io.grpc:grpc-protobuf:1.70.0'
-    implementation 'io.grpc:grpc-stub:1.70.0'
-    implementation 'io.grpc:grpc-services:1.70.0'
-    implementation 'io.cloudquery:plugin-pb-java:0.0.34'
+    implementation 'com.google.guava:guava:33.5.0-jre'
+    implementation 'io.grpc:grpc-protobuf:1.75.0'
+    implementation 'io.grpc:grpc-stub:1.75.0'
+    implementation 'io.grpc:grpc-services:1.75.0'
+    implementation 'io.cloudquery:plugin-pb-java:0.0.35'
     implementation 'org.apache.arrow:arrow-memory-core:18.3.0'
     implementation 'org.apache.arrow:arrow-vector:18.3.0'
     implementation 'commons-io:commons-io:2.20.0'
 
-    implementation "com.fasterxml.jackson.core:jackson-core:2.18.2"
-    implementation "com.fasterxml.jackson.core:jackson-annotations:2.18.2"
+    implementation "com.fasterxml.jackson.core:jackson-core:2.20.0"
+    implementation "com.fasterxml.jackson.core:jackson-annotations:2.20"
 
-    implementation 'org.apache.logging.log4j:log4j-api:2.24.3'
-    implementation 'org.apache.logging.log4j:log4j-core:2.24.3'
+    implementation 'org.apache.logging.log4j:log4j-api:2.25.2'
+    implementation 'org.apache.logging.log4j:log4j-core:2.25.2'
 
-    testImplementation 'io.grpc:grpc-testing:1.70.0'
-    testImplementation 'io.grpc:grpc-inprocess:1.70.0'
+    testImplementation 'io.grpc:grpc-testing:1.75.0'
+    testImplementation 'io.grpc:grpc-inprocess:1.75.0'
     testImplementation platform('org.junit:junit-bom:5.11.4')
     testImplementation 'org.junit.jupiter:junit-jupiter:5.11.4'
     testImplementation 'org.junit.jupiter:junit-jupiter-api:5.11.4'
     testImplementation 'org.mockito:mockito-core:5.15.2'
     testImplementation 'org.mockito:mockito-junit-jupiter:5.15.2'
     testImplementation 'nl.jqno.equalsverifier:equalsverifier:3.19.4'
-    testImplementation 'org.assertj:assertj-core:3.27.4'
+    testImplementation 'org.assertj:assertj-core:3.27.6'
     testRuntimeOnly 'org.junit.jupiter:junit-jupiter-engine:5.11.4'
 
     runtimeOnly "org.apache.arrow:arrow-memory-netty:18.3.0"
diff --git a/settings.gradle b/settings.gradle
index 758b930..db895b3 100644
--- a/settings.gradle
+++ b/settings.gradle
@@ -8,7 +8,7 @@
 
 plugins {
     // Apply the foojay-resolver plugin to allow automatic download of JDKs
-    id 'org.gradle.toolchains.foojay-resolver-convention' version '0.9.0'
+    id 'org.gradle.toolchains.foojay-resolver-convention' version '0.10.0'
 }
 
 rootProject.name = 'plugin-sdk-java'