diff --git a/client/java/pom.xml b/client/java/pom.xml
index 5f4ee47dea..4565f9cc4d 100644
--- a/client/java/pom.xml
+++ b/client/java/pom.xml
@@ -64,7 +64,7 @@
     <protobuf.version>4.36.2</protobuf.version>
     <junit.version>5.11.4</junit.version>
     <gson.version>2.15.0</gson.version>
-    <sigstore.version>1.3.0</sigstore.version>
+    <sigstore.version>2.4.0</sigstore.version>
     <!-- sigstore-java's transitive dependencies, held past their known advisories
          (OSV over the CycloneDX SBOM): grpc-netty-shaded, bcprov/bcpkix and guava. -->
     <grpc.version>1.85.1</grpc.version>