diff --git a/build.gradle.kts b/build.gradle.kts
index 9b070b9..9813266 100644
--- a/build.gradle.kts
+++ b/build.gradle.kts
@@ -49,9 +49,9 @@ dependencies {
   implementation("io.kubernetes:client-java-extended:27.0.0")
 
   constraints {
-    implementation("org.bouncycastle:bcprov-jdk18on:1.85")
-    implementation("org.bouncycastle:bcpkix-jdk18on:1.85")
-    implementation("org.bouncycastle:bcutil-jdk18on:1.85")
+    implementation("org.bouncycastle:bcprov-jdk18on:1.85.2")
+    implementation("org.bouncycastle:bcpkix-jdk18on:1.85.2")
+    implementation("org.bouncycastle:bcutil-jdk18on:1.85.2")
 
     // Patch transitive jackson-databind 2.21.3 (via client-java) for
     // CVE-2026-54512/-54513 (PolymorphicTypeValidator bypasses, fixed in 2.21.4).