diff --git a/renovate.json b/renovate.json
index ead00d12..ad4fa95b 100644
--- a/renovate.json
+++ b/renovate.json
@@ -1,4 +1,12 @@
 {
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
-  "extends": ["local>archgate/renovate-config"]
+  "extends": ["local>archgate/renovate-config"],
+  "packageRules": [
+    {
+      "description": "Maven shim targets Java 11; JUnit Jupiter 6.x requires Java 17, so stay on the 5.x line.",
+      "matchManagers": ["maven"],
+      "matchPackageNames": ["org.junit.jupiter:junit-jupiter"],
+      "allowedVersions": "<6"
+    }
+  ]
 }
diff --git a/shims/maven/pom.xml b/shims/maven/pom.xml
index 174255dc..fcb594a0 100644
--- a/shims/maven/pom.xml
+++ b/shims/maven/pom.xml
@@ -46,6 +46,10 @@
         <dependency>
             <groupId>org.junit.jupiter</groupId>
             <artifactId>junit-jupiter</artifactId>
+            <!-- Pinned to the 5.x line: JUnit Jupiter 6.x requires a Java 17 baseline,
+                 but this shim targets Java 11 (maven.compiler.target=11) for broad
+                 end-user compatibility and is built/tested on JDK 11 in CI. See the
+                 junit-jupiter rule in renovate.json. -->
             <version>5.11.4</version>
             <scope>test</scope>
         </dependency>
@@ -56,7 +60,7 @@
             <plugin>
                 <groupId>org.apache.maven.plugins</groupId>
                 <artifactId>maven-jar-plugin</artifactId>
-                <version>3.4.2</version>
+                <version>3.5.0</version>
                 <configuration>
                     <archive>
                         <manifest>
@@ -68,7 +72,7 @@
             <plugin>
                 <groupId>org.apache.maven.plugins</groupId>
                 <artifactId>maven-surefire-plugin</artifactId>
-                <version>3.5.2</version>
+                <version>3.5.5</version>
             </plugin>
         </plugins>
     </build>
@@ -95,7 +99,7 @@
                     <plugin>
                         <groupId>org.apache.maven.plugins</groupId>
                         <artifactId>maven-source-plugin</artifactId>
-                        <version>3.3.1</version>
+                        <version>3.4.0</version>
                         <executions>
                             <execution>
                                 <id>attach-sources</id>
@@ -108,7 +112,7 @@
                     <plugin>
                         <groupId>org.apache.maven.plugins</groupId>
                         <artifactId>maven-javadoc-plugin</artifactId>
-                        <version>3.11.2</version>
+                        <version>3.12.0</version>
                         <executions>
                             <execution>
                                 <id>attach-javadocs</id>
@@ -121,7 +125,7 @@
                     <plugin>
                         <groupId>org.sonatype.central</groupId>
                         <artifactId>central-publishing-maven-plugin</artifactId>
-                        <version>0.9.0</version>
+                        <version>0.10.0</version>
                         <extensions>true</extensions>
                         <configuration>
                             <publishingServerId>central</publishingServerId>