diff --git a/.github/dependency-review-config.yml b/.github/dependency-review-config.yml
index 520956965..c4b2344aa 100644
--- a/.github/dependency-review-config.yml
+++ b/.github/dependency-review-config.yml
@@ -34,4 +34,6 @@ allow-dependencies-licenses:
   - 'pkg:maven/org.graalvm.buildtools/native-maven-plugin'
   # EPL-2.0 (test scope only): https://github.com/junit-team/junit-framework/blob/r6.1.3/LICENSE.md
   - 'pkg:maven/org.junit/junit-bom'
+  # EPL-2.0 (build plugin only, not shipped): https://github.com/jacoco/jacoco/blob/v0.8.15/LICENSE.md
+  - 'pkg:maven/org.jacoco/jacoco-maven-plugin'
 comment-summary-in-pr: on-failure
diff --git a/pom.xml b/pom.xml
index 5937b6b4c..6de5f71c6 100644
--- a/pom.xml
+++ b/pom.xml
@@ -104,7 +104,7 @@
         <maven-gpg-plugin.version>3.2.1</maven-gpg-plugin.version>
         <aspectj-maven-plugin.version>1.14.1</aspectj-maven-plugin.version>
         <maven-surefire-plugin.version>3.5.5</maven-surefire-plugin.version>
-        <jacoco-maven-plugin.version>0.8.14</jacoco-maven-plugin.version>
+        <jacoco-maven-plugin.version>0.8.15</jacoco-maven-plugin.version>
         <nexus-staging-maven-plugin.version>1.7.0</nexus-staging-maven-plugin.version>
         <maven-javadoc-plugin.version>3.12.0</maven-javadoc-plugin.version>
         <maven-source-plugin.version>3.4.0</maven-source-plugin.version>