diff --git a/pom.xml b/pom.xml
index 5523523..12e0426 100644
--- a/pom.xml
+++ b/pom.xml
@@ -477,9 +477,8 @@ under the License.
 
   <dependencies>
     <dependency>
-      <groupId>junit</groupId>
-      <artifactId>junit</artifactId>
-      <version>4.13.2</version>
+      <groupId>org.junit.vintage</groupId>
+      <artifactId>junit-vintage-engine</artifactId>
       <scope>test</scope>
     </dependency>
     <dependency>
@@ -574,6 +573,7 @@ under the License.
     <commons.jira.pid>12310484</commons.jira.pid>
     <!-- The RC version used in the staging repository URL. -->
     <commons.rc.version>RC2</commons.rc.version>
+    <commons.junit.version>5.9.1</commons.junit.version>
     <commons.surefire.version>3.0.0-M7</commons.surefire.version>
     <spotbugs.plugin.version>4.7.2.0</spotbugs.plugin.version>
     <spotbugs.impl.version>4.7.2</spotbugs.impl.version>    
diff --git a/src/changes/changes.xml b/src/changes/changes.xml
index fe429da..97cebfa 100644
--- a/src/changes/changes.xml
+++ b/src/changes/changes.xml
@@ -76,8 +76,8 @@ The <action> type attribute can be add,update,fix,remove.
       <action dev="ggregory" type="update" due-to="Dependabot, Gary Gregory">
         Bump actions/setup-java from 1.4.0 to 3, #21.
       </action>
-      <action dev="ggregory" type="update" due-to="Dependabot">
-        Bump junit from 3.8.1 to 4.13.2 #23, #38.
+      <action dev="ggregory" type="update" due-to="Dependabot, Gary Gregory">
+        Bump junit from 3.8.1 to 5.9.1 Vintage #23, #38.
       </action>
       <action dev="ggregory" type="update" due-to="Dependabot">
         Bump clirr-maven-plugin from 2.2.2 to 2.8 #14.