diff --git a/.snyk b/.snyk
index b110c2cbf..fc6650297 100644
--- a/.snyk
+++ b/.snyk
@@ -76,13 +76,6 @@ ignore:
         reason: >-
           bc-fips forced to 2.1.2. Residual if Confluent test jars override.
         expires: 2026-06-30T00:00:00.000Z
-  SNYK-JAVA-ORGCODEHAUSPLEXUS-15766699:
-    - '*':
-        reason: >-
-          plexus-utils 3.5.1 is a transitive test dependency (Confluent test
-          jars). Fix requires 4.0.3 which is a major version bump breaking
-          API. Not in production runtime.
-        expires: 2026-06-30T00:00:00.000Z
   SNYK-JAVA-ORGECLIPSEJETTY-15426509:
     - '*':
         reason: >-
diff --git a/build.gradle b/build.gradle
index 76edcb8a2..158e02053 100644
--- a/build.gradle
+++ b/build.gradle
@@ -84,6 +84,7 @@ configurations.all {
         force("org.eclipse.jetty:jetty-client:12.0.33")
         force("org.eclipse.jetty:jetty-io:12.0.33")
         force("org.eclipse.jetty:jetty-util:12.0.33")
+        force("org.codehaus.plexus:plexus-utils:3.6.1")
     }
 }