diff --git a/sigstore-cli/build.gradle.kts b/sigstore-cli/build.gradle.kts
index 06d9228b..328c62e7 100644
--- a/sigstore-cli/build.gradle.kts
+++ b/sigstore-cli/build.gradle.kts
@@ -3,7 +3,7 @@ import com.github.jengelman.gradle.plugins.shadow.tasks.ShadowJar
 plugins {
     id("build-logic.java")
     id("application")
-    id("com.gradleup.shadow") version "9.0.0-rc3"
+    id("com.gradleup.shadow") version "9.6.1"
 }
 
 repositories {
@@ -50,6 +50,9 @@ tasks.register<ShadowJar>("serverShadowJar") {
     archiveClassifier.set("all")
     archiveVersion.set("")
 
+    filesMatching("META-INF/services/*") {
+        duplicatesStrategy = DuplicatesStrategy.INCLUDE
+    }
     mergeServiceFiles()
 
     from(sourceSets.main.get().output)
diff --git a/tuf-cli/build.gradle.kts b/tuf-cli/build.gradle.kts
index f23c705d..416f2f81 100644
--- a/tuf-cli/build.gradle.kts
+++ b/tuf-cli/build.gradle.kts
@@ -3,7 +3,7 @@ import com.github.jengelman.gradle.plugins.shadow.tasks.ShadowJar
 plugins {
     id("build-logic.java")
     id("application")
-    id("com.gradleup.shadow") version "9.0.0-rc3"
+    id("com.gradleup.shadow") version "9.6.1"
 }
 
 repositories {
@@ -50,6 +50,9 @@ tasks.register<ShadowJar>("serverShadowJar") {
     archiveClassifier.set("all")
     archiveVersion.set("")
 
+    filesMatching("META-INF/services/*") {
+        duplicatesStrategy = DuplicatesStrategy.INCLUDE
+    }
     mergeServiceFiles()
 
     from(sourceSets.main.get().output)