Update all remaining java dependencies

.bazelrc

@@ -11,6 +11,9 @@ build --java_language_version=17
 build --tool_java_runtime_version=remotejdk_17
 build --tool_java_language_version=17
 
+build --experimental_strict_java_deps=strict
+build --explicit_java_test_deps
+
 # Make sure we get something helpful when tests fail
 test --verbose_failures
 test --test_output=errors

MODULE.bazel

@@ -133,31 +133,37 @@ IO_GRPC_GRPC_JAVA_ARTIFACTS = [
     "org.codehaus.mojo:animal-sniffer-annotations:1.21",
 ]
 
+io_grpc_version = "1.68.1"
+
+slf4j_version = "1.7.32"
+
+spotbugs_version = "4.8.6"
+
 maven.install(
     name = "contrib_rules_jvm_deps",
     artifacts = [
+        "com.github.spotbugs:spotbugs-annotations:%s" % spotbugs_version,
         "com.google.code.findbugs:jsr305:3.0.2",
-        "com.google.errorprone:error_prone_annotations:2.11.0",
-        "com.google.guava:guava:30.1.1-jre",
-        "commons-cli:commons-cli:1.5.0",
-        "io.grpc:grpc-api:1.40.0",
-        "io.grpc:grpc-core:1.40.0",
-        "io.grpc:grpc-netty:1.40.0",
-        "io.grpc:grpc-services:1.40.0",
-        "io.grpc:grpc-stub:1.40.0",
-        "org.slf4j:slf4j-simple:1.7.32",
-        "com.google.googlejavaformat:google-java-format:1.15.0",
+        "com.google.errorprone:error_prone_annotations:2.35.1",
+        "com.google.googlejavaformat:google-java-format:1.24.0",
+        "com.google.guava:guava:33.3.1-jre",
+        "commons-cli:commons-cli:1.9.0",
+        "io.grpc:grpc-api:%s" % io_grpc_version,
+        "io.grpc:grpc-core:%s" % io_grpc_version,
+        "io.grpc:grpc-netty:%s" % io_grpc_version,
+        "io.grpc:grpc-services:%s" % io_grpc_version,
+        "io.grpc:grpc-stub:%s" % io_grpc_version,
 
         # These can be versioned independently of the versions in `repositories.bzl`
         # so long as the version numbers are higher.
-        "org.junit.jupiter:junit-jupiter-engine:5.8.2",
-        "org.junit.jupiter:junit-jupiter-api:5.8.2",
-        "org.junit.platform:junit-platform-launcher:1.8.2",
-        "org.junit.platform:junit-platform-reporting:1.8.2",
-        "org.junit.vintage:junit-vintage-engine:5.8.2",
+        "org.junit.jupiter:junit-jupiter-engine",
+        "org.junit.jupiter:junit-jupiter-api",
+        "org.junit.platform:junit-platform-launcher",
+        "org.junit.platform:junit-platform-reporting",
+        "org.junit.vintage:junit-vintage-engine",
 
         # Open Test Alliance for the JVM dep
-        "org.opentest4j:opentest4j:1.2.0",
+        "org.opentest4j:opentest4j:1.3.0",
 
         # Checkstyle deps
         "com.puppycrawl.tools:checkstyle:10.20.0",
@@ -166,16 +172,23 @@ maven.install(
         "net.sourceforge.pmd:pmd-dist:7.7.0",
 
         # Spotbugs deps
-        "org.slf4j:slf4j-api:1.7.32",
-        "org.slf4j:slf4j-jdk14:1.7.32",
+        "org.slf4j:slf4j-api:%s" % slf4j_version,
+        "org.slf4j:slf4j-jdk14:%s" % slf4j_version,
+
+        # Used by us at runtime
+        "org.slf4j:slf4j-simple:%s" % slf4j_version,
 
         # We explicitly declare a protobuf runtime version
         # so that it coincides with the one we use to generate the code.
         "com.google.protobuf:protobuf-java:{}".format(PROTOBUF_JAVA_VERSION),
     ] + IO_GRPC_GRPC_JAVA_ARTIFACTS,
+    boms = [
+        "org.junit:junit-bom:5.11.3",
+    ],
     fail_if_repin_required = True,
     generate_compat_repositories = True,
     lock_file = "//:contrib_rules_jvm_deps_install.json",
+    resolver = "maven",
     strict_visibility = False,
 )
 
@@ -189,7 +202,7 @@ maven.artifact(
     artifact = "spotbugs",
     exclusions = ["org.slf4j:slf4j-api"],
     group = "com.github.spotbugs",
-    version = "4.7.0",
+    version = spotbugs_version,
 )
 use_repo(
     maven,