diff --git a/lock.sbt b/lock.sbt
index a1cf38af3..8c3ac1855 100644
--- a/lock.sbt
+++ b/lock.sbt
@@ -85,7 +85,7 @@ Compile / dependencyOverrides ++= {
       "dev.paseto" % "jpaseto-gson" % "0.7.0",
       "dev.paseto" % "jpaseto-impl" % "0.7.0",
       "dev.paseto" % "jpaseto-sodium" % "0.7.0",
-      "io.dropwizard.metrics" % "metrics-core" % "4.2.37",
+      "io.dropwizard.metrics" % "metrics-core" % "4.2.39",
       "io.dropwizard.metrics" % "metrics-healthchecks" % "4.2.32",
       "io.jaegertracing" % "jaeger-client" % "0.35.5",
       "io.jaegertracing" % "jaeger-core" % "0.35.5",
diff --git a/project/Dependencies.scala b/project/Dependencies.scala
index ce9ec72e1..f172ab5c9 100644
--- a/project/Dependencies.scala
+++ b/project/Dependencies.scala
@@ -146,7 +146,7 @@ object Dependencies {
     // See: https://github.com/dropwizard/metrics/releases
     // and: https://metrics.dropwizard.io/4.2.0/manual/core.html
     // and: https://mvnrepository.com/artifact/io.dropwizard.metrics/metrics-core
-    val metricsCore = "io.dropwizard.metrics" % "metrics-core" % "4.2.37"
+    val metricsCore = "io.dropwizard.metrics" % "metrics-core" % "4.2.39"
 
     // Deprecated. SHOULD migrate to OpenTelemetry, they say, https://opentelemetry.io/.
     // 1.8.1 exists now.