diff --git a/d8_r8/main/build.gradle.kts b/d8_r8/main/build.gradle.kts
index ab4f252..c441284 100644
--- a/d8_r8/main/build.gradle.kts
+++ b/d8_r8/main/build.gradle.kts
@@ -21,7 +21,7 @@
   `kotlin-dsl`
   id("dependencies-plugin")
   id("net.ltgt.errorprone") version "3.0.1"
-  id("org.spdx.sbom") version "0.2.0-r8-patch01"
+  id("org.spdx.sbom") version "0.4.0-r8-patch01"
 }
 
 java {
diff --git a/third_party/dependencies_plugin.tar.gz.sha1 b/third_party/dependencies_plugin.tar.gz.sha1
index 73510da..fa66acc 100644
--- a/third_party/dependencies_plugin.tar.gz.sha1
+++ b/third_party/dependencies_plugin.tar.gz.sha1
@@ -1 +1 @@
-577ea397b7e8db5975176c059ce1c5e82e2ea085
\ No newline at end of file
+ebc6c2750dc911f0a974f79395ef28d523c89d09
\ No newline at end of file
diff --git a/tools/create_local_maven_with_dependencies.py b/tools/create_local_maven_with_dependencies.py
index fd06fa4..4f63ef9 100755
--- a/tools/create_local_maven_with_dependencies.py
+++ b/tools/create_local_maven_with_dependencies.py
@@ -104,7 +104,7 @@
 
   # Patched version of org.spdx.sbom:org.spdx.sbom.gradle.plugin:0.2.0.
   # See commit message for a13217f333cc65fb602502ac446698dd74d10b7f.
-  'org.spdx.sbom:org.spdx.sbom.gradle.plugin:0.2.0-r8-patch01',
+  'org.spdx.sbom:org.spdx.sbom.gradle.plugin:0.4.0-r8-patch01',
   # See https://github.com/FasterXML/jackson-core/issues/999.
   'ch.randelshofer:fastdoubleparser:0.8.0',
 ]