diff --git a/buildSrc/build.gradle.kts b/buildSrc/build.gradle.kts
index f824ad84aa..8ada787f60 100644
--- a/buildSrc/build.gradle.kts
+++ b/buildSrc/build.gradle.kts
@@ -31,7 +31,7 @@ dependencies {
 
   // When updating, update above in plugins too
   implementation("com.diffplug.spotless:spotless-plugin-gradle:8.9.0")
-  implementation("com.github.spotbugs.snom:spotbugs-gradle-plugin:6.5.5")
+  implementation("com.github.spotbugs.snom:spotbugs-gradle-plugin:6.5.9")
   implementation("com.gradleup.shadow:shadow-gradle-plugin:9.5.1")
 
   implementation("org.owasp:dependency-check-gradle:12.2.2")
diff --git a/gradle/spotbugs-exclude.xml b/gradle/spotbugs-exclude.xml
index ddeece1d39..c7407b66a1 100644
--- a/gradle/spotbugs-exclude.xml
+++ b/gradle/spotbugs-exclude.xml
@@ -24,6 +24,18 @@
     <Class name="com.microsoft.applicationinsights.diagnostics.collection.libos.os.linux.LinuxKernelStats"/>
     <Bug pattern="CT_CONSTRUCTOR_THROW"/> <!-- inner class exception thrown in constructor can be ignored -->
   </Match>
+  <Match>
+    <Class name="com.microsoft.applicationinsights.agent.internal.processors.DelegatingLogData"/>
+    <Bug pattern="CT_CONSTRUCTOR_THROW"/> <!-- inner class exception thrown in constructor can be ignored -->
+  </Match>
+  <Match>
+    <Class name="com.microsoft.applicationinsights.agent.internal.perfcounter.PerformanceCounterContainer"/>
+    <Bug pattern="USO_UNSAFE_OBJECT_SYNCHRONIZATION"/> <!-- agent internal singleton, not reachable by untrusted code -->
+  </Match>
+  <Match>
+    <Class name="com.microsoft.applicationinsights.agent.internal.diagnostics.status.StatusFile"/>
+    <Bug pattern="USO_UNSAFE_ACCESSIBLE_OBJECT_SYNCHRONIZATION"/> <!-- private lock only exposed via a synthetic accessor for a nested class -->
+  </Match>
   <Match>
     <Class name="com.microsoft.applicationinsights.agent.internal.diagnostics.status.StatusFile"/>
     <Bug pattern="ENV_USE_PROPERTY_INSTEAD_OF_ENV"/> <!-- inner class use env var 'HOME' instead of 'user.home' can be ignored -->