diff --git a/external_plugin_deps.bzl b/external_plugin_deps.bzl
index f9c5ae7..9ca97fa 100644
--- a/external_plugin_deps.bzl
+++ b/external_plugin_deps.bzl
@@ -1,13 +1,13 @@
 load("//tools/bzl:maven_jar.bzl", "GERRIT", "MAVEN_CENTRAL", "MAVEN_LOCAL", "maven_jar")
 
-JGIT_VERSION = "5.1.3.201810200350-r"
+JGIT_VERSION = "5.1.6.201903130242-r"
 REPO = MAVEN_CENTRAL
 
 def external_plugin_deps():
     maven_jar(
         name = "jgit-http-apache",
         artifact = "org.eclipse.jgit:org.eclipse.jgit.http.apache:" + JGIT_VERSION,
-        sha1 = "d98ca013eb8159b369af99e28be8b96a651c4f79",
+        sha1 = "d78a2afacc1c8724be678a095fa02bf9725853a1",
         repository = REPO,
         unsign = True,
         exclude = [
@@ -19,7 +19,7 @@
     maven_jar(
         name = "jgit-lfs",
         artifact = "org.eclipse.jgit:org.eclipse.jgit.lfs:" + JGIT_VERSION,
-        sha1 = "9fa727360ff65f0443684a78dfc3a099da70a4f2",
+        sha1 = "a6215064dea54368f2f8c38145006e64c13deb6d",
         repository = REPO,
         unsign = True,
         exclude = [
@@ -31,7 +31,7 @@
     maven_jar(
         name = "jgit-lfs-server",
         artifact = "org.eclipse.jgit:org.eclipse.jgit.lfs.server:" + JGIT_VERSION,
-        sha1 = "8655240c3cf005ff22b7da95c2f1f1b23dc746c5",
+        sha1 = "f5d7ca1220bb6aca07c5d33897a52cb6a0d89cd7",
         repository = REPO,
         unsign = True,
         exclude = [