diff --git a/external_plugin_deps.bzl b/external_plugin_deps.bzl
index 61b3c8c..776e937 100644
--- a/external_plugin_deps.bzl
+++ b/external_plugin_deps.bzl
@@ -1,13 +1,13 @@
 load("//tools/bzl:maven_jar.bzl", "GERRIT", "MAVEN_CENTRAL", "MAVEN_LOCAL", "maven_jar")
 
-JGIT_VERSION = "5.2.1.201812262042-r"
+JGIT_VERSION = "5.3.5.201909031855-r"
 REPO = MAVEN_CENTRAL
 
 def external_plugin_deps():
     maven_jar(
         name = "jgit-http-apache",
         artifact = "org.eclipse.jgit:org.eclipse.jgit.http.apache:" + JGIT_VERSION,
-        sha1 = "9ddf5e5fc9b1cb367f1b8321a301b4923ff7ab84",
+        sha1 = "f4bd0890486e312bbd25a72a6241fe6f7b8343f7",
         repository = REPO,
         unsign = True,
         exclude = [
@@ -19,7 +19,7 @@
     maven_jar(
         name = "jgit-lfs",
         artifact = "org.eclipse.jgit:org.eclipse.jgit.lfs:" + JGIT_VERSION,
-        sha1 = "8bced87e3c9829feb02595743dacbbdde0f68995",
+        sha1 = "89f5fb379f0def6a6d507b4ed8c67fb5c3006713",
         repository = REPO,
         unsign = True,
         exclude = [
@@ -31,7 +31,7 @@
     maven_jar(
         name = "jgit-lfs-server",
         artifact = "org.eclipse.jgit:org.eclipse.jgit.lfs.server:" + JGIT_VERSION,
-        sha1 = "b350bd34e70d4d7812c5f0caf6ff04672c9267c2",
+        sha1 = "cd4e97da698b0fff2ed54dd07a4daba065e6e3dd",
         repository = REPO,
         unsign = True,
         exclude = [