diff --git a/pom.xml b/pom.xml
index caf2e76b2..64724543b 100644
--- a/pom.xml
+++ b/pom.xml
@@ -23,7 +23,8 @@
     <org.apache.httpcomponents.version>5.2.1</org.apache.httpcomponents.version>
     <org.apache.commons.lang3.version>3.13.0</org.apache.commons.lang3.version>
     <org.apache.commons.validator.version>1.7</org.apache.commons.validator.version>
-    <org.projectnessie.cel.bom.version>0.3.21</org.projectnessie.cel.bom.version>
+    <org.projectnessie.cel.bom.version>0.4.4</org.projectnessie.cel.bom.version>
+    <com.google.protobuf-java.version>3.25.2</com.google.protobuf-java.version>
     <com.nimbusds.jose.jwt.version>9.37.3</com.nimbusds.jose.jwt.version>
     <org.testcontainers.bom.version>1.19.7</org.testcontainers.bom.version>
     <quarkus.platform.artifact-id>quarkus-bom</quarkus.platform.artifact-id>
@@ -161,6 +162,12 @@
       <groupId>org.projectnessie.cel</groupId>
       <artifactId>cel-jackson</artifactId>
     </dependency>
+    <!-- FIXME this is a forced version override of the protobuf required by projectnessie -->
+    <dependency>
+      <groupId>com.google.protobuf</groupId>
+      <artifactId>protobuf-java</artifactId>
+      <version>${com.google.protobuf-java.version}</version>
+    </dependency>
     <dependency>
       <groupId>commons-validator</groupId>
       <artifactId>commons-validator</artifactId>