diff --git a/pom.xml b/pom.xml
index 89e52d9..98f2755 100644
--- a/pom.xml
+++ b/pom.xml
@@ -75,6 +75,11 @@
 		<!-- Java 11 -->
 		<maven.compiler.release>11</maven.compiler.release>
 
+		<!-- Encoding of the generated site reports. oss-parent only sets the source encoding;
+		     spotbugs-maven-plugin 4.10.4.0 stopped defaulting to UTF-8 when this is missing and
+		     fails with "charsetName" while rendering its report during `mvn verify site`. -->
+		<project.reporting.outputEncoding>UTF-8</project.reporting.outputEncoding>
+
 		<!-- Reproducible Build -->
 		<!-- See https://maven.apache.org/guides/mini/guide-reproducible-builds.html -->
 		<!-- Also drives the Maven site copyright year and "Documentation as of" date; bump at release. -->
@@ -267,7 +272,7 @@
 			<plugin>
 				<groupId>com.github.spotbugs</groupId>
 				<artifactId>spotbugs-maven-plugin</artifactId>
-				<version>4.10.3.0</version>
+				<version>4.10.4.0</version>
 				<executions>
 					<execution>
 						<phase>verify</phase>
@@ -359,7 +364,7 @@
 			<plugin>
 				<groupId>com.github.spotbugs</groupId>
 				<artifactId>spotbugs-maven-plugin</artifactId>
-				<version>4.10.3.0</version>
+				<version>4.10.4.0</version>
 			</plugin>
 
 			<!-- pmd: same version as the build gate above, so the report shows what the gate checked -->