diff --git a/NOTICE-fips.txt b/NOTICE-fips.txt
index 5c9b026a7f..44c825e279 100644
--- a/NOTICE-fips.txt
+++ b/NOTICE-fips.txt
@@ -10,12 +10,12 @@ Third party libraries used by the Elastic Beats project:
 
 
 --------------------------------------------------------------------------------
-Dependency : github.com/dgraph-io/ristretto
-Version: v0.2.0
+Dependency : github.com/dgraph-io/ristretto/v2
+Version: v2.4.2
 Licence type (autodetected): Apache-2.0
 --------------------------------------------------------------------------------
 
-Contents of probable licence file $GOMODCACHE/github.com/dgraph-io/ristretto@v0.2.0/LICENSE:
+Contents of probable licence file $GOMODCACHE/github.com/dgraph-io/ristretto/v2@v2.4.2/LICENSE:
 
                                  Apache License
                            Version 2.0, January 2004
diff --git a/NOTICE.txt b/NOTICE.txt
index 8bdd875ced..caa1549af0 100644
--- a/NOTICE.txt
+++ b/NOTICE.txt
@@ -10,12 +10,12 @@ Third party libraries used by the Elastic Beats project:
 
 
 --------------------------------------------------------------------------------
-Dependency : github.com/dgraph-io/ristretto
-Version: v0.2.0
+Dependency : github.com/dgraph-io/ristretto/v2
+Version: v2.4.2
 Licence type (autodetected): Apache-2.0
 --------------------------------------------------------------------------------
 
-Contents of probable licence file $GOMODCACHE/github.com/dgraph-io/ristretto@v0.2.0/LICENSE:
+Contents of probable licence file $GOMODCACHE/github.com/dgraph-io/ristretto/v2@v2.4.2/LICENSE:
 
                                  Apache License
                            Version 2.0, January 2004
diff --git a/dev-tools/go.mod b/dev-tools/go.mod
index 2f89b520e4..6e66ead7c4 100644
--- a/dev-tools/go.mod
+++ b/dev-tools/go.mod
@@ -23,7 +23,7 @@ require (
 	github.com/go-openapi/swag v0.23.0 // indirect
 	github.com/google/licenseclassifier v0.0.0-20250213175939-b5d1a3369749 // indirect
 	github.com/josharian/intern v1.0.0 // indirect
-	github.com/jstemmer/go-junit-report v1.0.0 // indirect
+	github.com/jstemmer/go-junit-report/v2 v2.1.0 // indirect
 	github.com/mailru/easyjson v0.7.7 // indirect
 	github.com/mohae/deepcopy v0.0.0-20170929034955-c48cc78d4826 // indirect
 	github.com/oapi-codegen/oapi-codegen/v2 v2.4.1 // indirect
diff --git a/go.mod b/go.mod
index 297fad6c5b..cb00996ebe 100644
--- a/go.mod
+++ b/go.mod
@@ -4,7 +4,7 @@ go 1.26.10
 
 require (
 	github.com/Pallinder/go-randomdata v1.2.0
-	github.com/dgraph-io/ristretto v0.2.0
+	github.com/dgraph-io/ristretto/v2 v2.4.2
 	github.com/docker/go-units v0.5.0
 	github.com/elastic/beats/v7 v7.0.0-alpha2.0.20261105190440-d25cfa30ebb4
 	github.com/elastic/elastic-agent-client/v7 v7.18.1
diff --git a/go.sum b/go.sum
index 0d6ca62cdc..fdcf399937 100644
--- a/go.sum
+++ b/go.sum
@@ -21,10 +21,10 @@ github.com/cpuguy83/go-md2man/v2 v2.0.6/go.mod h1:oOW0eioCTA6cOiMLiUPZOpcVxMig6N
 github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
 github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc h1:U9qPSI2PIWSS1VwoXQT9A3Wy9MM3WgvqSxFWenqJduM=
 github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
-github.com/dgraph-io/ristretto v0.2.0 h1:XAfl+7cmoUDWW/2Lx8TGZQjjxIQ2Ley9DSf52dru4WE=
-github.com/dgraph-io/ristretto v0.2.0/go.mod h1:8uBHCU/PBV4Ag0CJrP47b9Ofby5dqWNh4FicAdoqFNU=
-github.com/dgryski/go-farm v0.0.0-20200201041132-a6ae2369ad13 h1:fAjc9m62+UWV/WAFKLNi6ZS0675eEUC9y3AlwSbQu1Y=
-github.com/dgryski/go-farm v0.0.0-20200201041132-a6ae2369ad13/go.mod h1:SqUrOPUnsFjfmXRMNPybcSiG0BgUW2AuFH8PAnS2iTw=
+github.com/dgraph-io/ristretto/v2 v2.4.2 h1:x0cvjmUKxt764Yxdk2nr94we1AvPPAMh1rh5TQ+Jo80=
+github.com/dgraph-io/ristretto/v2 v2.4.2/go.mod h1:0KsrXtXvnv0EqnzyowllbVJB8yBonswa2lTCK2gGo9E=
+github.com/dgryski/go-farm v0.0.0-20240924180020-3414d57e47da h1:aIftn67I1fkbMa512G+w+Pxci9hJPB8oMnkcP3iZF38=
+github.com/dgryski/go-farm v0.0.0-20240924180020-3414d57e47da/go.mod h1:SqUrOPUnsFjfmXRMNPybcSiG0BgUW2AuFH8PAnS2iTw=
 github.com/distribution/reference v0.6.0 h1:0IXCQ5g4/QMHHkarYzh5l+u8T3t73zM5QvfrDyIgxBk=
 github.com/distribution/reference v0.6.0/go.mod h1:BbU0aIcezP1/5jX/8MP0YiH4SdvB5Y4f/wlDRiLyi3E=
 github.com/docker/go-connections v0.7.0 h1:6SsRfJddP22WMrCkj19x9WKjEDTB+ahsdiGYf0mN39c=
diff --git a/internal/pkg/cache/impl_ristretto.go b/internal/pkg/cache/impl_ristretto.go
index 28f21d12a9..f0a3ba0f13 100644
--- a/internal/pkg/cache/impl_ristretto.go
+++ b/internal/pkg/cache/impl_ristretto.go
@@ -7,7 +7,7 @@
 package cache
 
 import (
-	"github.com/dgraph-io/ristretto"
+	"github.com/dgraph-io/ristretto/v2"
 
 	"github.com/elastic/fleet-server/v7/internal/pkg/config"
 )