Merge branch 'pr-26'

This closes #26
diff --git a/pom.xml b/pom.xml
index c6cd9a6..7f26c88 100644
--- a/pom.xml
+++ b/pom.xml
@@ -99,7 +99,7 @@
     <checkstyle.plugin.version>3.1.1</checkstyle.plugin.version>
     <checkstyle.version>8.37</checkstyle.version>
     <maven-scm.version>1.11.2</maven-scm.version>
-    <commons.spotbugs.version>4.1.3</commons.spotbugs.version>
+    <commons.spotbugs.version>4.1.4</commons.spotbugs.version>
     <commons.spotbugs.impl.version>4.1.3</commons.spotbugs.impl.version>    
     <commons.jacoco.version>0.8.6</commons.jacoco.version>
     <commons.jacoco.classRatio>0.1</commons.jacoco.classRatio>
diff --git a/src/changes/changes.xml b/src/changes/changes.xml
index 64e3c33..e5473f4 100755
--- a/src/changes/changes.xml
+++ b/src/changes/changes.xml
@@ -28,7 +28,7 @@
     <release version="1.8" date="2020-MM-DD" description="Version 1.8">
       <action issue="COMMONSSITE-138" type="add" dev="chtompki">Create signature validation script for releases</action>
       <action type="update" dev="kinow">Bump actions/setup-java from v1.4.0 to v1.4.3 #11 #19.</action>
-      <action type="update" dev="kinow">Bump spotbugs from 4.1.1 to 4.1.3 #10 #20.</action>
+      <action type="update" dev="kinow">Bump spotbugs-maven-plugin from 4.1.1 to 4.1.4 #10 #20 #26.</action>
       <action type="update" dev="sebb">Fail if commons.nexus.repo.id is not defined.</action>
       <action type="update" dev="sebb">Allow for old-style group ids in vote-txt.</action>
       <action type="update" dev="sebb">Don't create hash for .asc files.</action>