diff --git a/lib/BUCK b/lib/BUCK
index 65bdd5e942..48e2ff403f 100644
--- a/lib/BUCK
+++ b/lib/BUCK
@@ -79,8 +79,8 @@ maven_jar(
 
 maven_jar(
   name = 'jsr305',
-  id = 'com.google.code.findbugs:jsr305:2.0.2',
-  sha1 = '516c03b21d50a644d538de0f0369c620989cd8f0',
+  id = 'com.google.code.findbugs:jsr305:3.0.1',
+  sha1 = 'f7be08ec23c21485b9b5a1cf1654c2ec8c58168d',
   license = 'Apache2.0',
   attach_source = False,
   # Whitelist lib targets that have jsr305 as a dependency. Generally speaking