diff --git a/odps-data-carrier/pom.xml b/odps-data-carrier/pom.xml
index 0e6e750e..1ed6d3aa 100644
--- a/odps-data-carrier/pom.xml
+++ b/odps-data-carrier/pom.xml
@@ -32,7 +32,7 @@
       <dependency>
         <groupId>com.google.code.gson</groupId>
         <artifactId>gson</artifactId>
-        <version>2.8.5</version>
+        <version>2.8.9</version>
         <scope>compile</scope>
       </dependency>
       <!-- https://mvnrepository.com/artifact/mysql/mysql-connector-java -->