diff --git a/pom.xml b/pom.xml
index cf4efee..d085b7c 100644
--- a/pom.xml
+++ b/pom.xml
@@ -25,6 +25,27 @@
 				<artifactId>commons-io</artifactId>
 				<version>2.19.0</version>
 			</dependency>
+
+			<dependency>
+				<groupId>org.bouncycastle</groupId>
+				<artifactId>bcpg-jdk18on</artifactId>
+				<version>1.81</version>
+			</dependency>
+			<dependency>
+				<groupId>org.bouncycastle</groupId>
+				<artifactId>bcprov-jdk18on</artifactId>
+				<version>1.81</version>
+			</dependency>
+			<dependency>
+				<groupId>org.bouncycastle</groupId>
+				<artifactId>bcutil-jdk18on</artifactId>
+				<version>1.81</version>
+			</dependency>
+			<dependency>
+				<groupId>org.bouncycastle</groupId>
+				<artifactId>bcpkix-jdk18on</artifactId>
+				<version>1.81</version>
+			</dependency>
 		</dependencies>
 	</dependencyManagement>
 
diff --git a/src/main/java/org/springframework/data/release/Application.java b/src/main/java/org/springframework/data/release/Application.java
index 3ee3f21..1ff9025 100644
--- a/src/main/java/org/springframework/data/release/Application.java
+++ b/src/main/java/org/springframework/data/release/Application.java
@@ -15,8 +15,11 @@
  */
 package org.springframework.data.release;
 
+import java.security.Security;
 import java.util.logging.Logger;
 
+import org.bouncycastle.jce.provider.BouncyCastleProvider;
+
 import org.springframework.boot.SpringApplication;
 import org.springframework.boot.WebApplicationType;
 import org.springframework.boot.autoconfigure.SpringBootApplication;
@@ -32,6 +35,9 @@ public class Application {
 
 	public static void main(String[] args) throws Exception {
 
+		// without this, you'll get weird errors like "Cannot find any provider supporting AES/OCB/NoPadding"
+		Security.addProvider(new BouncyCastleProvider());
+
 		SpringApplication application = new SpringApplication(Application.class);
 		application.setWebApplicationType(WebApplicationType.NONE);
 		application.setAdditionalProfiles("local");