diff --git a/versions.lock b/versions.lock
index 0321cb3d3..080a75645 100644
--- a/versions.lock
+++ b/versions.lock
@@ -22,7 +22,7 @@ com.palantir.ri:resource-identifier:1.0.1 (1 constraints: 0405f135)
 com.palantir.safe-logging:preconditions:1.8.1 (3 constraints: 81287a84)
 com.palantir.safe-logging:safe-logging:1.8.1 (3 constraints: 3a2d32f4)
 com.palantir.syntactic-paths:syntactic-paths:0.6.1 (1 constraints: 0905fe35)
-com.palantir.tokens:auth-tokens:3.5.1 (1 constraints: a708547e)
+com.palantir.tokens:auth-tokens:3.5.2 (1 constraints: a808567e)
 com.palantir.tracing:tracing:2.4.0 (1 constraints: 43101a9e)
 com.palantir.tracing:tracing-api:2.4.0 (1 constraints: 9e0c3b09)
 com.palantir.tracing:tracing-undertow:2.4.0 (1 constraints: a408487e)
diff --git a/versions.props b/versions.props
index 88f472675..a085cab7d 100644
--- a/versions.props
+++ b/versions.props
@@ -15,7 +15,7 @@ com.palantir.conjure.verification:* = 0.16.6
 com.palantir.conjure:* = 4.2.2
 com.palantir.ri:resource-identifier = 1.0.1
 com.palantir.syntactic-paths:syntactic-paths = 0.6.1
-com.palantir.tokens:* = 3.5.1
+com.palantir.tokens:* = 3.5.2
 com.palantir.tracing:* = 2.4.0
 com.palantir.websecurity:dropwizard-web-security = 1.1.0
 com.squareup.okhttp3:* = 3.13.1