diff --git a/base/pom.xml b/base/pom.xml
index a76d7aa..9fdcaec 100644
--- a/base/pom.xml
+++ b/base/pom.xml
@@ -273,11 +273,11 @@ of Jackson: application code should only rely on `jackson-bom`
       <!-- 12-Oct-2019, tatu: Copied from
            https://github.com/stephenc/git-timestamp-maven-plugin/blob/master/pom.xml#L327-L337
         -->
-      <!-- 01-Aug-2020, tatu: Upgrade 1.6.6 -> 1.6.8 -->
+      <!-- 30-May-2023, tatu: Upgrade 1.6.8 -> 1.6.13 -->
       <plugin>
         <groupId>org.sonatype.plugins</groupId>
         <artifactId>nexus-staging-maven-plugin</artifactId>
-        <version>1.6.8</version>
+        <version>1.6.13</version>
         <extensions>true</extensions>
         <configuration>
           <serverId>sonatype-nexus-staging</serverId>
diff --git a/release-notes/VERSION-2.x b/release-notes/VERSION-2.x
index 61d9ddb..0cb95f4 100644
--- a/release-notes/VERSION-2.x
+++ b/release-notes/VERSION-2.x
@@ -9,6 +9,10 @@ Jackson components (core, modules)
 === Releases (note: only includes patches with actual changes)
 ------------------------------------------------------------------------
 
+Not yet released
+
+* Udate `nexus-staging-maven-plugin` to 1.6.13 (from 1.6.8)
+
 2.15.2 (30-May-2023)
 
 No changes since 2.15.1