diff --git a/modules/drivers/bigquery-cloud-sdk/deps.edn b/modules/drivers/bigquery-cloud-sdk/deps.edn
index 04f001df6c4f3cb4f6e9743f413801aeeb944c08..1d4f17cadbc6afe038da6359010c44b7103d2c97 100644
--- a/modules/drivers/bigquery-cloud-sdk/deps.edn
+++ b/modules/drivers/bigquery-cloud-sdk/deps.edn
@@ -3,7 +3,10 @@
 
  :deps
  ;; TODO: figure out how to be able to leave off this version string and use the version from the BOM
- {com.google.cloud/google-cloud-bigquery      {:mvn/version "2.38.1"}
+ {com.google.cloud/google-cloud-bigquery      {:mvn/version "2.38.1"
+                                               ;; this appears to be dual licensed EPL, GPL2.0 but it's not super
+                                               ;; clear so we're excluding it
+                                               :exclusions [javax.annotation/javax.annotation-api]}
   com.google.guava/guava                      {:mvn/version "33.1.0-jre"} ; specified separately so that Snyk is happy
   com.google.code.gson/gson                   {:mvn/version "2.10.1"}
   com.google.oauth-client/google-oauth-client {:mvn/version "1.35.0"}}}