diff --git a/pom.xml b/pom.xml
index 83613ed2..7edf9393 100644
--- a/pom.xml
+++ b/pom.xml
@@ -41,7 +41,7 @@
 		<sonar.host.url>https://sonarcloud.io</sonar.host.url>
 		<sonar.organization>spdx</sonar.organization>
 		<sonar.projectKey>java-spdx-library</sonar.projectKey>
-		<dependency-check-maven.version>12.1.9</dependency-check-maven.version>
+		<dependency-check-maven.version>12.2.0</dependency-check-maven.version>
 	</properties>
 	<profiles>
 		<profile>
@@ -121,7 +121,7 @@
     <dependency>
     	<groupId>org.jsoup</groupId>
     	<artifactId>jsoup</artifactId>
-    	<version>1.21.2</version>
+    	<version>1.22.1</version>
     </dependency>
     <dependency>
     	<groupId>com.google.code.findbugs</groupId>
@@ -206,7 +206,7 @@
 			<plugin>
 				<groupId>org.sonatype.central</groupId>
 				<artifactId>central-publishing-maven-plugin</artifactId>
-				<version>0.9.0</version>
+				<version>0.10.0</version>
 				<extensions>true</extensions>
 				<configuration>
 					<publishingServerId>central</publishingServerId>
diff --git a/src/main/java/org/spdx/library/conversion/Spdx2to3Converter.java b/src/main/java/org/spdx/library/conversion/Spdx2to3Converter.java
index 52241283..0bb9a0ad 100644
--- a/src/main/java/org/spdx/library/conversion/Spdx2to3Converter.java
+++ b/src/main/java/org/spdx/library/conversion/Spdx2to3Converter.java
@@ -315,6 +315,7 @@ public static CreationInfo convertCreationInfo(
 		CreationInfo retval = new CreationInfo.CreationInfoBuilder(modelStore, modelStore.getNextId(IdType.Anonymous), null)
 				.setCreated(creationInfoV2.getCreated())
 				.setSpecVersion(SpdxConstantsV3.MODEL_SPEC_VERSION)
+			    .setComment(creationInfoV2.getComment().orElse(null))
 				.build();
 		retval.setIdPrefix(uriPrefix);
 		for (String docCreator:creationInfoV2.getCreators()) {
diff --git a/src/test/java/org/spdx/library/conversion/Spdx2to3ConverterTest.java b/src/test/java/org/spdx/library/conversion/Spdx2to3ConverterTest.java
index 310e075c..3675e0df 100644
--- a/src/test/java/org/spdx/library/conversion/Spdx2to3ConverterTest.java
+++ b/src/test/java/org/spdx/library/conversion/Spdx2to3ConverterTest.java
@@ -137,12 +137,14 @@ public void testConvertCreationInfo() throws InvalidSPDXAnalysisException {
 		String organizationCreatorName = "Source Auditor Inc.";
 		String organizationCreator = SpdxConstantsCompatV2.CREATOR_PREFIX_ORGANIZATION + organizationCreatorName;
 		String created = "2010-01-29T18:30:22Z";
+		String comment = "Test creation info comment";
 		String licenseListVersion = "3.21";
 		SpdxCreatorInformation creatorInfo = new SpdxCreatorInformation(fromModelStore, DOCUMENT_URI, creatorId, copyManager, true);
 		creatorInfo.getCreators().add(personCreator);
 		creatorInfo.getCreators().add(toolCreator);
 		creatorInfo.getCreators().add(organizationCreator);
 		creatorInfo.setCreated(created);
+		creatorInfo.setComment(comment);
 		creatorInfo.setLicenseListVersion(licenseListVersion);
 		List<String> verify = creatorInfo.verify();
 		assertTrue(verify.isEmpty());
@@ -173,6 +175,7 @@ public void testConvertCreationInfo() throws InvalidSPDXAnalysisException {
 		assertEquals(1, tools.length);
 		assertEquals(toolCreatorName, tools[0].getName().get());
 		assertEquals(created, result.getCreated());
+		assertEquals(comment, result.getComment().orElse(null));
 		assertEquals(IdType.Anonymous, toModelStore.getIdType(result.getObjectUri()));
 		verify = result.verify();
 		assertTrue(verify.isEmpty());