diff --git a/.gitattributes b/.gitattributes
index 1c344d3c035c..6d87d26f5476 100644
--- a/.gitattributes
+++ b/.gitattributes
@@ -52,7 +52,6 @@
 
 /java/ql/test/stubs/**/*.java linguist-generated=true
 /java/ql/test/experimental/stubs/**/*.java linguist-generated=true
-/java/kotlin-extractor/deps/*.jar filter=lfs diff=lfs merge=lfs -text
 
 # Force git not to modify line endings for go or html files under the go/ql directory
 /go/ql/**/*.go -text
diff --git a/java/kotlin-extractor/deps.bzl b/java/kotlin-extractor/deps.bzl
index 284e12494469..39325f5bbe4f 100644
--- a/java/kotlin-extractor/deps.bzl
+++ b/java/kotlin-extractor/deps.bzl
@@ -1,5 +1,4 @@
 load("//java/kotlin-extractor:versions.bzl", "VERSIONS", "version_less")
-load("//misc/bazel:lfs.bzl", "lfs_smudge")
 
 _kotlin_dep_build = """
 load("@rules_kotlin//kotlin:jvm.bzl", "kt_jvm_import")
@@ -16,9 +15,28 @@ _empty_zip = "PK\005\006\000\000\000\000\000\000\000\000\000\000\000\000\000\000
 def _get_dep(repository_ctx, name):
     return repository_ctx.path(Label("//java/kotlin-extractor/deps:%s" % name))
 
+_local_path = "{root}/resources/kotlin-dependencies/kotlin-{kind}-{version}.jar"
+_maven_url = "https://repo1.maven.org/maven2/org/jetbrains/kotlin/kotlin-{kind}/{version}/kotlin-{kind}-{version}.jar"
+
 def _kotlin_dep_impl(repository_ctx):
     _, _, name = repository_ctx.name.rpartition("~")
-    lfs_smudge(repository_ctx, [_get_dep(repository_ctx, name + ".jar")])
+    kind = repository_ctx.attr.kind
+    version = repository_ctx.attr.version
+    filename = "kotlin-%s-%s.jar" % (kind, version)
+    local_path = _local_path.format(root = repository_ctx.workspace_root, kind = kind, version = version)
+    if repository_ctx.path(local_path).exists:
+        url = "file://%s" % local_path
+    else:
+        url = _maven_url.format(kind = kind, version = version)
+
+    sha256 = VERSIONS[version].get(kind, "")
+    res = repository_ctx.download(url, output = filename, sha256 = sha256)
+    if not sha256:
+        fail('\nPlease add\n  "%s": "%s",\nto VERSIONS["%s"] in java/kotlin-extractor/versions.bzl' % (
+            kind,
+            res.sha256,
+            version,
+        ))
 
     # for some reason rules_kotlin warns about these jars missing, this is to silence those warnings
     repository_ctx.file("empty.zip", _empty_zip)
@@ -34,6 +52,10 @@ def _kotlin_dep_impl(repository_ctx):
 
 _kotlin_dep = repository_rule(
     implementation = _kotlin_dep_impl,
+    attrs = {
+        "kind": attr.string(),
+        "version": attr.string(),
+    },
 )
 
 def _walk(dir):
@@ -121,7 +143,7 @@ _defaults = repository_rule(implementation = _defaults_impl)
 def _kotlin_deps_impl(module_ctx):
     for v in VERSIONS:
         for lib in ("compiler", "compiler-embeddable", "stdlib"):
-            _kotlin_dep(name = "kotlin-%s-%s" % (lib, v))
+            _kotlin_dep(name = "kotlin-%s-%s" % (lib, v), kind = lib, version = v)
     _embeddable_source(name = "codeql_kotlin_embeddable")
     _defaults(name = "codeql_kotlin_defaults")
     return module_ctx.extension_metadata(
diff --git a/java/kotlin-extractor/deps/BUILD.bazel b/java/kotlin-extractor/deps/BUILD.bazel
deleted file mode 100644
index e69de29bb2d1..000000000000
diff --git a/java/kotlin-extractor/deps/LICENSE.md b/java/kotlin-extractor/deps/LICENSE.md
deleted file mode 100644
index a93f66f0aa30..000000000000
--- a/java/kotlin-extractor/deps/LICENSE.md
+++ /dev/null
@@ -1,7 +0,0 @@
-The Git LFS files contained in this directory are mirrored
-from [org.jetbrains.kotlin packages in the Maven repository][1]. Please refer to [the kotlin Apache 2.0 license][2] for
-details about their license.
-
-[1]: https://mvnrepository.com/artifact/org.jetbrains.kotlin
-
-[2]: https://github.com/JetBrains/kotlin/tree/master/license
diff --git a/java/kotlin-extractor/deps/kotlin-compiler-1.5.0.jar b/java/kotlin-extractor/deps/kotlin-compiler-1.5.0.jar
deleted file mode 100644
index 5aad4918db7a..000000000000
--- a/java/kotlin-extractor/deps/kotlin-compiler-1.5.0.jar
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:f6e4a2c4394e77f937fcffda0036531604f25cc7c8de8daea098e1aa31f1d248
-size 47816554
diff --git a/java/kotlin-extractor/deps/kotlin-compiler-1.5.10.jar b/java/kotlin-extractor/deps/kotlin-compiler-1.5.10.jar
deleted file mode 100644
index 04a54b334a24..000000000000
--- a/java/kotlin-extractor/deps/kotlin-compiler-1.5.10.jar
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:dfefb1aa8bec81256617c8ceb577373e44078b7e21024625da50e376037e9ae5
-size 47822093
diff --git a/java/kotlin-extractor/deps/kotlin-compiler-1.5.20.jar b/java/kotlin-extractor/deps/kotlin-compiler-1.5.20.jar
deleted file mode 100644
index 29a6d4df3e26..000000000000
--- a/java/kotlin-extractor/deps/kotlin-compiler-1.5.20.jar
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:a0ae437d1b670a5ba6da7893b7023df649c4ab2e6c19d5e9b4eee5332e1cde1f
-size 49012794
diff --git a/java/kotlin-extractor/deps/kotlin-compiler-1.5.30.jar b/java/kotlin-extractor/deps/kotlin-compiler-1.5.30.jar
deleted file mode 100644
index 502c844ce5cb..000000000000
--- a/java/kotlin-extractor/deps/kotlin-compiler-1.5.30.jar
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:487d8ff9766a6ba570cd15c5225c1600654e7cf1b6ef2b92ed6905528a3e838a
-size 49509580
diff --git a/java/kotlin-extractor/deps/kotlin-compiler-1.6.0.jar b/java/kotlin-extractor/deps/kotlin-compiler-1.6.0.jar
deleted file mode 100644
index 4a98879e43e6..000000000000
--- a/java/kotlin-extractor/deps/kotlin-compiler-1.6.0.jar
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:4bd7a92568fd89c23b7f9f36d4380886beed18d3d54ea6adf49bebae627db805
-size 51408858
diff --git a/java/kotlin-extractor/deps/kotlin-compiler-1.6.20.jar b/java/kotlin-extractor/deps/kotlin-compiler-1.6.20.jar
deleted file mode 100644
index 5a467a5af518..000000000000
--- a/java/kotlin-extractor/deps/kotlin-compiler-1.6.20.jar
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:90567c5cf297985d028fa39aa3a7904dc8096173e1c7f3d3f35fe7074581098e
-size 53370229
diff --git a/java/kotlin-extractor/deps/kotlin-compiler-1.7.0.jar b/java/kotlin-extractor/deps/kotlin-compiler-1.7.0.jar
deleted file mode 100644
index ef54ce1e6532..000000000000
--- a/java/kotlin-extractor/deps/kotlin-compiler-1.7.0.jar
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:ce85fafb3e24712d62a0d02d277c2d56197d74afdd4f5ca995eaf33d2c504663
-size 53906809
diff --git a/java/kotlin-extractor/deps/kotlin-compiler-1.7.20.jar b/java/kotlin-extractor/deps/kotlin-compiler-1.7.20.jar
deleted file mode 100644
index 442aea3e3425..000000000000
--- a/java/kotlin-extractor/deps/kotlin-compiler-1.7.20.jar
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:0e36d98c56f7c9685ab9d9e1fac9be36a5214939adb3f905b93c62de76023618
-size 54773087
diff --git a/java/kotlin-extractor/deps/kotlin-compiler-1.8.0.jar b/java/kotlin-extractor/deps/kotlin-compiler-1.8.0.jar
deleted file mode 100644
index 7884c5361b56..000000000000
--- a/java/kotlin-extractor/deps/kotlin-compiler-1.8.0.jar
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:1f19f247d337387cbdd75d54e10a6865857c28a533fced50c0c5c9482b3ab9af
-size 55128997
diff --git a/java/kotlin-extractor/deps/kotlin-compiler-1.9.0-Beta.jar b/java/kotlin-extractor/deps/kotlin-compiler-1.9.0-Beta.jar
deleted file mode 100644
index 8da3d202a5e4..000000000000
--- a/java/kotlin-extractor/deps/kotlin-compiler-1.9.0-Beta.jar
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:4c7e3972e0ce0be8aa5c8ceeb8eb795f6345685bb57c6f59b649ed70c6051581
-size 60202336
diff --git a/java/kotlin-extractor/deps/kotlin-compiler-1.9.20-Beta.jar b/java/kotlin-extractor/deps/kotlin-compiler-1.9.20-Beta.jar
deleted file mode 100644
index 57215c331e61..000000000000
--- a/java/kotlin-extractor/deps/kotlin-compiler-1.9.20-Beta.jar
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:b90980de3a16858e6e1957236d7bb9a729fcd0587a98fb64668866e1975aaa6f
-size 61641342
diff --git a/java/kotlin-extractor/deps/kotlin-compiler-2.0.0-RC1.jar b/java/kotlin-extractor/deps/kotlin-compiler-2.0.0-RC1.jar
deleted file mode 100644
index fca4ae9fd36e..000000000000
--- a/java/kotlin-extractor/deps/kotlin-compiler-2.0.0-RC1.jar
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:60e31163aa7348166d708cdc9cb47d616b0222e5b11173f35f1adfb61bc3690a
-size 58604870
diff --git a/java/kotlin-extractor/deps/kotlin-compiler-embeddable-1.5.0.jar b/java/kotlin-extractor/deps/kotlin-compiler-embeddable-1.5.0.jar
deleted file mode 100644
index d6e7ef8585bc..000000000000
--- a/java/kotlin-extractor/deps/kotlin-compiler-embeddable-1.5.0.jar
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:d7b85448039e468daf3b9462a172244477fa3eb890f199ec77703992f36ade44
-size 46308890
diff --git a/java/kotlin-extractor/deps/kotlin-compiler-embeddable-1.5.10.jar b/java/kotlin-extractor/deps/kotlin-compiler-embeddable-1.5.10.jar
deleted file mode 100644
index 05f594d6af13..000000000000
--- a/java/kotlin-extractor/deps/kotlin-compiler-embeddable-1.5.10.jar
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:b9965f7c958efb17f2a90a19b5e60325d4f4e644d2833dbfb4a11edd8dddf244
-size 46314547
diff --git a/java/kotlin-extractor/deps/kotlin-compiler-embeddable-1.5.20.jar b/java/kotlin-extractor/deps/kotlin-compiler-embeddable-1.5.20.jar
deleted file mode 100644
index 3bb8ee5e52f7..000000000000
--- a/java/kotlin-extractor/deps/kotlin-compiler-embeddable-1.5.20.jar
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:11d51087eb70b5abbad6fbf459a4349a0335916588000b5ecd990f01482e38ff
-size 47526900
diff --git a/java/kotlin-extractor/deps/kotlin-compiler-embeddable-1.5.30.jar b/java/kotlin-extractor/deps/kotlin-compiler-embeddable-1.5.30.jar
deleted file mode 100644
index 647b08b7b7ab..000000000000
--- a/java/kotlin-extractor/deps/kotlin-compiler-embeddable-1.5.30.jar
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:b5051dc92725b099c41710bd3f213cd0c1d6f25056d31b2e8cae30903873b741
-size 48031832
diff --git a/java/kotlin-extractor/deps/kotlin-compiler-embeddable-1.6.0.jar b/java/kotlin-extractor/deps/kotlin-compiler-embeddable-1.6.0.jar
deleted file mode 100644
index eafb6508d449..000000000000
--- a/java/kotlin-extractor/deps/kotlin-compiler-embeddable-1.6.0.jar
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:0366843cd2defdd583c6b16b10bc32b85f28c5bf9510f10e44c886f5bd24c388
-size 49978431
diff --git a/java/kotlin-extractor/deps/kotlin-compiler-embeddable-1.6.20.jar b/java/kotlin-extractor/deps/kotlin-compiler-embeddable-1.6.20.jar
deleted file mode 100644
index f426dae65b1e..000000000000
--- a/java/kotlin-extractor/deps/kotlin-compiler-embeddable-1.6.20.jar
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:be634faaafb56816b6ef6d583e57ab33e4d6e5180cde2f505ccf7d45dc738ef8
-size 51976423
diff --git a/java/kotlin-extractor/deps/kotlin-compiler-embeddable-1.7.0.jar b/java/kotlin-extractor/deps/kotlin-compiler-embeddable-1.7.0.jar
deleted file mode 100644
index 4abc782ed05f..000000000000
--- a/java/kotlin-extractor/deps/kotlin-compiler-embeddable-1.7.0.jar
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:6dcd02ced3bdbfabc7da046a69f4e730c8f907fc29bb5b2fea44083ffea22dc8
-size 142740530
diff --git a/java/kotlin-extractor/deps/kotlin-compiler-embeddable-1.7.20.jar b/java/kotlin-extractor/deps/kotlin-compiler-embeddable-1.7.20.jar
deleted file mode 100644
index b95097b6935e..000000000000
--- a/java/kotlin-extractor/deps/kotlin-compiler-embeddable-1.7.20.jar
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:5ec2be1872dc47b9dcb466f1781eded6c59d9eee18657d4b0f1148e619caea36
-size 53395419
diff --git a/java/kotlin-extractor/deps/kotlin-compiler-embeddable-1.8.0.jar b/java/kotlin-extractor/deps/kotlin-compiler-embeddable-1.8.0.jar
deleted file mode 100644
index 5494dd88f974..000000000000
--- a/java/kotlin-extractor/deps/kotlin-compiler-embeddable-1.8.0.jar
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:e9b3a56dbbfdf1e0328d4731b7d7ca789ce0f1f263372ad88dd8decbd1602858
-size 53769272
diff --git a/java/kotlin-extractor/deps/kotlin-compiler-embeddable-1.9.0-Beta.jar b/java/kotlin-extractor/deps/kotlin-compiler-embeddable-1.9.0-Beta.jar
deleted file mode 100644
index 32ea1ec13146..000000000000
--- a/java/kotlin-extractor/deps/kotlin-compiler-embeddable-1.9.0-Beta.jar
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:7429076f8dd2ccd1cce48d7e5bf5b9fadde8afab110f9f4cfe0912756f16d770
-size 58697460
diff --git a/java/kotlin-extractor/deps/kotlin-compiler-embeddable-1.9.20-Beta.jar b/java/kotlin-extractor/deps/kotlin-compiler-embeddable-1.9.20-Beta.jar
deleted file mode 100644
index 5c1db1782f8a..000000000000
--- a/java/kotlin-extractor/deps/kotlin-compiler-embeddable-1.9.20-Beta.jar
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:5c9de79f0f8d97f2aa4d877449063b1cc2828c17f25a119fc32c776401f058de
-size 60157805
diff --git a/java/kotlin-extractor/deps/kotlin-compiler-embeddable-2.0.0-RC1.jar b/java/kotlin-extractor/deps/kotlin-compiler-embeddable-2.0.0-RC1.jar
deleted file mode 100644
index 2f65ae3aaed0..000000000000
--- a/java/kotlin-extractor/deps/kotlin-compiler-embeddable-2.0.0-RC1.jar
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:12d330c6e98ba42840f1d10e2752a9c53099d4dfa855bc4526d23fe1a1af9634
-size 57125659
diff --git a/java/kotlin-extractor/deps/kotlin-stdlib-1.5.0.jar b/java/kotlin-extractor/deps/kotlin-stdlib-1.5.0.jar
deleted file mode 100644
index 83d4a9f9c031..000000000000
--- a/java/kotlin-extractor/deps/kotlin-stdlib-1.5.0.jar
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:52283996fe4067cd7330288b96ae67ecd463614dc741172c54d9d349ab6a9cd7
-size 1497598
diff --git a/java/kotlin-extractor/deps/kotlin-stdlib-1.5.10.jar b/java/kotlin-extractor/deps/kotlin-stdlib-1.5.10.jar
deleted file mode 100644
index a0b08eaf499a..000000000000
--- a/java/kotlin-extractor/deps/kotlin-stdlib-1.5.10.jar
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:ca87c454cd3f2e60931f1803c59699d510d3b4b959cd7119296fb947581d722d
-size 1497600
diff --git a/java/kotlin-extractor/deps/kotlin-stdlib-1.5.20.jar b/java/kotlin-extractor/deps/kotlin-stdlib-1.5.20.jar
deleted file mode 100644
index 90844bea3812..000000000000
--- a/java/kotlin-extractor/deps/kotlin-stdlib-1.5.20.jar
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:80cd79c26aac46d72d782de1ecb326061e93c6e688d994b48627ffd668ba63a8
-size 1497567
diff --git a/java/kotlin-extractor/deps/kotlin-stdlib-1.5.30.jar b/java/kotlin-extractor/deps/kotlin-stdlib-1.5.30.jar
deleted file mode 100644
index b19606b84967..000000000000
--- a/java/kotlin-extractor/deps/kotlin-stdlib-1.5.30.jar
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:c55608e9eb6df7327e74b21e271d324dc523cef31587b8d6d2393db08d6e000c
-size 1505951
diff --git a/java/kotlin-extractor/deps/kotlin-stdlib-1.6.0.jar b/java/kotlin-extractor/deps/kotlin-stdlib-1.6.0.jar
deleted file mode 100644
index 3ad56eecdc2d..000000000000
--- a/java/kotlin-extractor/deps/kotlin-stdlib-1.6.0.jar
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:115daea30b0d484afcf2360237b9d9537f48a4a2f03f3cc2a16577dfc6e90342
-size 1508076
diff --git a/java/kotlin-extractor/deps/kotlin-stdlib-1.6.20.jar b/java/kotlin-extractor/deps/kotlin-stdlib-1.6.20.jar
deleted file mode 100644
index b170c1da738b..000000000000
--- a/java/kotlin-extractor/deps/kotlin-stdlib-1.6.20.jar
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:eeb51c2b67b26233fd81d0bc4f8044ec849718890905763ceffd84a31e2cb799
-size 1509405
diff --git a/java/kotlin-extractor/deps/kotlin-stdlib-1.7.0.jar b/java/kotlin-extractor/deps/kotlin-stdlib-1.7.0.jar
deleted file mode 100644
index bed18f8429b7..000000000000
--- a/java/kotlin-extractor/deps/kotlin-stdlib-1.7.0.jar
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:aa88e9625577957f3249a46cb6e166ee09b369e600f7a11d148d16b0a6d87f05
-size 1524619
diff --git a/java/kotlin-extractor/deps/kotlin-stdlib-1.7.20.jar b/java/kotlin-extractor/deps/kotlin-stdlib-1.7.20.jar
deleted file mode 100644
index 9998f1e65920..000000000000
--- a/java/kotlin-extractor/deps/kotlin-stdlib-1.7.20.jar
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:7779ec96b9acbf92ca023858ac04543f9d2c3bdf1722425fff42f25ff3acfc9b
-size 1537347
diff --git a/java/kotlin-extractor/deps/kotlin-stdlib-1.8.0.jar b/java/kotlin-extractor/deps/kotlin-stdlib-1.8.0.jar
deleted file mode 100644
index 47dd2710887b..000000000000
--- a/java/kotlin-extractor/deps/kotlin-stdlib-1.8.0.jar
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:c77bef8774640b9fb9d6e217459ff220dae59878beb7d2e4b430506feffc654e
-size 1636558
diff --git a/java/kotlin-extractor/deps/kotlin-stdlib-1.9.0-Beta.jar b/java/kotlin-extractor/deps/kotlin-stdlib-1.9.0-Beta.jar
deleted file mode 100644
index c6f3f947029f..000000000000
--- a/java/kotlin-extractor/deps/kotlin-stdlib-1.9.0-Beta.jar
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:af458cc55cf69e966668e6010c7ccee4a50d553b3504a2e8311dd0c76242d881
-size 1708001
diff --git a/java/kotlin-extractor/deps/kotlin-stdlib-1.9.20-Beta.jar b/java/kotlin-extractor/deps/kotlin-stdlib-1.9.20-Beta.jar
deleted file mode 100644
index f9c853bbb068..000000000000
--- a/java/kotlin-extractor/deps/kotlin-stdlib-1.9.20-Beta.jar
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:788e48813dd76ad598fff7bef3b1e038d7291741810bd04c6c57037c4d75dac2
-size 1715901
diff --git a/java/kotlin-extractor/deps/kotlin-stdlib-2.0.0-RC1.jar b/java/kotlin-extractor/deps/kotlin-stdlib-2.0.0-RC1.jar
deleted file mode 100644
index fbf0a8eff06f..000000000000
--- a/java/kotlin-extractor/deps/kotlin-stdlib-2.0.0-RC1.jar
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:bbb2c9b813e6196f9afa9f9add8b395ee384ab1763a0880e084d2942214f1c30
-size 1729731
diff --git a/java/kotlin-extractor/deps/dev/.gitignore b/java/kotlin-extractor/dev/.gitignore
similarity index 100%
rename from java/kotlin-extractor/deps/dev/.gitignore
rename to java/kotlin-extractor/dev/.gitignore
diff --git a/java/kotlin-extractor/deps/dev/kotlinc b/java/kotlin-extractor/dev/kotlinc
similarity index 100%
rename from java/kotlin-extractor/deps/dev/kotlinc
rename to java/kotlin-extractor/dev/kotlinc
diff --git a/java/kotlin-extractor/deps/dev/kotlinc.bat b/java/kotlin-extractor/dev/kotlinc.bat
similarity index 100%
rename from java/kotlin-extractor/deps/dev/kotlinc.bat
rename to java/kotlin-extractor/dev/kotlinc.bat
diff --git a/java/kotlin-extractor/versions.bzl b/java/kotlin-extractor/versions.bzl
index 728672ead6de..b3f2d4dca147 100644
--- a/java/kotlin-extractor/versions.bzl
+++ b/java/kotlin-extractor/versions.bzl
@@ -1,18 +1,70 @@
 # when updating this list, `bazel mod tidy` should be run from `codeql` to update `MODULE.bazel`
-VERSIONS = [
-    "1.5.0",
-    "1.5.10",
-    "1.5.20",
-    "1.5.30",
-    "1.6.0",
-    "1.6.20",
-    "1.7.0",
-    "1.7.20",
-    "1.8.0",
-    "1.9.0-Beta",
-    "1.9.20-Beta",
-    "2.0.0-RC1",
-]
+# when adding a new version, start out with {}, then run `bazel fetch //java/kotlin-extractor:all`
+# (`bazel fetch @codeql//java/kotlin-extractor:all` from `semmle-code`).
+# Repeat while it will fail printing what to add here.
+# Alternatively, run `sha256sum` on the files to get what to write here.
+VERSIONS = {
+    "1.5.0": {
+        "compiler": "f6e4a2c4394e77f937fcffda0036531604f25cc7c8de8daea098e1aa31f1d248",
+        "compiler-embeddable": "d7b85448039e468daf3b9462a172244477fa3eb890f199ec77703992f36ade44",
+        "stdlib": "52283996fe4067cd7330288b96ae67ecd463614dc741172c54d9d349ab6a9cd7",
+    },
+    "1.5.10": {
+        "compiler": "dfefb1aa8bec81256617c8ceb577373e44078b7e21024625da50e376037e9ae5",
+        "compiler-embeddable": "b9965f7c958efb17f2a90a19b5e60325d4f4e644d2833dbfb4a11edd8dddf244",
+        "stdlib": "ca87c454cd3f2e60931f1803c59699d510d3b4b959cd7119296fb947581d722d",
+    },
+    "1.5.20": {
+        "compiler": "a0ae437d1b670a5ba6da7893b7023df649c4ab2e6c19d5e9b4eee5332e1cde1f",
+        "compiler-embeddable": "11d51087eb70b5abbad6fbf459a4349a0335916588000b5ecd990f01482e38ff",
+        "stdlib": "80cd79c26aac46d72d782de1ecb326061e93c6e688d994b48627ffd668ba63a8",
+    },
+    "1.5.30": {
+        "compiler": "487d8ff9766a6ba570cd15c5225c1600654e7cf1b6ef2b92ed6905528a3e838a",
+        "compiler-embeddable": "b5051dc92725b099c41710bd3f213cd0c1d6f25056d31b2e8cae30903873b741",
+        "stdlib": "c55608e9eb6df7327e74b21e271d324dc523cef31587b8d6d2393db08d6e000c",
+    },
+    "1.6.0": {
+        "compiler": "4bd7a92568fd89c23b7f9f36d4380886beed18d3d54ea6adf49bebae627db805",
+        "compiler-embeddable": "0366843cd2defdd583c6b16b10bc32b85f28c5bf9510f10e44c886f5bd24c388",
+        "stdlib": "115daea30b0d484afcf2360237b9d9537f48a4a2f03f3cc2a16577dfc6e90342",
+    },
+    "1.6.20": {
+        "compiler": "90567c5cf297985d028fa39aa3a7904dc8096173e1c7f3d3f35fe7074581098e",
+        "compiler-embeddable": "be634faaafb56816b6ef6d583e57ab33e4d6e5180cde2f505ccf7d45dc738ef8",
+        "stdlib": "eeb51c2b67b26233fd81d0bc4f8044ec849718890905763ceffd84a31e2cb799",
+    },
+    "1.7.0": {
+        "compiler": "ce85fafb3e24712d62a0d02d277c2d56197d74afdd4f5ca995eaf33d2c504663",
+        "compiler-embeddable": "573935b492e65b93a792eaa6270295532f580cd4f26f9f6eb105ecbafcd182d4",
+        "stdlib": "aa88e9625577957f3249a46cb6e166ee09b369e600f7a11d148d16b0a6d87f05",
+    },
+    "1.7.20": {
+        "compiler": "0e36d98c56f7c9685ab9d9e1fac9be36a5214939adb3f905b93c62de76023618",
+        "compiler-embeddable": "5ec2be1872dc47b9dcb466f1781eded6c59d9eee18657d4b0f1148e619caea36",
+        "stdlib": "7779ec96b9acbf92ca023858ac04543f9d2c3bdf1722425fff42f25ff3acfc9b",
+    },
+    "1.8.0": {
+        "compiler": "1f19f247d337387cbdd75d54e10a6865857c28a533fced50c0c5c9482b3ab9af",
+        "compiler-embeddable": "e9b3a56dbbfdf1e0328d4731b7d7ca789ce0f1f263372ad88dd8decbd1602858",
+        "stdlib": "c77bef8774640b9fb9d6e217459ff220dae59878beb7d2e4b430506feffc654e",
+    },
+    "1.9.0-Beta": {
+        "compiler": "4c7e3972e0ce0be8aa5c8ceeb8eb795f6345685bb57c6f59b649ed70c6051581",
+        "compiler-embeddable": "7429076f8dd2ccd1cce48d7e5bf5b9fadde8afab110f9f4cfe0912756f16d770",
+        "stdlib": "af458cc55cf69e966668e6010c7ccee4a50d553b3504a2e8311dd0c76242d881",
+    },
+    "1.9.20-Beta": {
+        "compiler": "b90980de3a16858e6e1957236d7bb9a729fcd0587a98fb64668866e1975aaa6f",
+        "compiler-embeddable": "5c9de79f0f8d97f2aa4d877449063b1cc2828c17f25a119fc32c776401f058de",
+        "stdlib": "788e48813dd76ad598fff7bef3b1e038d7291741810bd04c6c57037c4d75dac2",
+    },
+    "2.0.0-RC1": {
+        "compiler": "60e31163aa7348166d708cdc9cb47d616b0222e5b11173f35f1adfb61bc3690a",
+        "compiler-embeddable": "12d330c6e98ba42840f1d10e2752a9c53099d4dfa855bc4526d23fe1a1af9634",
+        "stdlib": "bbb2c9b813e6196f9afa9f9add8b395ee384ab1763a0880e084d2942214f1c30",
+    },
+}
 
 def _version_to_tuple(v):
     # we ignore the tag when comparing versions, for example 1.9.0-Beta <= 1.9.0