diff --git a/app/build.gradle.kts b/app/build.gradle.kts
index 4e5aa11a6d..19008bd212 100644
--- a/app/build.gradle.kts
+++ b/app/build.gradle.kts
@@ -393,7 +393,7 @@ dependencies {
     testImplementation("org.robolectric:robolectric:4.16.1")
     // conscrypt-android provides Android JNI libs only; the openjdk-uber variant bundles
     // JVM host natives so Robolectric can initialise the security provider without crashing.
-    testImplementation("org.conscrypt:conscrypt-openjdk-uber:2.6.2")
+    testImplementation("org.conscrypt:conscrypt-openjdk-uber:2.6.3")
 }
 
 tasks.register<Copy>("installGitHooks") {
diff --git a/gradle/verification-metadata.xml b/gradle/verification-metadata.xml
index e3bb171d0d..0eea83571c 100644
--- a/gradle/verification-metadata.xml
+++ b/gradle/verification-metadata.xml
@@ -221,6 +221,7 @@
             <trusting group="org.conscrypt" name="conscrypt-android" version="2.6.2"/>
             <trusting group="org.conscrypt" name="conscrypt-openjdk-uber" version="2.6.1"/>
             <trusting group="org.conscrypt" name="conscrypt-openjdk-uber" version="2.6.2"/>
+            <trusting group="org.conscrypt" name="conscrypt-openjdk-uber" version="2.6.3"/>
          </trusted-key>
          <trusted-key id="4A2E4BE286EDAE3ADB3A3C26C21CE653B639E41A" group="com.bluelinelabs"/>
          <trusted-key id="4BF79B8259007B566D2FCE82296CD27F60EED12C" group="com.google.crypto.tink" name="tink" version="1.7.0"/>