diff --git a/app/build.gradle.kts b/app/build.gradle.kts
index 3e65e51dd38..68c9c6b181c 100644
--- a/app/build.gradle.kts
+++ b/app/build.gradle.kts
@@ -394,7 +394,7 @@ dependencies {
     testImplementation("org.robolectric:robolectric:4.16.1")
     // conscrypt-android provides Android JNI libs only; the openjdk-uber variant bundles
     // JVM host natives so Robolectric can initialise the security provider without crashing.
-    testImplementation("org.conscrypt:conscrypt-openjdk-uber:2.6.3")
+    testImplementation("org.conscrypt:conscrypt-openjdk-uber:2.7.0")
 }
 
 tasks.register<Copy>("installGitHooks") {
diff --git a/gradle/verification-metadata.xml b/gradle/verification-metadata.xml
index c2631f066ca..4335d1a1e0a 100644
--- a/gradle/verification-metadata.xml
+++ b/gradle/verification-metadata.xml
@@ -224,6 +224,7 @@
             <trusting group="org.conscrypt" name="conscrypt-openjdk-uber" version="2.6.1"/>
             <trusting group="org.conscrypt" name="conscrypt-openjdk-uber" version="2.6.2"/>
             <trusting group="org.conscrypt" name="conscrypt-openjdk-uber" version="2.6.3"/>
+            <trusting group="org.conscrypt" name="conscrypt-openjdk-uber" version="2.7.0"/>
          </trusted-key>
          <trusted-key id="4A2E4BE286EDAE3ADB3A3C26C21CE653B639E41A" group="com.bluelinelabs"/>
          <trusted-key id="4BF79B8259007B566D2FCE82296CD27F60EED12C" group="com.google.crypto.tink" name="tink" version="1.7.0"/>