diff --git a/gradle/libs.versions.toml b/gradle/libs.versions.toml
index dbc8a63e0053..5059bb79695c 100644
--- a/gradle/libs.versions.toml
+++ b/gradle/libs.versions.toml
@@ -80,7 +80,7 @@ sectionedRecyclerviewVersion = "0.6.1"
 shotVersion = "6.1.0"
 slfj = "2.0.17"
 splash-screen = "1.2.0"
-spotbugsGradlePlugin = "6.5.4"
+spotbugsGradlePlugin = "6.5.8"
 spotless = "8.4.0"
 stateless4jVersion = "2.6.0"
 webkitVersion = "1.16.0"
diff --git a/gradle/verification-metadata.xml b/gradle/verification-metadata.xml
index 4e017193f3d1..72ead8077f55 100644
--- a/gradle/verification-metadata.xml
+++ b/gradle/verification-metadata.xml
@@ -355,6 +355,7 @@
             <trusting group="org.dom4j" name="dom4j" version="2.1.4"/>
             <trusting group="org.dom4j" name="dom4j" version="2.2.0"/>
          </trusted-key>
+         <trusted-key id="8FCD23073248F3C28EF9F80380EF47E549604C05" group="jaxen"/>
          <trusted-key id="90EE19787A7BCF6FD37A1E9180C08B1C29100955">
             <trusting group="com.squareup"/>
             <trusting group="^com[.]jakewharton($|([.].*))" regex="true"/>
@@ -534,6 +535,7 @@
          <trusted-key id="F4DD59C90148BDC52BEB90A4530AA5F25C25011F">
             <trusting group="commons-codec"/>
             <trusting group="commons-io"/>
+            <trusting group="org.apache.bcel" name="bcel" version="6.12.0"/>
             <trusting group="org.apache.commons"/>
          </trusted-key>
          <trusted-key id="FA77DCFEF2EE6EB2DEBEDD2C012579464D01C06A">
@@ -23018,6 +23020,11 @@
             <sha256 value="29f7359e62b4c0d168f46dea64bc7135e30500962576c023b2da1cac479663a9" origin="Generated by Gradle" reason="Artifact is not signed"/>
          </artifact>
       </component>
+      <component group="com.github.spotbugs" name="com.github.spotbugs.gradle.plugin" version="6.5.8">
+         <artifact name="com.github.spotbugs.gradle.plugin-6.5.8.pom">
+            <sha256 value="f5d493c031ccc6b92e015868fff94e687808ec674d7fbedbced5598223ecc106" origin="Generated by Gradle" reason="Artifact is not signed"/>
+         </artifact>
+      </component>
       <component group="com.github.spotbugs" name="spotbugs" version="4.7.3">
          <artifact name="spotbugs-4.7.3.jar">
             <sha256 value="df37eab21a7d04aa807808a33e9f7c081451cb02c14b4a2c33119976be498520" origin="Generated by Gradle" reason="A key couldn't be downloaded"/>