diff --git a/app/build.gradle b/app/build.gradle
index 8280a1031450..30fab5ce2129 100644
--- a/app/build.gradle
+++ b/app/build.gradle
@@ -312,7 +312,7 @@ dependencies {
     implementation 'com.caverock:androidsvg:1.4'
     implementation 'androidx.annotation:annotation:1.9.1'
     implementation 'com.vanniktech:emoji-google:0.21.0'
-    implementation("androidx.lifecycle:lifecycle-runtime-ktx:2.8.6")
+    implementation("androidx.lifecycle:lifecycle-runtime-ktx:2.8.7")
 
     // document scanner not available on FDroid (generic) due to OpenCV binaries
     gplayImplementation project(':appscan')
diff --git a/gradle/verification-metadata.xml b/gradle/verification-metadata.xml
index ae92e6eedda0..2e248c5ca2a5 100644
--- a/gradle/verification-metadata.xml
+++ b/gradle/verification-metadata.xml
@@ -1993,6 +1993,11 @@
             <sha256 value="fe096b3e7ab829c1467d44a41805f1a9de61926bbda9c7be42aa2e7fa2de11ae" origin="Generated by Gradle"/>
          </artifact>
       </component>
+      <component group="androidx.lifecycle" name="lifecycle-livedata" version="2.8.7">
+         <artifact name="lifecycle-livedata-2.8.7.aar">
+            <sha256 value="703634525a67b1c6beaaab4f980dfa0bacdf7e143d0b5d51f5ac0d9404400290" origin="Generated by Gradle"/>
+         </artifact>
+      </component>
       <component group="androidx.lifecycle" name="lifecycle-livedata-core" version="2.0.0">
          <artifact name="lifecycle-livedata-core-2.0.0.aar">
             <sha256 value="fde334ec7e22744c0f5bfe7caf1a84c9d717327044400577bdf9bd921ec4f7bc" origin="Generated by Gradle" reason="Artifact is not signed"/>