diff --git a/gradle/libs.versions.toml b/gradle/libs.versions.toml
index 597409a141ea..cb7b9e630401 100644
--- a/gradle/libs.versions.toml
+++ b/gradle/libs.versions.toml
@@ -18,7 +18,7 @@ cardviewVersion = "1.0.0"
 checker = "3.21.2"
 coilVersion = "2.7.0"
 commonsHttpclient = "3.1"
-commonsIoVersion = "2.21.0"
+commonsIoVersion = "2.22.0"
 composeBom = "2026.03.01"
 conscryptAndroidVersion = "2.5.3"
 constraintlayoutVersion = "2.2.1"
diff --git a/gradle/verification-metadata.xml b/gradle/verification-metadata.xml
index f51b70ca9d38..1047c1d50f37 100644
--- a/gradle/verification-metadata.xml
+++ b/gradle/verification-metadata.xml
@@ -524,6 +524,7 @@
             <trusting group="org.jsoup" name="jsoup" version="1.22.1"/>
          </trusted-key>
          <trusted-key id="F3BD845679DD6A30F3F50F91597852B0B140F0BC" group="com.caverock" name="androidsvg" version="1.4"/>
+         <trusted-key id="F4DD59C90148BDC52BEB90A4530AA5F25C25011F" group="commons-io"/>
          <trusted-key id="FA77DCFEF2EE6EB2DEBEDD2C012579464D01C06A">
             <trusting group="org.apache" name="apache"/>
             <trusting group="org.codehaus.plexus"/>
@@ -31262,6 +31263,11 @@
             <sha256 value="d2f8b6fd4800b6aaf120f5a38226d5f9d5fc6db837af99e2f9b33067868b9872" origin="Generated by Gradle"/>
          </artifact>
       </component>
+      <component group="org.apache.commons" name="commons-parent" version="98">
+         <artifact name="commons-parent-98.pom">
+            <pgp value="F4DD59C90148BDC52BEB90A4530AA5F25C25011F"/>
+         </artifact>
+      </component>
       <component group="org.apache.commons" name="commons-text" version="1.10.0">
          <artifact name="commons-text-1.10.0.jar">
             <sha256 value="770cd903fa7b604d1f7ef7ba17f84108667294b2b478be8ed1af3bffb4ae0018" origin="Generated by Gradle"/>