diff --git a/gradle/libs.versions.toml b/gradle/libs.versions.toml
index 503436fd..e6ac883b 100644
--- a/gradle/libs.versions.toml
+++ b/gradle/libs.versions.toml
@@ -10,7 +10,7 @@ appstore-api = "v1.0.3"
 arrow = "2.2.0"
 bucket4j = "8.16.0"
 buf = "0.11.0"
-bundletool = "1.18.2"
+bundletool = "1.18.3"
 console-api = "6f77908e977b4223a8b44c34df1ba35a"
 google-cloud-libraries-bom = "26.77.0"
 google-cloud-sql-postgres-socket-factory = "1.28.1"
diff --git a/gradle/verification-metadata.xml b/gradle/verification-metadata.xml
index 34eec396..00fb4b20 100644
--- a/gradle/verification-metadata.xml
+++ b/gradle/verification-metadata.xml
@@ -406,6 +406,14 @@
             <sha256 value="0b27805f37f53e67366f38bd4d5723b85bb283c9d444ae05eff8e9236f118422" origin="Generated by Gradle"/>
          </artifact>
       </component>
+      <component group="com.android.tools.build" name="bundletool" version="1.18.3">
+         <artifact name="bundletool-1.18.3.jar">
+            <sha256 value="ccad18514fd97db010856b2bbed40f481f8ba9349368c97ae54d72e3567d0171" origin="Generated by Gradle"/>
+         </artifact>
+         <artifact name="bundletool-1.18.3.pom">
+            <sha256 value="fa674b39b96cae98015f3850f366cfeb00fe6c7aea2d90b20c017b90e0996dae" origin="Generated by Gradle"/>
+         </artifact>
+      </component>
       <component group="com.android.tools.build" name="gradle" version="8.13.2">
          <artifact name="gradle-8.13.2.jar">
             <sha256 value="e494f7ce75ca6c1abff301d4a70b18fdd3d6af855875f4f85082bb7608f041de" origin="Generated by Gradle"/>